Privacy notice

1. Who we are

Under One Flame is made by Meliorit Consulting AB, a company in Sweden. We decide how and why your personal data is used, which makes us the controller under the EU General Data Protection Regulation (GDPR).

For anything about your data, write to support@underoneflame.com.

2. What we collect and why

The game is in development, and what it collects grows as features arrive. We describe each stage below, so you can see what applies now and what will apply later. We collect only what the game needs to work, to stay fair and to be kept running. We never sell your data.

Now, while the game is in development

• Game data: what you have in the game, such as your Lord, city, buildings, troops, items, battles and reports. This is the game itself; it is stored on our server so the world keeps going when you are away.
• The action log: a record of every action you send in the game (for example starting an upgrade, cancelling it or sending a raid), with the time, your Lord and city, what you did, whether the game accepted it, the app version and which button sent it. We use it to find bugs, answer your questions about what happened, and spot cheating. It is kept for 30 days.
• The item ledger: a record of every item your Lord gains, uses, or tries to use past the daily limit, with when and where it came from. We use it to keep the game balanced and to settle questions about items. It is kept as long as your account exists.
• Messages from the game: the messages the game and we send you in the game's Messages screen, such as a welcome, a new rank or an announcement, and whether you have read them. They are kept for 90 days.
• Server logs: technical records of requests to the game server and of errors, such as the time, the request, how the server answered, your Lord name or ids where a request concerns them, and network information. Our logging service (Microsoft's Application Insights) uses your IP address to estimate a rough location, such as the country and city, and doesn't store the address itself. We use the logs to find and fix problems and to keep the service secure. They are kept for 30 days.
• Notifications on your phone: if you allow notifications, the app schedules them on your phone itself, from timers it already knows (for example when a building is finished). Nothing about them is sent to us or to anyone else. You can turn them off in the game's settings or your phone's settings at any time.
• Emails to us: if you write to us, whether or not you play, we receive your email address and what you write, so we can answer you.
• The waiting list on Discord: if you pick the Notify me about testing role on our Discord server, we can see that your Discord account picked it. We use it only to tell you about testing and to choose testers. You can remove the role at any time.

When you sign in (from the closed alpha)

• Your Google account's email address and a user id. You sign in with Google through Google's Firebase service. Firebase keeps your Google user id, your email address and the name and profile picture your Google account provides, to sign you in. Of these, our own database keeps only the email address and the Firebase user id, beside our own account id, when the account was created and last used, its status (for example a suspension or ban, with the reason), which version of the terms you accepted and when, and which invitation code you joined with. We keep the email so we can reach you about your account and the service (for example a notice about your account, a ban, a purchase dispute, or news for testers). Your email is never shown to other players. We don't send marketing.
• Sign-in records: when you sign in, Firebase Authentication also records technical information about the request, such as your IP address and your device's user agent (which app and system version made the request). Google uses it to keep sign-in secure and to prevent abuse.
• App Check: Google's Firebase App Check, with Google Play Integrity, checks that requests come from our own app, installed from Google Play, on a device that passes Android's integrity checks. To do that, the app asks Play Integrity for an attestation: Google looks at information about the app and your device and returns a verdict, and Firebase turns it into a short-lived App Check token that the app sends with its requests. Our server sees only the token. App Check helps protect the game against requests from unauthorized or modified apps.
• Your Lord name and portrait, and the names you give your cities. You choose them; other players see them in the game. They are never taken from your Google account.
• Support tickets: what you write to us when you report a bug or ask for help in the game, so we can answer you.

If someone signs in with Google without an invitation, Firebase still creates a user for them before our server turns them away. We delete such users after 7 days.

Later, before they arrive in the game

• Messages between players: messages you send to other players in the game, stored so we can deliver them.
• Push notifications: for things only the server knows about, such as a new message, the app will register a token with Firebase Cloud Messaging that lets us send notifications to your device. Allowing notifications on your phone today creates no such token.
• Purchases: if we add purchases, they go through Google Play. We receive a record of what you bought and when, to deliver it to your account and handle disputes. Your payment details stay with Google; we never see your card or bank details.
• Rewarded ads: if we add ads, they are ones you choose to watch for a reward. The ad provider collects data to show ads, as its own privacy policy describes; we will name the provider here before ads appear. Players under 16 get non-personalized ads only, and personalized ads for anyone else need their consent.

We will update this notice before any of these reach the game.

3. Our legal bases

• To provide the game you signed up for (contract, GDPR article 6(1)(b)): your account, email address, game data, Lord name, messages from the game and support tickets, and later messages between players and purchases.
• Our legitimate interests (article 6(1)(f)): server logs, the action log, sign-in records and App Check, to keep the game secure, fair and working, and to prevent cheating and abuse; the item ledger, to keep the game balanced and settle questions about items; answering emails from people who don't have an account; and delivering this website and protecting it against attacks.
• Your consent (article 6(1)(a)), where the law requires it or where you choose: for example the waiting-list role on Discord, push notifications and personalized ads, once they exist. You can withdraw consent at any time, without affecting what happened before.
• Legal obligations (article 6(1)(c)): for example keeping purchase records as Swedish accounting law requires, once purchases exist.

4. Who else handles your data

Providers that work for us. These process data on our behalf, under data processing agreements, and only to provide their service to us:

• Microsoft Azure hosts the game server, its database, its backups and its logs in Azure's Sweden Central region. This website is hosted on Azure too, and served from Azure's network around the world.
• Google Firebase handles sign-in and App Check, and later push notifications. Firebase stores its data on Google's servers, which may be outside the EU (see below).
• Cloudflare runs our domain's name service and protects the game and this website against attacks. It also forwards the email you send to support@underoneflame.com to our mailbox. Traffic passes through Cloudflare's network, which sees technical data such as IP addresses.

