Mobile Game Privacy Policy

Updated 26 October 2026

Joe Green operates Deathmancer: The Two Realms. This policy covers the iOS and Android game and its online multiplayer service. For privacy questions or requests, email contact@deathmancer.com.

What stays on your device

Solo and shared-device matches, personal statistics, local achievements, preferences and your custom profile name or photo are stored on your device. Your uploaded profile photo is resized locally; the game does not upload that photo or your custom name to opponents. Your device or operating system may include local data in its backups.

Online sign-in and gameplay

If you choose online sign-in, Firebase Authentication processes your Apple or Google sign-in, provider identifiers and Firebase account ID. The provider may supply your name and email address. With Sign in with Apple, that email may be an Apple private relay address. Firebase can retain these details as part of your authentication account.

Our Cloudflare service verifies sign-in tokens and uses a pseudonymous game identifier to run matchmaking, private tables, reconnects and cosmetic ownership checks. A pseudonymous identifier is still personal data. Online rooms contain game state, hands, action history and preset reactions. Opponents see an assigned Commander handle, curated avatar and verified equipped cosmetics, not your sign-in email or private hand.

Connection information, including IP addresses, is processed for delivery, security and rate limiting. Firebase and other service providers also process technical information such as platform, app and SDK versions. We do not operate advertising tracking or sell player information.

Purchases and gaming platform services

Apple or Google handles checkout. RevenueCat processes purchase history, transaction information and an app user identifier to validate and restore Founder Pack ownership. When signed in, this uses your pseudonymous game identifier; otherwise RevenueCat uses an anonymous SDK identifier. The game does not receive your payment-card number.

On iOS, Game Center can authenticate automatically using Apple's GameKit service. If you choose to link your local honours, achievement progress is sent to Apple and can be restored through Game Center. This is separate from the Firebase multiplayer account.

Android builds with Google Play Games Services authenticate the gaming profile through Google's platform service. Google processes the Play Games player identifier, gamer identity and SDK analytics and diagnostics. The game reads your gaming display name and player identifier to show connection status. If you choose to link this device's honours to that player, completed achievements are sent to Google and unlocked achievements can be restored. This does not sign you into the separate Firebase multiplayer account or grant access to purchases.

Play Games profile visibility is controlled in Google's settings. We do not request your friends list, enable Play Games saved-game uploads or request server-side Play Games tokens. You can manage your gaming profile and delete per-game Play Games data through Google's Play Games profile controls. See Google's Play Games data information and Google's privacy policy.

Compact balance statistics and retention

Completed online games generate compact balance records: random match ID, seat, date, build, Commanders, match options, scores, rounds and outcome. Our SQL results tables do not contain account IDs, names, emails, profile photos, hands or the Chronicle. Individual result rows are retained for 90 days; daily aggregate totals are retained to assess game balance.

Online room data expires after 24 hours. Online profiles are removed after 90 days of inactivity. Authentication records remain while your account exists. Store and purchase-provider records may remain longer for ownership restoration, fraud prevention, accounting or legal requirements, under the relevant providers' retention practices.

Why we use this information

We use account, game and purchase information to provide the features you request and verify ownership. Security, service reliability and game-balance analysis support our legitimate interests in operating and improving the game. Legal obligations may require retaining certain business records. Where a feature relies on consent, you can withdraw that consent. Signing in does not subscribe you to a newsletter or authorise promotional emails.

Service providers

We use Google Firebase for authentication, Cloudflare for online gameplay and hosting, and RevenueCat for purchase services. Apple and Google operate their stores, sign-in and platform services under their own privacy policies. Providers may process data outside your country; their applicable contractual and data-transfer safeguards govern that processing.

Your choices and rights

You can play solo, tutorials and local matches without a multiplayer account. You can sign out of online play, choose whether to link local achievements to Game Center or Google Play Games and remove your local profile photo. Google Play Games platform authentication is managed through Google's device settings. Local game data can also be removed using the app or device's storage controls.

Depending on applicable law, you may request access, correction, deletion, restriction or portability of personal information, or object to certain processing. Contact us at the address above; we may need to verify account ownership. You can also complain to your local data-protection authority, including the UK Information Commissioner's Office.

Delete your online account

In the game, open Player profile → Your online account → Delete online account, then reauthenticate and confirm. This deletes the Firebase game account and linked online profile and tables. Deleting a shared table closes it for the other participants too. Local solo records are not removed by online-account deletion.

If you cannot access the app, follow our account-deletion request instructions. Deletion does not refund a purchase or automatically erase Apple, Google or RevenueCat transaction records. Please contact us about purchase-provider data requests; those providers may retain records required for restoration, fraud prevention or legal obligations. Compact balance records without account identifiers and aggregate statistics may remain.

Children and changes to this policy

The game is not directed at young children. Follow the minimum-age and parental-consent requirements of your store and sign-in provider. A parent or guardian can contact us about a child's account or data. We will update this page when our practices change and show the new effective date.