Privacy Policy

Effective Date: January 1, 2025

Introduction

This Privacy Policy explains how we collect, use, and protect your personal information when you use the Immortal Tiger mobile application (the "App"). By using the App, you agree to the practices described in this Privacy Policy.

Please note that Immortal Tiger is a passion project developed by a single individual. For more information on the nature of the project and the associated risks, please review our Terms of Service.

1. Personal Information We Collect

We collect the following personal information to provide and improve the App's services:

• Email Address: Used for registration, login, and password recovery.
• Age: Used to verify that users meet the minimum age requirement.
• Device ID (Hashed and Encrypted): Used for frictionless login and account management.
• Character Names: Used for player identification within the game and visible to other players.
• Chat Messages: In-game text chat communications are stored temporarily only during your active game session. Messages are automatically deleted when you close the game or log out. We do not maintain chat history or archives. Reported messages may be retained for up to 7 days for investigation purposes only.
• User Reports and Blocks: Records of reported content and blocked users to maintain a safe gaming environment.

2. Age Verification and Google Play Age Signals

2.1 What is Google Play Age Signals?

Google Play Age Signals is a service provided by Google that allows us to verify the age of users and determine if parental approval is required for users under 18 years old. This system helps us comply with legal requirements in various jurisdictions that mandate age verification for certain app content and features.

2.2 Information Collected Through Age Signals

When you use the App, we receive the following information from Google Play Age Signals API:

• Age Category: Your age band (0-12, 13-15, 16-17, or 18+) as verified by Google Play.
• User Status: Whether you are an adult (18+), a supervised minor (under 18 with parental account), or unknown (age not verified).
• Parental Approval Status: For minors, whether a parent has approved your use of this App.
• Install ID: A unique identifier assigned by Google Play to supervised user installs, used solely for tracking revoked app approvals.

2.3 Purpose of Age Verification

We use age verification data exclusively for the following purposes:

• Legal Compliance: To comply with age verification laws (Texas SB2420, Utah HB311, Louisiana Act 440, and similar legislation).
• Content Filtering: To ensure age-appropriate content is provided to users based on their age group.
• Feature Access Control: To restrict or enable features (such as in-app purchases, chat, social features) based on age and parental approval.
• Parental Approval Verification: To verify that minors have received parental consent before accessing the App or making purchases.
• Safety Protections: To apply enhanced safety measures for younger users, including stricter content moderation and privacy protections.

2.4 Install ID Collection and Usage

For Supervised Users Only (Under 18): When a user under 18 years old uses the App with parental supervision, Google Play provides us with an Install ID.

Purpose of Install ID:

• To track and respond to revoked app approvals when a parent withdraws consent.
• To ensure we immediately disable the App for users whose parents have revoked approval.
• To maintain compliance with parental consent requirements.

Install ID Storage:

• Install IDs are stored on our secure backend servers located in Europe.
• Install IDs are retained only for the duration of the user's account lifetime.
• Install IDs are encrypted and protected with the same security measures as other personal data.
• Install IDs are deleted within 30 days of account deletion.
• Install IDs are NEVER used for tracking, advertising, or any purpose other than revocation management.

Adult Users: Users aged 18 and above do not have Install IDs. Google Play does not provide Install IDs for adult users.

2.5 Revoked App Approvals

Parents can revoke their approval for their child to use the App at any time through Google Family Link. When this occurs:

1. We receive notification through Google Play Age Signals API or Google Play Console.
2. We immediately disable all app features for the affected user.
3. The user will see a message explaining that parental approval has been revoked.
4. The user's account will remain in a suspended state until parental approval is reinstated.
5. If approval is not reinstated within 90 days, the account may be scheduled for deletion.

Revocation List Access: We access the list of revoked Install IDs through Google Play Console. This list is retained by Google for 3 months and downloaded by us periodically (typically daily) to ensure compliance.

2.6 Data Retention for Age Signals

Temporary Caching: Age verification data received from Google Play Age Signals API is cached in memory for a maximum of 30 minutes to optimize performance. This cache is automatically cleared and is never written to permanent storage.

No Permanent Storage: We do not permanently store age categories, user status, or parental approval status in our database. This information is requested fresh from Google Play each time it is needed.

Install ID Storage: Install IDs for supervised users are stored in our backend database for revocation tracking purposes only. This is the ONLY age-related data we store permanently, and only for users under 18 with parental supervision.

2.7 Your Rights Regarding Age Verification

You have the following rights concerning age verification:

• Verify Age: You can verify your age at any time through Google Play Store settings.
• Parent Control: If you are a parent, you can manage your child's app access through Google Family Link, including revoking approval at any time.
• Data Access: You can request information about what age-related data we have collected by contacting us at [email protected].
• Opt-Out: If you do not wish to provide age verification, you may be unable to use certain features or the App may be unavailable in jurisdictions that require age verification.

