WW2 Battle Forces Privacy Policy

1. Who we are

WW2 Battle Forces (the "game" or "app": on Android the package com.klassicstudios.ww2battleforces, and on iPhone and iPad the app with the bundle ID com.klassicstudios.ww2battleforces) is published by Klassic Studios Pty Ltd ("we", "our", "us"), based in Perth, Western Australia. This policy explains what information the game handles, why, and what control you have over it. It applies only to the WW2 Battle Forces mobile game, not to our website or our other services, which are covered by our main privacy policy.

The game works the same way on Android and on iPhone and iPad, and this policy covers both. Where the two differ, it says so.

We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, and, where they apply to you, the EU and UK General Data Protection Regulation and applicable United States state privacy laws.

2. Information stored only on your device

The game keeps the following in its own private storage on your device. It is removed when you uninstall the game (on iPhone and iPad, when you delete the app):

• Your save: your level, roster, resources, battle progress and in-game settings
• A log of game events: the same events described in Section 3.3. It stays on your device and is uploaded only while Share gameplay statistics is on
• Sign-in details for your account: so the game stays signed in between sessions
• Sound and notification preferences

3. Information collected through the game

Nothing is sent until you have read and accepted the privacy notice the game shows the first time it starts.

3.1 Your account and cloud save

The game creates an anonymous account with Google Firebase Authentication. It has a random ID and is not linked to your name or to your Google account. While Back up my progress to the cloud is on (it is on by default, and you can switch it off in the privacy notice or in Settings), your save is stored against that ID so your progress survives a lost or replaced phone. Your save contains your level, roster, resources, battle progress and in-game settings.

3.2 An email address, only if you link one

You can link an email address and password to your account so you can restore your progress on another phone. This is optional. Passwords are handled by Firebase Authentication, and we never see them. We use the email address only to sign you in. We do not send you marketing.

3.3 Gameplay statistics: on by default, off until you opt in in Europe

While Share gameplay statistics is on, the game uploads its event log, stored against your anonymous account ID. The log records:

• Gameplay events: battles started, won and lost, characters unlocked and promoted, level-ups, gold and experience earned, purchases made and restored in the game (the product, never payment details), and progress through the tutorial, each with the day of play and the values involved.
• Device and app information: your device model, operating system name and version, and the game's version, recorded when a session starts.
• Error reports: when something goes wrong in the game, the error message and where in the game's code it happened.

The switch is in the privacy notice and in Settings. In the EU, the EEA, the UK and Switzerland it starts off, and nothing is uploaded until you switch it on. The game decides this from your phone's region and time zone settings. Elsewhere it starts on. Switching it off stops all further uploads immediately. What was already uploaded stays until you delete your cloud data (Section 6).

We use this only to see how the game is played, to balance its difficulty and rewards, and to find and fix bugs. We do not use it for advertising and we do not try to identify you from it.

3.4 Purchases

On Android, in-game purchases are made through Google Play Billing. Google handles the payment, and we never receive your card or payment details. To confirm a purchase is genuine before granting it, the game sends Google's purchase token, the product and your account ID to our server, which checks the purchase with Google Play. For each purchase we keep:

• a one-way fingerprint (hash) of the purchase token, so the same purchase cannot be redeemed twice
• the product, Google's order number and the time of purchase
• the account or accounts the purchase has been granted to. A one-time item can be restored to a new account, for example after reinstalling, on up to five accounts in all
• a count of what each account has bought

The iPhone and iPad version does not offer purchases yet. When it does, they will go through Apple's App Store, and we will update this section before they are offered.

