Privacy Policy
In short. Anvilstead doesn't ask you to sign up, or for your name or your email. The whole game runs on your phone. The app creates a random identifier and uses it to keep a backup of your game on our server, so you don't lose it when you change phones. If you use the notice board, other players see your player number next to what you ask for and on the pieces you forge for them; nothing else. The game is free: it has rewarded videos from Google AdMob, which you only see when you ask for one, and optional purchases charged by Apple or Google, never by us. It has no third-party analytics. We don't collect your location, your contacts, your photos or your microphone. You can delete your account at any time in Settings › Account › Delete account.
Who is responsible for your data
Consultoría EHERO S.L.U. (tax ID B72671100), Rúa Emilia Pardo Bazán 25 A2, 36204 Vigo (Pontevedra), Spain.
Contact for anything on this page: info@consultoriaehero.com.
What we collect and why
Your account
- A random identifier created by the app on your phone, and whether the phone is iOS or Android. It is not the advertising identifier and it isn't derived from anything about you: it is the key your game is saved under.
- Your player number, shown in Settings › Account, so support can find your account.
- When you play: which days your game connects to our server, how many times that day and when the last time was. That tells us how many people play and whether they come back.
- Which country you play from: we work it out from the IP address of your connection when you come in and store only the country (for example, "Spain"), not the address. That tells us which countries the game is played in.
The backup of your game
- Your progress, as the game saves it: heroes with their gear, classes and attributes, forged pieces, blueprints, materials, gold and gems, the village houses and their upgrades, orders, expeditions, the Pageant and the game's records.
- With every backup, when it was saved, its size and which app version uploaded it, so we can help you if something goes wrong.
- If you take your account to another device, the eight-character code the game creates: it lasts ten minutes and we store it in a form that can't be read back, with the time it was used.
- Your sound settings stay on your phone.
The backup is used to give your game back to you. We read it to help you if you write to support and to work out overall figures on how the game is going (how many players reach each order or how many rewarded videos are watched in a day, for example). No other player can see it. There are no leaderboards.
The notice board
On the notice board one player asks for a piece and another forges it. There are no names, no messages and no text written by anyone: only pieces from the game.
- If you post a request, we store which piece you ask for, at which quality and when. Other players see it on their board with your player number.
- If you deliver a piece for someone else's request, we store which piece you delivered and when. Whoever receives it sees your player number on that piece, as the mark of who forged it.
Your player number is the only thing of yours another player sees, and it says nothing else about you.
Ads
Anvilstead shows rewarded videos, and only when you tap to watch one: there are no banners and no ads that pop up on their own. They are served by Google AdMob, whose component is built into the app. If you buy "No videos" (formerly "Full game"), the app stops requesting ads.
- To serve an ad and measure that it was seen, Google receives data from the device: the IP address (from which it derives an approximate location, such as the country), the model, system and language, device and app identifiers, and which ad you saw and whether you tapped it.
- The device's advertising identifier is used only if you allow it: on iPhone, through Apple's "allow tracking" prompt; on Android, according to the ad settings of your Google account. If you say no, ads are not personalised.
- In the European Economic Area, the United Kingdom and Switzerland, before the first ad we ask you with Google's consent form. You can change your answer at any time in Settings › Ad privacy.
- We don't receive that data or link it to your game: all we learn about the ad is that it finished, so we can give you the reward, and how many you have watched each day, a count the game keeps in your progress.
How Google uses this data: policies.google.com/technologies/partner-sites.
Purchases
"No videos" and the gem packs are bought with real money and are optional. The payment is handled by Apple (App Store) or Google (Google Play) with your phone's account: we never see your card or your payment details. The app receives from the store which product you bought and the transaction identifier, in order to deliver it; what you bought is recorded in your game and, with it, in its backup.
Technical data
Your IP address is part of any internet connection and reaches our server with every request. We use it only for a moment, to limit how many requests a single connection can make and to know which country you play from; we don't store the address with your game. The hosting provider keeps the usual server logs. These web pages set no cookies.
What we do NOT collect
- No name, email, phone number or date of birth.
- No GPS or location permission, no contacts, photos, camera, microphone or health data. All we know about where you are is the country, from your connection.
- No payment data: Apple and Google handle the charges.
- No third-party analytics or crash reporting: we work out usage figures ourselves from what this page describes. The only component from another company in the app is Google's ads component.
- We don't read the device's advertising identifier ourselves: only Google's ads component uses it, and only if you allow it.
Who we share it with
| Who | What for |
|---|---|
| Our hosting provider | Running the server where the backup of your game is kept, in the European Union. |
| Google Ireland Limited (AdMob) | Serving and measuring the rewarded videos. It receives the data described under "Ads" straight from your device, and may process it outside the European Union with the safeguards explained in its policy. |
| Apple and Google, as stores | Charging for purchases. They are the ones who handle your payment data. |
We don't sell your data or hand it to anyone else.
Why we are allowed to
- To give you the game you asked for (performance of a contract): keeping the backup of your game, taking your account to another device, the notice board between players and delivering what you buy.
- Your consent: showing you ads and, if you agree, personalising them. You can withdraw it at any time in Settings › Ad privacy.
- Our legitimate interest: keeping the service secure, stopping abuse and knowing, in overall figures, how many people play, from which countries, how far they get and how many videos are watched, so we can improve the game.
How long we keep it
- Your account and the backup of your game: for as long as the account exists. You can delete it yourself in Settings, or ask us to.
- The days you have played, the videos you have watched each day and the country you play from: for as long as the account exists; they are deleted with it.
- The code for taking your account to another device: it expires after ten minutes, and its record is deleted with the account.
- Notice board requests: the ones already closed (collected or withdrawn) are deleted after seven days, and all of yours are deleted with the account. Your number is removed from the pieces you forged for others; if the other player had already collected one, the mark with the number stays in their game, where it no longer leads to any account.
- Ad data: Google keeps it under its own policy; we don't hold it.
- Server backups: they are rotated, so a deletion can take a few more days to disappear from every copy.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict what we do with it, to object to a use, or to give it to you in a portable format.
Write to info@consultoriaehero.com with your player number (Settings › Account), so we know which game is yours. We answer within one month.
If you think we got it wrong, you can complain to the Spanish Data Protection Agency, www.aepd.es, or to the authority in your own country.
How to delete your account
Open Settings › Account › Delete account: your player number and the backup of your game are deleted from the server right away and can't be recovered. If you can no longer open the game, write to us and we'll delete it within 30 days. The steps, and what is kept, are in Delete your account.
Uninstalling the app doesn't delete the account: the backup stays on our server.
Age
Anvilstead is not meant for children under 14.
Changes
If we change how the game handles your data, we update this page and change the date above.