3. Purpose of Collecting Personal Information

We collect personal information for the following purposes:

We collect personal information for the following purposes:

• Account Management: To register and authenticate users.
• Password Recovery: To assist users in regaining access to their accounts.
• Age Verification: To ensure compliance with age restrictions.
• In-Game Communication: To enable players to communicate within the game through real-time text chat features.
• Content Moderation: To monitor and moderate user-generated content (character names and chat messages) to ensure compliance with our Terms of Service and Community Guidelines.
• Safety and Security: To prevent harassment, abuse, and inappropriate content through automated filters and user reporting systems.

4. Analytics and Tracking Technologies

We use Firebase Analytics to:

• Measure app performance.
• Analyze user interactions to improve the App.

Data collected through Firebase Analytics is processed in an aggregated and pseudonymized manner. It is used for statistical analysis and operational purposes to help us understand user behavior and improve the App.

5. Sharing and Disclosure of Information

We do not sell your personal data. We may share or disclose your information to the following third-party service providers who assist us in operating the App:

• Google Firebase: For analytics and to improve app performance. You can review Firebase's privacy policy here.
• Google AdMob: To display advertisements in the App. AdMob may collect data to serve personalized ads. You can review Google's advertising policies here.
• Google Forms: For player reporting and moderation purposes. When you submit a report, your report data (including reporter ID, reported player information, violation details, and optional video evidence URLs) is processed by Google Forms. This data is stored in our Google account and used solely for investigating violations and maintaining community safety. Google Forms operates under Google's privacy policy (see link above). You can learn more about Google Forms' data handling here.
• Cloud Hosting Providers (Vultr, Hetzner, Contabo, Ovh): Our game servers and databases are hosted on infrastructure provided by these companies in Europe. They do not have direct access to your personal data but store the encrypted data on our behalf.
• Content Moderation Services: We may use third-party AI and moderation tools to scan chat messages and character names for inappropriate content in real-time. These services process data only for moderation purposes and do not retain your personal information.

We only share information necessary for them to perform their functions and require them to protect your data.

6. Data Storage and Security

User information is securely stored on servers located in Europe (vps and cloud services provided by Vultr, Hetzner, Contabo and Ovh). We retain your personal data for as long as your account is active or as needed to provide you with our services.

Chat Message Storage:

• Chat messages are stored only in temporary session memory and are automatically deleted when you close the game or log out.
• We do not maintain permanent chat history or archives.
• For safety purposes, messages may be temporarily cached server-side for up to 24 hours for automated profanity filtering and security scanning. This data is not accessible to users or staff and is automatically purged.
• When a message is reported through our reporting system, only the reported content and surrounding context (up to 5 messages) are retained for up to 7 days for investigation purposes.

Report Data Storage:

• Player reports submitted through our external reporting system are stored in Google Forms and linked Google Sheets.
• Report data includes: reporter player ID (anonymized game identifier), reported player information, violation type, description, optional video evidence URLs, timestamp, and game version.
• This data is retained for as long as necessary to investigate violations and maintain community safety records, typically up to 1 year after resolution.
• Resolved reports may be archived or deleted at our discretion based on the severity and nature of the violation.

If you delete your account, we will delete your data within 30 days, unless we are required to retain it for legal reasons. To protect your data, we implement the following security measures:

• Encryption: All sensitive data, including device IDs and chat messages, is encrypted during storage and transmission.
• Access Control: Restricted access to personal data to authorized personnel only.
• Regular Security Audits: Periodic reviews and updates to security protocols.

Service Discontinuation: In the event that the service is discontinued, we will permanently delete all personal user data within 60 days of the service termination date.

7. User-Generated Content (UGC) and Chat Features

7.1 Character Naming

Players can create custom character names that are visible to other players. By creating a character name, you agree to:

• Comply with our Terms of Service and Community Guidelines.
• Not use names that are offensive, discriminatory, sexually explicit, or violate others' rights.
• Not impersonate other players or public figures.

We reserve the right to reject or modify character names that violate our policies. Character names are subject to automated profanity filters and manual review.

7.2 In-Game Chat

The App includes text chat functionality that allows players to communicate with each other in real-time. Regarding chat features:

• Session-Only Chat: Chat messages are only available during your active game session. When you close the game or log out, all chat messages are permanently deleted and cannot be recovered.
• No Chat History: The App does not store or maintain chat history. Previous conversations cannot be viewed or retrieved after ending a game session.
• Real-Time Profanity Filtering: We use automated profanity filters to detect and block offensive language, vulgar words, and inappropriate content in real-time before messages are delivered to other players.
• Prohibited Content: Users must not share personal information (such as real names, addresses, phone numbers), engage in bullying, harassment, hate speech, or post illegal, violent, or sexually explicit content. While we filter profanity, users are responsible for following these guidelines.
• User Responsibility: Players should exercise caution and not share personal or sensitive information in chat. Our profanity filters help maintain appropriate language, but users should report any violations they encounter.
• Safety Scanning: For safety purposes only, messages may be temporarily cached server-side for up to 24 hours for automated profanity filtering and security scanning. This data is not accessible to users or staff and is automatically purged.
• Reported Content: When content is reported, only the reported message and minimal context are retained for up to 7 days for investigation. After resolution, this data is permanently deleted.

