Privacy Policy
1. Who we are
Rival Monarchs is made by Radiant Protocols DMCC, Unit No. 3O-01-5467, Jewellery & Gemplex 3, Plot No. DMCC-PH2-J&GPlexS, Jewellery & Gemplex, Dubai, United Arab Emirates ("we", "us"). We are the controller of the personal data described here. Contact: hello@radiantprotocols.com.
2. The short version
- We show no ads, do no tracking, and never sell or share your personal data for advertising.
- Offline matches send us nothing. Skirmishes against the AI and the training campaign run entirely on your phone. If your phone is signed in to Game Center or Google Play Games, the app links that player to an online account when it starts, even if you only play offline (section 4).
- Online play uses an anonymous account, with no sign-up form. If you add Sign in with Apple, you choose whether Apple shares your name and email with us. If you add Sign in with Google, Google shares the name and email on your Google Account with us. To run matches, ratings, replays and fair play, we keep your account ID, display name, rating and match records.
- You can delete your account in the app at any time: Settings › Account › Delete account. Without the app, follow how to delete your account.
3. Data that stays on your phone
Your settings, saved games, training progress and, if you turn it on, a local playtest file. We don't receive any of these. The app also keeps a random key and a session token on your phone, so you stay signed in to your anonymous account: in the Keychain on iPhone, and on Android encrypted with a key in the Android Keystore and left out of backups and device transfers. Deleting the app removes the local data, though iOS may keep Keychain items until you delete your account in the app or reset your iPhone. On Android, deleting the app removes the key too, so a guest account that isn't linked to Google Play Games or Sign in with Google can't be opened again.
4. Data we collect when you play online
| What | Examples | Why we use it | Legal basis (EU/UK) |
|---|---|---|---|
| Account identifiers | A random account ID; a one-way hash of the random key your app creates; session tokens | To create and secure your account and keep you signed in | Performance of our contract with you |
| Display name | Your first name, if you sign in with Apple and share your name, or if you sign in with Google; otherwise a name we generate, such as "player-3f84b6" | To show who you're playing, in matches, invites and block lists | Contract |
| Linked sign-ins (optional) | Your Game Center player ID and nickname, if you sign in with Game Center. Your Google Play Games player ID, if your Android phone is signed in to Play Games (we don't keep your Play Games name). A stable identifier from Apple or Google, if you use Sign in with Apple or Sign in with Google. | To recover your account on a new device and for Game Center and Play Games features | Contract |
| Name and email (optional) | If you use Sign in with Apple and choose to share them: your name, and your email address or an Apple relay address that hides it (Hide My Email). If you use Sign in with Google: the name and email address on your Google Account, which Google shares with us at each sign-in. We don't keep your Google profile picture. | To show your first name to other players as your display name, to support your account, and to send messages about it, such as security or service notices. News about the game only if you turn on News by email in Settings › Account. | Contract; consent for news by email |
| Ratings and match records | Who played, when, which map, the result, rating changes | Matchmaking, ratings, match history, leaderboards | Contract |
| Match logs (replays) | Every command both players gave during a match, and checksums of the game state | To run the match, show replays, detect bugs ("desyncs") and cheating, and settle disputes. Also aggregated statistics to balance the game. | Contract (running the match); legitimate interests (fair play, security, game balance) |
| Age range | Once we use Apple's age range check: only an age range provided by Apple (for example "13–15"), never your date of birth | To apply age-appropriate settings and meet legal duties | Legal obligation; legitimate interests |
| Reports, blocks and bans | Who reported or blocked whom, why, in which match, and any note you add to a report. If we ban an account: the reason, our statement of reasons, and when the ban starts and ends | To keep the game safe, respond to reports and enforce bans | Legitimate interests; legal obligation |
| Notifications (optional) | If you allow notifications: a push token from Apple on iPhone, or a Firebase installation ID or registration token from Google on Android | To tell you a match or challenge is ready and, only if you opt in, about events such as "Lunch Rush" | Contract; consent for promotional notifications |
| Integrity check (ranked) | On iPhone, once it's in use: an Apple App Attest key identifier and check result | To confirm that ranked players use the genuine app | Legitimate interests (fair play) |
| Connection and technical data | IP address, connection times, app and game version, error logs. When you look for or join an online match, a rough location that our host works out from your IP address. | To deliver the service, keep it secure, and fix problems. The rough location picks the match server nearest to you: it's used for that moment and not stored, though the match record keeps which server region the match ran in. | Legitimate interests |
| Purchases (when available) | Which content you own, and transaction identifiers from Apple or Google | To give you and restore what you bought | Contract |
| Support messages | Anything you send us by email | To answer you | Legitimate interests; contract |
5. What we don't collect
Your precise location, contacts, photos, microphone, camera, health data or browsing history. Your advertising identifier (Apple's IDFA or Google's advertising ID). We don't track you across other companies' apps or websites, we don't use data brokers, and we don't profile you for advertising.
