Privacy Policy
Effective date: 2026-10-19
This page explains, in plain words, what data the game "Ashen Siege" (the game) and its website use, why, and what you can do about it.
The short version
- We do not sell your data, and the game shows no ads.
- No ad tracking and no third-party analytics.
- Apple or Google take your payments. We never see your card or bank details.
- From your Apple or Google account we keep only your sign-in ID and email address, never your name or photo.
- You can delete your account any time in the game: Settings > Account > Delete my account.
1. Who we are
The game is made by Ashen Siege, who decides how your data is used (the data controller). You can reach us at [email protected].
2. What we use and why
We get data in three ways only: you give it to us in the game, your device sends it while you play, or Apple, Google and the app stores send it to us. All of it is collected electronically.
Your account. You can play against the computer without an account. Online play, your progress and purchases need one, because they live on our server. When you sign in with Apple or Google we keep the ID they give us for you (a random-looking code, not your name) and the email address of that account. If you chose "Hide My Email" with Apple, we only get Apple's relay address. We use your email only to reach you about your account and the game and to find your account when you write to us, never for ads. Google's sign-in can also carry your name and photo; we never store them. Your account also gets a short player code for support. Each signed-in device gets a session; we store only a scrambled (hashed) copy of its key, with when it was created, last used and expires. We use this to sign you in and keep you signed in. Legal basis: needed to provide the game to you (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)).
Your age. The game is for players aged 13 and over, so when you create an account it asks the month and year you were born (never the day). We keep that month and year with your account (and in the copy of your profile the app keeps on your device). If the answer is under 13, no account is made and we keep nothing, not even the answer; you can still play against the computer. The app only remembers on your device, for one day, that the question was answered, so it isn't asked again right away; this is never sent to us.
On iPhone and Android, Apple or Google can also tell the game your age range, for example where a law asks for it. The game asks the store once per account after you sign in. If you are 13 or older, we keep the range (13 to 15, 16 to 17, or 18 and over) and which store gave it; if it and your answer disagree, the younger age counts. If you choose not to share, we only note that, so you are not asked again. If the store says you are under 13, we keep only that note: the account is signed out on every device and can then only be deleted, which the game offers right there. Accounts made before the age question existed are asked once; an answer under 13 is not kept and signs that device out. In both cases the account itself stays on our server until it is deleted; write to [email protected] and we delete it. Legal basis: needed to provide the game, which is open to players aged 13 and over (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)).
Your game. Your player name and avatar (you choose them; the game suggests a random game name, never your real name), rating, rank, match statistics, a hidden skill estimate used to find even opponents (people or computer-controlled), coins, gems, heroes, items, achievements, daily rewards, pass progress, your last 20 online matches and the days you played. We use this to run the game, keep your progress and show your history. Legal basis: needed to provide the game to you (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)).
Friends. The players you add as friends, the requests you send and receive and, while you are connected, whether you are online, searching or in a match (also against the computer). Your friends see that status. Legal basis: needed to provide the game to you (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)).
Purchases. For Mission Pass premium, the Daily Pass, gem packs and cosmetic sets we keep which product you bought, in which store, when it was bought, renewed or ends, whether auto-renew is on, billing problems and refunds, and the store's transaction IDs. We use this to give you what you paid for and to handle refunds. Legal basis: needed to provide the game to you (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)).
Fair play and security. To keep matches fair and the game safe we use your IP address and a record of each online match: both players' account IDs, mode, result, length, heroes, rating and skill changes, how many purchases each side made, and automatic fair-play notes (for example a rejected forged command). We also keep a short activity log of your account: sign-ins, online matches, gem and pass purchases and refunds, name changes, and moderation steps such as a ban, an appeal or a report. This helps us answer your support requests and spot abuse, such as handing wins to another account. If an account is banned, we keep the ban, our notes on it and any appeal. If you report your opponent after an online match, we keep your report (the match, the reason you picked and your optional note) with what our match record showed; if another player reports you, we keep that report about you. Our team reviews reports: a report never leads to a penalty by itself, and we never tell a reported player who reported them. Legal basis: our legitimate interest in keeping the game fair and safe for everyone (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)).
Website waitlist. If you leave your email on our website to hear when the game launches, we keep the address, the platforms you picked, the page language and when you signed up, and use it only for that launch email. Legal basis: your consent, which you can withdraw any time (GDPR Art. 6(1)(a), KVKK Art. 5(1)).
3. What other players see
Your player name, avatar, rating, rank and the frame and name style you wear are shown to your opponents and friends and, if you are in the top 100, on the public leaderboard. In a match your opponent also sees your hero, its power, the items you wear and whether you are connected. Friends also see whether you are online, searching or in a match. Your match history shows each opponent by their current name; when a player deletes their account, their name disappears from others' histories.
