Privacy Policy
The short version. Pawnlings does not ask you to sign up, or for your name or your email. The app creates a random identifier on your phone and your game is kept on our server under it. Other players see you in the league under an alias — the one the game makes up or the one you type — together with your fame and your team of heroes. The game offers reward videos from Google AdMob, which you only watch if you want to; on iPhone it asks your permission before those ads can be personalised, and you can say no and keep playing. We never see your payment details, and we do not collect your precise location (only the country you connect from), your contacts, your photos or your microphone. You can delete your account at any time in Settings › Account › Delete account.
Who is responsible for your data
Consultoría EHERO S.L.U. (NIF B72671100), Rúa Emilia Pardo Bazán 25 A2, 36204 Vigo (Pontevedra), Spain.
Contact for anything on this page: info@consultoriaehero.com.
What we collect, and why
Your game
- A random identifier created by the app on your phone, and whether the phone runs iOS or Android. It is not the advertising identifier and it is not derived from anything about you: it is the key your game is kept under.
- Your player number, shown in Settings › Account, so that support can find your account.
- Your alias: the name you appear under in the league. The game gives you a made-up one and you can change it to one you type; we keep the alias and when you last changed it.
- Your progress: heroes and warlords with their levels, your team, gold, gems and the other currencies, Adventure stages, league and fame, chests, daily tasks, the pass, the battles you play and their results, and a record of what you earn and spend in the game.
- The days on which you played and when you were last seen, so we can see how the game is doing; any note our support staff add when helping you and, if it ever happens, the suspension of the account for cheating.
- The country you play from, which we work out from your IP address when you connect (the IP itself is not stored), the language your phone is set to, its model and system version, and the app version: so we know where the game is played, which languages to translate it into and which phones it fails on.
- If you take the account to another device, the code of eight letters and digits the game creates: it lasts ten minutes and we keep it in a form that cannot be read back, with the time it was used.
- Your settings for sound, music and alerts stay on your phone. Alerts are scheduled by the phone itself: we keep nothing in order to send you notifications.
What other players can see
The game's leaderboards show your alias and your scores: your fame and league, your power (the sum of your heroes' and warlords' levels), the adventure stages and tower floors you have cleared, and the league matches you have won this week. The alias is the only thing you type in Pawnlings and any player can see it: do not use your real name or anything about you. If you do not type one, you appear under the one the game makes up. We may change an alias that is offensive or that impersonates someone else or the game's team. Other players may also meet your team in the league (your warlord, your heroes and their levels), played by the machine, under that same alias. There is no chat and no way to write to another player.
Advertising
The game offers optional reward videos supplied by Google AdMob. There are no banners and no ads that interrupt the game, and we request them with content suitable for all audiences.
- In the European Economic Area, the UK and Switzerland, Google's consent form is shown before any ad is requested. You can change your choice at any time in Settings › Privacy inside the game.
- On iPhone the app then asks for tracking permission. If you allow it, Google's advertising SDK can use your device's advertising identifier (IDFA) to personalise ads and measure campaigns across other apps and websites. If you refuse, you can still watch reward videos. On Android, the SDK uses the device's advertising ID according to what you choose in that form and in Android's settings.
- When an ad is requested, Google receives what its SDK collects: your IP address (which gives it an approximate location), device and app information, and how you interact with the ad. With each video we pass it a single-use voucher so its server can confirm to ours that you watched it; we send it neither your identifier nor your player number.
- On our own server we record each video you request and watch — where, when and what it paid out — so we can apply the daily limits and detect abuse.
Purchases
Payment is handled entirely by the App Store or Google Play. We never see or store your card, your name or your payment details. Our server stores the transaction identifier the store gives us (and, on Google Play, the purchase token), which product it was, the date, what the store charged with its currency and the country of your store, whether it was refunded, and what the game delivered to you. For each purchase an internal email reaches us with those details, your alias and your player number.
Technical data
Your IP address is part of any internet connection and reaches our server with every request. We use it only briefly, to limit how many requests a single connection can make and to know which country you play from; we do not store the address with your game, only the country. The hosting provider keeps standard server logs. These web pages set no cookies.
What we do not collect
- No name, no email, no phone number and no date of birth.
- No GPS or location permission (all we know of where you are is the country), no contacts, no photos, no camera, no microphone, no health data.
- No payment details.
- No third-party analytics or crash reporting. The only external components in the app are Google's advertising SDK with its consent form and each store's purchase system.
- Our own code never reads the advertising identifier.
Who we share it with
| Who | What for |
|---|---|
| Google (Google Ireland Ltd. / Google LLC) | Serving and measuring reward videos and collecting your advertising consent; processing Google Play purchases and confirming them to us. |
| Apple (Apple Distribution International Ltd.) | Processing App Store purchases and confirming them to us. |
| Our hosting provider | Running the server the game lives on, in the European Union. |
| Our email provider (Zoho Corporation B.V., ZeptoMail service) | Delivering to us the internal email about each purchase, from its servers in the European Union. We never write to you: we do not have your email address. |
We do not sell your data and we do not hand it to data brokers. Google and Apple may process data outside the European Economic Area; those transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.
Why we are allowed to do this
- To provide the game you asked for (performance of a contract): your progress, the league, your purchases and taking the account to another device.
- Your consent: personalised advertising and the use of the advertising identifier. You give it in Google's consent form and in the iOS tracking dialog, and you can withdraw it at any time.
- Our legitimate interest: detecting cheating and abuse, keeping the service secure and knowing, in aggregate, how the game is played.
- A legal obligation: keeping records of purchases for accounting and tax purposes.
How long we keep it
- Your game: for as long as the account exists. You can delete it yourself in Settings, or ask us to.
- The code for taking the account to another device: it expires after ten minutes, and its record is deleted with the account.
- Purchase records: six years from the transaction, because Spanish accounting law requires it. They survive the deletion of the account, no longer tied to any account.
- Backups of the server: they are rotated, so a deletion can take a few extra days to disappear from every copy.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, limit what we do with it, object to it, or hand it over in a portable format. You can also withdraw your consent to personalised advertising at any time.
Write to info@consultoriaehero.com with your player number (Settings › Account), so we can tell which game is yours. We answer within one month.
If you think we have handled it badly, you can complain to the Spanish Data Protection Agency, www.aepd.es.
Turning off ad tracking
On iPhone: Settings › Privacy & Security › Tracking, and turn Pawnlings off. On Android: in the phone's settings, Privacy › Ads, you can delete or reset the advertising ID. You can still watch reward videos, but the ads will not be personalised.
Deleting your account
Open Settings › Account › Delete account: your game, your heroes, your place in the league and everything else in the account are deleted at once and cannot be recovered, not even from another device that had it. Anything you had bought is lost with it. If you can no longer open the game, write to us and we delete it within 30 days. The steps, and what is kept, are in Delete your account.
Uninstalling the app does not delete the account: the game stays on our server.
Age
Pawnlings is not meant for children under 14. It has purchases with real money and advertising.
Changes
If we change how the game handles your data, we update this page and change the date at the top.