3.5 Advertising

When you are short of oil, the game offers you the chance to watch a rewarded video advert for free oil. Adverts are served by Google AdMob. Watching one is always your choice, and the Google Mobile Ads SDK starts only the first time the game is about to offer an advert, not when the game starts. Once it has started, Google collects:

• on Android, your device's advertising ID and App Set ID
• on iPhone and iPad, an identifier limited to this app or to our apps, such as Apple's identifier for vendor. The game never shows Apple's App Tracking Transparency prompt, so Apple's advertising identifier (IDFA) is not available to the game or to Google
• your IP address, which is used to estimate an approximate (city-level) location
• interactions with adverts, such as views and taps, and general app interactions
• diagnostic information such as app launch time and performance

Google uses this to select and show adverts, to measure their performance, and to detect invalid or fraudulent activity. Section 6 explains how to limit it.

3.6 Notifications

If you allow notifications, the game schedules its reminders (oil depot full, daily reward waiting) on your phone itself. No push service is used and nothing about them is sent to us. You can switch each reminder off in Settings, or all of them in your phone's settings. The iPhone and iPad version does not schedule notifications yet.

3.7 What the game never collects

The game does not ask for, collect or transmit your name, phone number, postal address, contacts, photos, files, microphone or camera input, precise location, health data, payment card details, or the list of apps installed on your device.

4. Summary of data handling

This table summarises the same information as the game's Data safety section on Google Play and its App Privacy details on the App Store.

"Shared" reflects that Google acts as an advertising provider in its own right when serving adverts. Firebase processes the account, save, purchase and statistics data only on our instructions as our service provider, which is why those rows are not marked as shared. All data is encrypted in transit.

5. Third-party services

We do not sell your information, and we do not share it with anyone beyond the services below, operated by Google LLC and, for the iPhone and iPad version, Apple Inc.:

• Google Firebase (Authentication, Cloud Firestore, Cloud Functions): your account, cloud save, gameplay statistics and purchase records, as our service provider
• Google Play: payments, and the purchase checks described in Section 3.4. If your phone shares usage and diagnostics with Google, Google Play may also report app crashes to us without identifying you
• Google AdMob: rewarded video advertising
• Apple (the App Store and TestFlight): distributes the iPhone and iPad version. If you choose to share analytics with app developers in your device's settings, Apple may send us crash reports and usage statistics that do not identify you. Apple's handling of this data is governed by the Apple Privacy Policy

Google's handling of this data is governed by the Google Privacy Policy. You can read how Google uses data from apps that use its services at policies.google.com/technologies/partner-sites, and about Firebase specifically at firebase.google.com/support/privacy.

6. Your choices and controls

• Cloud backup on or off. Settings → Account → Back up my progress to the cloud. With it off, your progress lives only on your phone.
• Gameplay statistics on or off. Settings → Account → Share gameplay statistics. The game keeps working either way.
• Delete your data. Settings → Account → Delete cloud data deletes your account, its cloud save, its linked email and its gameplay statistics at once. The progress on your phone stays, but it is no longer backed up. Section 7 has the steps, how to ask us instead, and what is kept.
• Advert consent. If you are in the EEA, the UK or Switzerland, Google's consent form asks before adverts are personalised. You can change your choice later in Settings → Ad privacy.
• Reset or delete your advertising ID. On Android, go to Settings → Privacy → Ads. You can reset the identifier or delete it entirely, which stops it being used to personalise adverts. On iPhone and iPad the game never asks to track you; Settings → Privacy & Security → Tracking shows which apps have asked, and can stop every app from asking.
• Notifications. Switch each reminder off in the game's Settings, or all of them in your phone's settings.
• Remove everything from your phone. Uninstalling the game (on iPhone and iPad, deleting the app) deletes its locally stored data.

7. How to delete your account and data

You can have your WW2 Battle Forces account and everything stored with it deleted at any time, from inside the game or by emailing us. You do not need to have the game installed to ask us.

7.1 From inside the game

1. Open WW2 Battle Forces and go to Settings → Account.
2. Tap Delete cloud data, then Delete to confirm.

The deletion happens straight away.

7.2 By email, without the game

1. Email admin@klassicstudios.com with the subject Data deletion request - WW2 Battle Forces.
2. Tell us how to find your account: the email address you linked to it, or the account ID shown in Settings → Account (the code after "Anonymous account").

