Village Defense – Privacy Policy
This Privacy Policy explains how Village Defense collects, uses, stores, shares and protects information when you use the game.
1. Data we process
Account information
An account is required to keep your progress and operate account-based features such as the leaderboard. Depending on your sign-in method, we process:
- Email address — for email sign-up, Sign in with Google, or Sign in with Apple where an email address is provided
- Authentication provider identifier — a technical identifier associated with your Google or Apple sign-in
- Username — chosen by you and used for game and leaderboard features
We do not have access to your plaintext password. Authentication and credential handling are provided through Supabase Auth.
Gameplay data
| Data | Purpose |
|---|---|
| Run results (wave reached, score, duration, kills) | Leaderboard, history, reward calculation, game balancing and anti-cheat |
| Progress summary (best score, highest wave, total runs) | Progress tracking and leaderboard ranking |
| Diamond balance and diamond transaction ledger | In-game currency accounting, reward processing and auditing |
| Tower upgrade levels | Persisting game progress across sessions and devices |
Device and technical data
- App-generated random device identifier — not a hardware identifier; used with run submissions for security, anti-cheat and support
- Platform, app version and build number — used for compatibility, maintenance and update controls
- Firebase installation identifier — used by Firebase services such as Remote Config to provide configuration values to an app installation
- Error and crash information — processed through Sentry and may include diagnostic context, device model, operating system version and other technical information associated with an error
Analytics
Google Firebase Analytics is used to measure gameplay and app events such as run start and end, wave progression, tower actions, rewards, advertising steps and purchase steps. We use this information to understand game performance, diagnose problems, balance gameplay and improve Village Defense.
Advertising
An optional rewarded ad may be offered at the end of a run. Watching an ad is never required to play or progress in the game.
Advertising is provided by Google AdMob. AdMob may process advertising identifiers and device or technical information for advertising, measurement, security and fraud-prevention purposes.
On iOS, access to the device's IDFA for tracking is subject to Apple's App Tracking Transparency permission.
For users in the European Economic Area (EEA), the United Kingdom and Switzerland, where required, advertising consent and privacy choices are collected through Google's User Messaging Platform before personalised advertising is used. Where available, users can review or change applicable privacy choices through the privacy options provided in the app.
For rewarded ads, Village Defense uses Google AdMob's server-side verification system. The game may provide your account identifier and the relevant run identifier to the verification process so that our server can confirm that an advertising reward was legitimately earned.
See Google's partner policy for more information about how Google processes data.
In-app purchases
Diamond packs are sold through the Apple App Store and Google Play. Your payment card or bank details do not reach Village Defense. Payment processing is handled by the relevant store.
We receive transaction-related information such as a store transaction identifier or purchase token. This information is verified with the relevant store before diamonds are credited and may be retained to prevent the same purchase from being credited more than once, prevent fraud and maintain transaction integrity.
2. Why we process information
We process information only for purposes connected with operating, protecting and improving Village Defense.
- Providing the service: creating and authenticating accounts, storing progress, operating gameplay features, leaderboards and purchases
- Security and integrity: preventing cheating, duplicate rewards, payment abuse, fraud and unauthorized access
- Improving the game: analytics, diagnostics, balancing, maintenance and technical performance
- Advertising: providing optional rewarded advertising and verifying earned rewards
- Legal and platform requirements: maintaining records where required for transaction integrity, accounting, legal compliance or store obligations
Where applicable privacy law requires a specific legal basis, processing may be based on performing our agreement with you, our legitimate interests in operating and securing the game, compliance with legal obligations, or your consent where consent is required. You may withdraw consent for processing based on consent using available privacy controls or by contacting us where applicable.
3. What is publicly visible
Your username, highest wave and best score may be visible to other players on the leaderboard. Your email address is not displayed to other players.
You may choose a pseudonymous username. Do not use a username containing personal information that you do not want other players to see.
4. Service providers
| Service | Role |
|---|---|
| Supabase | Authentication, account data, gameplay data and backend infrastructure |
| Google (Google Sign-In, Firebase Analytics, Firebase Remote Config, AdMob, Google Play) | Authentication where used, analytics, app configuration, advertising, consent tools and purchase processing or verification |
| Apple (Sign in with Apple, App Store) | Authentication where used and App Store purchase processing or verification |
| Sentry | Error, crash and diagnostic reporting |
We do not sell personal data for monetary consideration. Service providers may process information as necessary to provide the services described above. Depending on applicable law, certain advertising-related processing may be considered targeted advertising or sharing of personal data. Where required, applicable privacy choices are provided.
5. International processing
Village Defense is available internationally and uses service providers that operate in multiple countries. As a result, information may be processed in countries other than the country where you live.
Where applicable law requires safeguards for international transfers of personal data, transfers are handled using safeguards or transfer mechanisms permitted under applicable law and made available by the relevant service providers.
6. Retention and deletion
You can delete your account in the app via Settings → Danger Zone → Delete Account, or start a verified request using the Account & Data Deletion page if you cannot access the app.
When your account is deleted, your authentication account, profile, leaderboard entry, progress, diamond wallet, tower upgrades and account-linked session data are permanently deleted.
Certain gameplay, transaction and purchase-verification records may be retained where reasonably necessary for security, anti-cheat, fraud prevention, transaction integrity, accounting, legal or platform requirements. Where retained, these records are de-linked from your account where supported by the underlying system and are not restored if you later create a new account.
Retained gameplay records may still contain technical fields such as an app-generated device identifier. Purchase-verification records may contain store transaction identifiers or purchase tokens needed to prevent duplicate credits or fraud.
The current system does not assign a fixed retention period to these de-linked records. They are retained only for as long as reasonably necessary for the purposes described above or as required by applicable law or platform obligations.
Information previously processed by service providers such as Google/Firebase/AdMob, Apple or Sentry may remain subject to those providers' own retention and legal requirements.
For more detail, see the Account & Data Deletion page.
7. Your privacy rights
Depending on where you live, applicable privacy law may give you rights regarding your personal data. These rights may include the right to:
- request access to personal data associated with you
- request correction of inaccurate information
- request deletion of personal data
- object to or restrict certain processing where applicable
- request data portability where applicable
- withdraw consent where processing is based on consent
- opt out of certain targeted advertising or data sharing where applicable
- submit a complaint to an applicable data protection authority
Türkiye (KVKK)
If you are in Türkiye, you may have rights under Personal Data Protection Law No. 6698 (KVKK), including rights to learn whether your personal data is processed, request information about processing, request correction or deletion where applicable, object to certain processing, and exercise other rights provided by applicable law. You may submit applicable requests by contacting us at the email address below.
Advertising privacy choices may also be available through the privacy options presented inside the app.
To exercise an applicable privacy right or ask a privacy-related question, contact us at erkamcengiz.dev@gmail.com. We may need to verify your identity before completing certain requests.
8. Children
Village Defense is not directed at children under 13 and we do not knowingly collect personal data from children under 13.
Where local law requires a higher minimum age for a person to independently consent to data processing, the applicable local requirements apply. If you believe a child has provided personal data in a way that is not permitted, contact us and we will take appropriate steps.
9. Security
We use reasonable technical and organizational measures designed to protect account and gameplay information. However, no internet-based service or storage system can be guaranteed to be completely secure.
10. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to the game, service providers, legal requirements or our data practices.
Material changes may also be communicated through the game or its store listing where appropriate. The "Last updated" date at the top of this page reflects the current version.
11. Contact
For questions, privacy requests or other inquiries regarding this policy: erkamcengiz.dev@gmail.com