7.3 Reporting and Blocking

To maintain a safe environment, the App provides the following features:

• External Report System: Users can report violations through an external reporting form powered by Google Forms. When you click "Report Player," the App will redirect you to your device's default web browser where a report form will open. The form automatically pre-fills certain technical information (your player ID, reported player information, timestamp, and game version) to assist in our investigation. You will need to select the violation type, provide a description, and optionally include a video evidence URL. This external reporting system does not require you to sign in to Google and allows us to efficiently collect and review reports.
• Block Function: Users can block other users to prevent unwanted communication. Blocked users cannot send you chat messages or see your online status.
• Response Time: We aim to review and respond to reports within 48-72 hours. Urgent safety concerns are prioritized.

7.4 User Responsibilities

Before using chat or character naming features, users must:

• Accept our Terms of Service and Community Guidelines.
• Understand that user-generated content is visible to other players.
• Not share personal or sensitive information through chat or character names.
• Report any violations or inappropriate behavior they encounter.

8. External Links and Third-Party Services

The App may contain links to external websites and services, including but not limited to:

• Player Report Forms: When you report a player, the App redirects you to Google Forms (docs.google.com) in your device's web browser. This external service is used to collect and manage player reports for moderation purposes.
• Video Evidence Platforms: Users may provide links to video evidence hosted on third-party platforms such as YouTube, Streamable, Google Drive, or Vimeo. We do not control these platforms and are not responsible for their content or privacy practices.
• Support and Community Resources: Links to our Terms of Service, Privacy Policy, Discord community, or other external resources.

When you access external links or third-party services:

• You are leaving the Immortal Tiger app environment.
• These external services have their own privacy policies and terms of service.
• We are not responsible for the privacy practices, content, or security of external websites.
• We encourage you to review the privacy policies of any external services you visit.

9. User Rights

Users have the following rights regarding their personal information:

• Access and Edit: You can access and modify your account details at any time using in-app features.
• Delete Account: You can permanently delete your account and all associated data (including character names) using the in-app account deletion feature. This action is irreversible. Note that reports you have submitted may be retained for record-keeping and safety purposes.
• No Chat History Export: Because chat messages are session-only and not permanently stored, we cannot provide copies of chat history upon request.
• Report Data: If you wish to request deletion of reports you have submitted or reports made against you, please contact us with specific details. We will review such requests on a case-by-case basis while balancing community safety needs.
• Object to Processing: Depending on your jurisdiction (e.g., under GDPR), you may have the right to object to or restrict certain processing of your data. To exercise this right, please contact us.

For additional assistance, contact us at [email protected].

10. Contact Information

If you have any questions about this Privacy Policy or your data, please contact us at:
Email: [email protected]

11. Compliance with Laws

We adhere to the following data protection regulations:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Vietnamese Personal Data Protection Laws
• Children's Online Privacy Protection Act (COPPA)

12. Children's Privacy

The App is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we discover such data has been collected, it will be promptly deleted.

Chat Features and Minors: Users under 18 should obtain parental permission before using chat features. We strongly recommend that parents monitor their children's use of communication features and discuss online safety with them.

Safety Measures for Young Users:

• Real-time automated profanity filters to block inappropriate language and offensive content.
• Regular warnings displayed in-game reminding users not to share personal information (such as real names, addresses, phone numbers, or email addresses) in chat.
• Session-only chat that automatically deletes all messages when the game is closed, preventing permanent records of conversations.
• Easy-to-use reporting system allowing users to report inappropriate behavior or content.
• Blocking functionality enabling users to prevent unwanted communication.
• Enhanced moderation priority for reported issues involving minors.

Parental Controls: If you are a parent or guardian concerned about your child's account or activity in the game, please contact us at [email protected] with your child's account information. We will work with you to address your concerns, which may include account monitoring, restriction of features, or account deletion. Please note that while we will make every effort to accommodate reasonable parental requests, some actions may require verification of parental authority to protect user privacy.

13. Advertising

We use third-party services like AdMob to display advertisements. For more information on what data is collected and how it is used, please refer to the "Sharing and Disclosure of Information" section of this policy.

14. In-App Purchases (IAPs)

The App offers in-app purchases, including one-time items and subscriptions. Payments are processed through Google Play and Apple App Store, and we do not store any payment information.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be communicated through the App. Continued use of the App after updates constitutes acceptance of the revised policy.

Thank you for trusting Immortal Tiger. By using our App, you agree to this Privacy Policy.