1. Who we are
Shadow of God Publishing (“we”, “us”) is the publisher of record for Tribute of the Twelve Realms and the data controller for personal data described in this policy. You can reach us at [email protected]. If you are in the EU or UK and would prefer to write to a postal address, ask and we will provide one.
2. What we collect
We collect as little as the game can function on. In practice that is four categories:
- Game data stored on your device
- Save files, settings, match history and unlocks. This stays on your device unless you enable cloud saves, in which case it is stored by the platform (Steam Cloud, iCloud, or Google Play Games) under that platform's policy, not ours.
- Platform identifiers
- Where the platform provides one, we may see a pseudonymous player ID and the display name you chose there — used only to show your name in the game. We never receive your platform account email. The launch build has no online multiplayer, so there is no match traffic to process.
- Diagnostics you choose to send
- Crash reports and performance diagnostics are off by default and asked for on first launch. When enabled they include device model, OS version, game version, a random install ID and the crash stack. They contain no name, email or precise location.
- Things you send us directly
- Your email address if you subscribe to the courier newsletter or request the print & play; the contents of support mail and bug reports; and, for physical orders, the name, shipping address and order reference held by our fulfilment partner. Payment card details never reach us — the storefront or payment processor handles them.
The game does not access your contacts, photos, microphone, camera, calendar, health data or precise location, and does not use tracking as defined by Apple's App Tracking Transparency framework. No ATT prompt appears because there is nothing to ask for.
3. Why we collect it, and on what legal basis
Under the UK and EU GDPR, our lawful bases are: performance of a contract for delivering purchases and shipping physical goods; consent for optional diagnostics and for the newsletter, which you can withdraw at any time; legitimate interests for keeping the site and downloads available and secure; and legal obligation for the accounting records we must keep for purchases.
We do not profile players, do not make automated decisions with legal effect, and do not use game data to target advertising anywhere.
4. Platform-specific notes
Each storefront also processes data as its own controller. What they collect is governed by their policies, not this one.
- SteamValve handles your purchase, Steam ID, friends list and Steam Cloud saves. We see only your Steam ID and persona name, and only to display it in game.
- Apple App StoreOur App Privacy label declares: Diagnostics (optional, not linked to you) and Identifiers (a pseudonymous player ID, used only for app functionality). No data is used to track you across apps or websites.
- Google PlayOur Data safety section declares optional crash diagnostics, encrypted in transit, with an in-app deletion route. The app requests only the INTERNET permission.
- itch.io & direct downloaditch.io processes the purchase. The direct Android build is identical and contains no additional collection.
- This websiteNo advertising or analytics cookies. Our host keeps standard server logs, including truncated IP addresses, for up to 30 days for security. The newsletter form stores only the address you type.
5. Children
The game is not directed to children under 13 (or under 16 in the EEA and UK, where local law sets that age). We do not knowingly collect personal data from children in those groups, and the newsletter is not offered to them. If you believe a child has given us personal data, write to [email protected] and we will delete it promptly. Because the app is not a mixed-audience or child-directed app under Google Play's Families policy, it carries no Families programme SDKs.
6. Who else sees it
A short list of processors, each bound by contract to use the data only on our instructions: our website and download hosting provider; our crash-reporting provider, if you opted in; our email delivery provider for the newsletter and support mail; and our print-and-fulfilment partner for physical orders. We disclose personal data otherwise only where the law requires it, or to protect the rights and safety of players.
7. How long we keep it
Crash reports are kept for 90 days. Newsletter addresses are kept until you unsubscribe, and every message carries a one-click unsubscribe link. Support correspondence is kept for 24 months. Order records are kept for as long as revenue and accounting law requires, typically six to seven years.
8. Your rights
Depending on where you live, you have the right to access a copy of your data, correct it, delete it, restrict or object to processing, withdraw consent, and receive your data in a portable format. Californian residents additionally have the right to know, delete, correct and to opt out of sale or sharing — we do not sell or share, so there is nothing to opt out of, and we will not discriminate against you for exercising any right.
We answer within 30 days and never charge a fee. If you are unhappy with our answer you may complain to your local supervisory authority — in the UK, the Information Commissioner's Office.
9. Deleting your data
In the game: Settings → Privacy → Delete my data removes any diagnostics tied to your install, and takes effect within seven days. Off-device deletion requests, including account and data deletion for players who no longer have the app installed, go to [email protected] with the platform you played on. Local save files are removed by uninstalling the game or by clearing them in Settings → Data.
10. International transfers
Our servers and processors may be located outside your country, including in the United States. Where data leaves the UK or EEA we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with the technical safeguards described below.
11. Security
All traffic between the game, this site and our servers is encrypted in transit with TLS. Access to production data is limited to the people who need it and protected by multi-factor authentication. No system is perfect; if a breach affects your rights we will notify you and the relevant regulator within the time the law allows.
12. Changes to this policy
If we change anything material we will raise the version number, update the effective date, and tell newsletter subscribers and in-game players before the change takes effect. Previous versions are available on request.
13. Contact
Privacy and data requests: [email protected]. Everything else about playing the game: the support page.