4. Who we share it with
Only with these service providers, and only what each needs to do its job for us. They may use it only for that and must protect it at least as well as this policy does.
- Our hosting provider runs the game's servers in the European Union.
- A network and security provider (United States) passes your device's connection on to our server and protects it from attacks. It sees your IP address and the traffic between your device and our server.
- A purchase-verification service (United States) checks purchases with the App Store or Google Play and tells our server what you own. It gets your game account ID (a random ID, not your name), the store's purchase receipts and the device details needed to check them, such as the app version, platform and store country.
- Apple and Google handle sign-in and payments under their own privacy policies. When you delete an account that uses Sign in with Apple, we ask Apple to end the game's access to your Apple ID.
- An email delivery service, only if we use one for the waitlist launch email; it gets the address only for that.
If the law requires it, we may have to give data to authorities that are entitled to ask for it.
Some of these providers are in other countries, so your data is transferred abroad: to the European Union for hosting, and to the United States for the network and purchase-verification services. These providers handle the data only to run the game for us, under their own published data protection terms; write to us if you want to know more.
5. How long we keep it
- Your account and game data: until you delete your account.
- Signed-in devices: a session ends 90 days after its last use; at most 10 devices stay signed in.
- Match history: your last 20 matches.
- The days you played: 120 days.
- The activity log: 90 days, and your entries go when you delete your account.
- The fair-play match record: 180 days; your account ID is removed from it when you delete your account.
- Player reports: until our team has reviewed them, then 180 days. When you delete your account, the reports about you are deleted, and the ones you sent stay without your account ID and your note.
- Server logs, which can include your account ID and, after a block, your IP address: up to 30 days. Abuse scores kept in memory are gone when the server restarts.
- Moderation records (such as a ban or a name reset) stay as long as needed to prevent abuse, also after the account is deleted. If a banned account is deleted, we keep a one-way code made from its sign-in and one from its player name, with the ban's reason, until the ban ends, so a ban cannot be dodged by starting over and nobody can take that name to pose as its owner.
- After you delete your account, other players' match histories still list their matches against you, without your name.
- Gem and cosmetic set purchases: after you delete your account we keep each store transaction ID with your old account ID and what it bought, so the same purchase is never credited twice. They carry no name or email.
- Waitlist addresses: until the launch email has gone out, then the list is deleted, or earlier if you ask.
6. Keeping it safe
Connections between the app and our server are encrypted. We do not store passwords, and sign-in keys are stored only in hashed form. Only the people who run the game can reach the data, and only for the purposes above. Our server limits how many requests anyone can send and blocks abuse automatically.
7. Automatic decisions
Two things happen automatically: your skill estimate decides whom you play and how your rating moves, and abuse checks can pause online matches or block a connection for a while. If you think one of these got it wrong for you, write to us and a person will look at it.
8. Your rights and choices
- Delete your account: Settings > Account > Delete my account. It takes effect at once and removes your profile, progress, purchase records, friends, appeals and sign-in links; we also ask the purchase-verification service to delete its copy. You can also use the deletion page on our website (https://ashensiege.com/delete-account/), or write to [email protected] from your account's email address. Section 5 lists the little that is kept. Deleting the account does not cancel a subscription; cancel it in the App Store or Google Play.
- Get a copy of your data: write to [email protected] and we send it to you as a file.
- Correct your data: change your player name and avatar in the game, or write to us. Your month and year of birth can only be corrected by writing to us.
- Withdraw consent: for the waitlist, write to us and we delete your address.
Under the GDPR and Türkiye's Personal Data Protection Law No. 6698 (KVKK) you can also:
- learn whether we process your data, why, and whether we use it only for that;
- know whom we passed it to, in your country or abroad;
- ask us to limit processing, or object to processing based on our legitimate interest;
- have a correction or deletion passed on to those recipients;
- get your data in a portable format;
- object to a result against you that comes only from automatic analysis;
- claim compensation if unlawful processing caused you damage.
Write to [email protected]; we answer free of charge within 30 days. You can also complain to a data protection authority: in Türkiye the Personal Data Protection Authority (KVKK), in the EU the authority of your country.
9. Children
The game is for players aged 13 and over, and we do not knowingly collect data from younger children. As section 2 explains, a younger player gets no account (or an existing one is signed out; one the store reports as younger can then only be deleted), and only the offline modes stay open. If you think a younger child has an account, write to [email protected] and we will delete it.
10. Changes
If we change this policy, we publish the new text here with a new effective date and tell you in the game when a change matters.
11. Contact
Ashen Siege, [email protected]
