Privacy policy

Castle Attack is a location-based game provided by ICECLIP LLC. This policy explains how information is used in the app. For privacy questions, email info@castle.red.

Information the game uses

• Account and game information: an anonymous account identifier, your chosen username, gold, knights, locations you control, game actions, and preferences. A guest account still has an identifier so your progress can be saved.
• Location: approximate or precise location, when you allow it, to show nearby businesses and enable location-based gameplay. Map views and location searches also send coordinates or map areas to map, business-search, and geocoding services. You can change location permission in your device settings.
• Community content: forum posts, replies, messages, and related identifiers. Your username, public posts, controlled locations, and some game activity may be visible to other players. Avoid posting sensitive information.
• Purchases: product identifiers, purchase tokens or transaction identifiers, and purchase history to verify purchases, deliver gold, and prevent fraud. Apple or Google handles payment; Castle Attack does not receive your payment card details.
• Device and service information: notification tokens, device or installation identifiers, IP address, app and map interactions, crash logs, and performance diagnostics used by the app and its service providers.
• Support requests: your email address and information you choose to send when contacting support.

Why information is used

Information is used to operate the game, save progress, find nearby locations, provide community features and notifications, verify purchases, respond to support requests, protect accounts, prevent fraud, and diagnose and improve services.

Services and sharing

The app uses Firebase and Google Cloud for accounts, database storage, and server functions; Expo and platform notification services for notifications; Apple Maps on iOS and Google Maps on Android; and OpenStreetMap/Overpass business search and BigDataCloud geocoding. These services receive the information needed to handle their requests. Google Maps may use device identifiers, approximate location derived from IP, map interactions, and diagnostics to operate and improve its services. Apple and Google process store transactions under their own policies.

Information may also be disclosed when required by law or to protect users and prevent fraud. Content you publish in the game is visible to its audience. This version of the app does not use your data for advertising.

Security and retention

App-to-server data is encrypted in transit. No system can guarantee absolute security. Account and game data is retained while needed to provide the game, unless you request deletion. Purchase and security records may be retained as described below.

Your choices and account deletion

You can manage location and notification permissions in device settings and notification preferences in Profile. To request deletion of your account and associated personal data, use Profile → Request account deletion or follow the account deletion instructions. You can request deletion without reinstalling the app. Support verifies ownership before processing requests.

Deletion covers your profile, stored location data, game progress, notification tokens, and associated posts or messages. Limited purchase, security, or dispute records may be retained where required by law or needed to prevent fraud or resolve a dispute. Support will explain any retained data, the reason, and retention period when handling your request.

Policy changes

This policy may be updated when the game or its practices change. The current policy will be available here and through Profile in the app.