Privacy policy

Last updated: 2026-10-21

NobleWars is a game played on a map of the real world. This policy says what we collect while you play, why, who else handles it, and what you can ask of us. NobleWars is run by Andrei Tataru ("we"). For anything about your data, write to andreitataru.app.dev@gmail.com.

What we collect

• Your account: your player name, your email address and your password, which we store only as a one-way hash. If you sign in with Google or Apple, we receive an account identifier and, when they share it, your email address.
• Your location, while the map is open: the app sends your GPS position and its accuracy. We use it to check game rules that depend on where you stand (founding a holding, visiting it, collecting supply wagons) and to show you what is around you. Unless you turn on "Hide me on the map", other players near you see you as a knight on the map for 2 minutes after each update. We keep only your latest position, and delete it once other players stop seeing it. To spot faked locations we also keep your last believable position for up to 12 hours, and when your position jumps further than anyone could travel we note the distance, time and speed of the jump (not where), kept for 30 days. The app does not use your location in the background.
• What you build in the game: your holdings stand at real places you chose, and every player can see them on the map with your player name. Armies, reports, guilds, rankings and similar game records are kept to run the game.
• What you write: guild chat messages, direct messages, the reasons you give when you report a message, and the players you hide.
• Your device: a push notification token, if you allow notifications, and the language of the app.
• Technical records: our server logs each request (its time, the screen or action, and whether it worked) to keep the service working. It does not log IP addresses; it uses them only for a moment, in memory, to limit how often anyone can try to sign in. When the app or the server runs into an error, we keep a short report of it (what went wrong, on which screen, the app version and whether the phone runs Android or iOS, never who you are) for 30 days after it was last seen, to fix it.

We do not show ads, we do not sell or rent your data, and we do not track you across other apps or websites.

Why we use it

• To provide the game you signed up for (your account, the map, the rules, notifications, messages). This is necessary for our agreement with you.
• To keep the game fair and safe: stopping abuse, reviewing reported messages and protecting accounts. This is our legitimate interest.
• To send you the emails you ask for, such as a password reset code.

Who else handles it

We use a few providers who process data only on our behalf: our hosting provider (where the server and database run), Expo, Apple and Google (to deliver push notifications), Google and Apple (only if you sign in with them) and an email provider (for password reset emails). Some of them may process data outside the European Union, under the safeguards the GDPR requires, such as standard contractual clauses.

How long we keep it

We keep your account data while your account exists. When you delete your account, we delete your email, password, sign-in links, location, push token, sessions, the messages you sent and your blocks, and we replace your name with an anonymous one. Your holdings stay on the map as ruins without your name, because they are part of other players' games, and battle reports keep the anonymous name.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to receive it in a portable form, or to stop or limit a use of it. You can change your name and delete your account yourself in the app (Profile, then Delete account), or see how to delete your account. You can also complain to a data protection authority, such as the CNPD in Portugal or the AEPD in Spain.

Children

NobleWars is not meant for children under 16. If you are younger, you may play only with the permission of a parent or guardian. If you believe a child gave us data without that permission, write to us and we will delete it.

Changes

If we change this policy, we will update the date at the top and, for important changes, tell you in the app.