Providers that also decide for themselves. Some services we rely on are run by companies that use some of the data for their own purposes too, under their own privacy policies rather than under our agreements with them:

• Google Play distributes the app and, later, handles purchases. Your Google account, what you do on Google Play and your payment details are covered by Google's privacy policy. Google also uses some technical data from Firebase and Play Integrity for its own purposes, such as security, as Firebase's privacy information describes.
• Gmail, Google's email service: email sent to support@underoneflame.com is forwarded to our mailbox, which is a Gmail account, so the emails you send us are stored by Google under its own terms and privacy policy.
• Discord runs our community server. Discord's privacy policy applies to what you share there; how we use the waiting-list role is described above.

Outside the EU. The game's database, its backups and the server logs stay in Sweden, but Microsoft, Google, Cloudflare and Discord may also process data in the United States and other countries outside the EU and the European Economic Area. Microsoft, Google and Cloudflare are certified under the EU–US Data Privacy Framework, which the European Commission has found to protect personal data adequately; you can look up each certification at dataprivacyframework.gov. Their data processing terms with us also include the Commission's standard contractual clauses, for transfers the framework doesn't cover. Where Google and Discord act on their own behalf, their privacy policies explain the safeguards they use. You can ask us for a copy of the safeguards that apply to our providers.

We don't share your data with anyone else, unless the law requires us to.

5. How long we keep it

• Your account and game data: as long as your account exists. When it is deleted, so is your data (see Delete your account and data).
• The item ledger: as long as your account exists. When the account is deleted, its rows are deleted or made anonymous, so they can't be linked back to you.
• The action log: 30 days, then deleted automatically.
• Messages from the game: 90 days from when they were sent, read or not, then deleted automatically.
• Backups: Azure backs up our database automatically, so it can be restored to any moment of the last 7 days. Once a week we also save a copy of the database to storage in the same region, kept for about 3 months (then held about a week more before storage removes it for good), so that a mistake noticed late can still be undone. The weekly copies leave out the action log. Data we delete stays in the backups until they expire; we can't remove single players from a backup.
• Your Firebase user: as long as your account exists. When we delete it, Google removes it from Firebase's live and backup systems, which Google says can take up to 180 days. Firebase keeps sign-in records for a limited time, as its privacy information describes.
• Server logs: 30 days, then deleted automatically.
• Support emails and tickets: as long as we need them to help you. If you have an account, no longer than it exists; if you don't, we delete your emails within 12 months of our last exchange. In both cases, we keep them longer only if we need them to settle a dispute.
• The waiting-list role on Discord: as long as you keep it.
• Visits to this website: we keep no records of visits ourselves. Microsoft Azure and Cloudflare keep short-lived technical records of requests, for as long as they need them to deliver and protect the pages.
• Purchase records: as long as Swedish accounting law requires, once purchases exist.

While the game is being tested, we may reset the game world. A reset removes game data but not your account.

6. Your rights

Under the GDPR you have the right to:

• access your data and get a copy of it;
• rectification of data that is wrong (your email address updates by itself when you sign in with a changed Google email);
• erasure of your data (see the next section);
• object to processing based on our legitimate interests, and to ask us to restrict processing;
• data portability: receive the data you gave us in a common machine-readable format;
• withdraw your consent where processing is based on it.

To use any of these rights, email support@underoneflame.com, if you can from the email address of the Google account you play with, so we can confirm the account is yours (if you can't, see how we confirm it's you under Delete your account and data). Once the game has support tickets, you can also ask through one. We answer within one month. A copy of your data includes your account, your game data, your item ledger, your messages from the game and what the action log holds about you at the time.

If you think we handle your data wrongly, please tell us first so we can put it right. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se, or to the data protection authority where you live.

7. Delete your account and data

What we delete:

• your account, with its email address, the terms you accepted and its status;
• your character in every game world: your city leaves the map and your Lord name becomes free. Where other players' battle reports mention you, your name is replaced with a placeholder that can't be linked back to you;
• your Firebase user, with the email address, name and profile picture Firebase kept to sign you in;
• your messages from the game, your support tickets and, once they exist, your messages to other players and push notification tokens;
• your rows in the action log and the item ledger: deleted, or made anonymous so they can't be linked back to you.

When: we confirm and carry out the deletion, including deleting your Firebase user, within one month of your request, usually much sooner.

What stays for a while: deleted data remains in backups until they expire: up to 7 days in Azure's automatic backups, and up to about 3 months in the weekly copies (which leave out the action log). Server logs may hold your Lord name or ids until they expire (30 days). After we delete your Firebase user, Google removes what is left of it from Firebase's live and backup systems, which Google says can take up to 180 days; that doesn't change our own deadline above. Purchase records, once purchases exist, are kept as long as accounting law requires. The record of the invitation code you used keeps only that it was used.

A deleted account can't be restored. The app will link to this section; a deletion screen inside the app itself will come later, and until then, email is the way.

8. Minimum age

Players must be 13 or older. If you are under the age of majority where you live, you need a parent's or guardian's permission to play (see the terms of use). If we learn that an account belongs to someone younger than 13, we delete it.

9. This website

This website sets no cookies and uses no analytics, trackers or advertising, and it loads nothing from other sites. Our hosting providers (Microsoft Azure and Cloudflare) handle the requests your browser sends, including your IP address, to deliver the pages and protect them against attacks. That is based on our legitimate interest in running a working, secure website; how long the records are kept is under How long we keep it.

10. Changes to this notice

We will update this notice when the game changes what it collects, for example when sign-in, messages between players, push notifications, purchases or ads arrive. The date above shows when this page last changed. If a change matters to you, we will also tell you in the game.