Within 30 days we will delete everything listed in Section 7.3 and reply to confirm. If you write from an address other than the one linked to your account, we may ask you to confirm that the request is yours before we act, so that nobody else can delete your progress.

Your account is anonymous unless you linked an email to it. If you uninstalled the game without linking one, the account ID was removed from your phone along with the game, and we have no way to tell which stored account was yours. That account holds no name or contact details.

7.3 What is deleted and what is kept

• Deleted: your account and its ID, your cloud save, the email address you linked (and the password Firebase Authentication holds for it), and every gameplay statistic uploaded from the game. We keep no backup copies, so a deletion cannot be undone.
• Kept on your phone: your progress, until you uninstall the game or clear its data. It is no longer backed up and cannot be restored on another phone.
• Kept by us: purchase records, as Section 9 explains. They no longer link to any sign-in.
• Kept by Google: advertising data, under Google's own policies. To stop it being used, reset or delete your advertising ID (Section 6).

8. Legal basis for processing (EEA and UK players)

Where the GDPR or UK GDPR applies, we process your account, cloud save and purchases to provide the game you asked for (performance of a contract). We rely on your consent for gameplay statistics, which are off until you switch them on, and for personalised advertising. You give that consent through the Share gameplay statistics switch and the advert consent form, and you may withdraw it at any time using the same controls, without affecting anything processed before you withdrew it. We rely on our legitimate interests in preventing purchase fraud, and in operating and funding the game when adverts are shown without personalisation. Where the law requires us to keep purchase records, we do so to meet that legal obligation.

9. How long data is kept

• On your device: until you uninstall the game or clear its data.
• Account, cloud save, email and gameplay statistics: until you delete them with Delete cloud data or ask us to (Section 7).
• Purchase records: kept after an account is deleted, for as long as needed to prevent the same purchase being redeemed again and to meet tax and accounting obligations (in Australia, generally five years). Once the account is deleted they no longer link to any sign-in.
• Advertising data: retained by Google under its own policies, described in the Google Privacy Policy.

10. International transfers

Your account, cloud save, gameplay statistics and purchase records are stored on Google's servers in the United States, and Google may process advertising data elsewhere. Where data is transferred internationally, Google applies safeguards approved under the applicable privacy laws, including the European Commission's standard contractual clauses. Data is encrypted in transit using TLS.

11. Security

Data sent by the game is encrypted in transit. The database's security rules let each account read and write only its own save and statistics. Purchase records can be written only by our server, never by the game itself. Passwords are handled by Firebase Authentication. Locally stored data sits in the app's private storage area, which other apps cannot read. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children's privacy

WW2 Battle Forces is not directed at children and is not aimed at anyone under 13. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us using the details in Section 14 and we will delete anything we hold.

13. Your rights

Depending on where you live, you may have the right to access the information held about you, to have it corrected or deleted, to object to or restrict its processing, to withdraw consent, to receive a copy in a portable format, and not to be discriminated against for exercising these rights. We do not sell or "share" personal information as those terms are defined under California law.

The fastest ways to exercise most of these rights are the controls in Section 6, and Section 7 explains how to have your data deleted. For anything else, such as a copy of your data, contact us. Include the account ID shown in Settings → Account, or the email address you linked, so we can find your data.

14. Contact us

For any question or request about this policy or your data:

We aim to respond within 30 days. If you are in Australia and are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. If you are in the EEA or UK, you can complain to your local data protection authority.

15. Changes to this policy

We may update this policy when the game changes or when the law requires it. The revised version will be posted on this page with a new "Last updated" date. If a change materially affects how your data is handled, the game will show you the updated privacy notice and ask you to accept it.

---

In summary: WW2 Battle Forces backs up your progress without needing to know who you are, asks before sending statistics where the law says it must, lets you switch statistics off everywhere, and lets you delete it all from inside the game or by asking us.