6. Who can see your data
- Other players see your display name, rating and match results. If you sign in with Apple and share your name, or sign in with Google, other players see your first name in matches, invites and block lists; guests, players signed in only to Game Center or Play Games, and players who don't share a name get a generated name.
- Your opponent's app receives your account ID and display name during a match.
- Replays of your matches can be watched by your opponent and by anyone you or your opponent shares a replay link with.
- Service providers process data on our behalf, under contract:
- Cloudflare, Inc. hosts our servers, database and match replays on its global network.
- Apple provides Game Center, Sign in with Apple, push notifications, App Attest, TestFlight and the App Store. Apple's own privacy policy applies to the data Apple handles. If you hide your email, Apple's relay forwards our messages to you.
- Google delivers push notifications on Android (Firebase Cloud Messaging) on our behalf, and provides Sign in with Google, Google Play Games, testing on Google Play and Google Play itself. Google's own privacy policy applies to the data Google handles for your Google Account and your Play Games profile, including the achievements and scores the app sends to Play Games, which other players can see according to your Play Games settings.
- Authorities, if the law requires it, or to protect players' safety.
- A buyer, if Radiant Protocols DMCC is sold or merged. The buyer would remain bound by this policy.
We don't sell your personal information, and we don't "share" it for cross-context behavioural advertising, as those terms are defined in California law.
7. International transfers
Your account data is stored in the United States. Live matches run on Cloudflare servers near the players. If you play from the EEA, the UK or Switzerland, we rely on the Standard Contractual Clauses in our providers' data processing terms (Cloudflare, Apple and Google), and on the EU–US Data Privacy Framework where a provider is certified under it.
8. How long we keep data
- We keep your account, rating and match history until you delete your account. We also delete anonymous accounts that haven't been used for 24 months.
- Match logs: 12 months, longer only when a match is under a dispute or cheating investigation.
- Server logs: 30 days or less. Backups: 35 days or less.
- Reports: 12 months after we resolve them.
- Push tokens and installation IDs: until you delete your account, or until Apple or Google tells us they no longer work.
- Bans: while the account exists. If an account is deleted while it is banned, we keep one-way hashes of its sign-in identifiers (the hash of your app's key, your Game Center or Play Games player ID, your Sign in with Apple or Sign in with Google identifier) until the ban ends, and for a permanent ban indefinitely, so that the ban continues on a new account created the same way. The hashes can't be turned back into the identifiers.
- Your name and email: until you delete your account, or until you stop using Sign in with Apple with Rival Monarchs in your Apple Account settings, which tells us to delete them. Google doesn't tell us if you remove Rival Monarchs from your Google Account, so a name and email from Google stay until you delete your account here. Replays of matches you already played keep the display name you had then, until you delete your account.
9. Your choices and rights
- Delete your account in the app: Settings › Account › Delete account. If you no longer have the app, you can ask us to delete it: see how to delete your account. This deletes your account, profile, rating, linked sign-ins, and the name and email you shared. In your opponents' match histories and replays, your name is replaced with "Deleted player", and your ID then points to an empty placeholder account. If the account is banned at the time, the hashes described in section 8 stay until the ban ends. Removal from our servers completes within 30 days (backups roll off within 35 days). The app returns to the main menu when it's done, and tells you if it couldn't. Achievements and scores in Game Center or Google Play Games are kept by Apple or Google; you manage them in their settings.
- Access, correction, portability, restriction and objection: email hello@radiantprotocols.com from the address you'd like us to answer, and tell us your display name (shown in the online lobby) and the email address you signed in with, if any. We answer within one month.
- Withdraw consent at any time, e.g. by turning off News by email in Settings › Account (every news email also has an unsubscribe link), or notifications in your phone's settings. This doesn't affect anything done before.
- Complain to your data protection authority. In the UK that's the ICO.
- California and other US states: you may request to know, delete or correct your personal information. We don't sell or share it, and we don't use sensitive personal information for anything beyond running the game. We won't discriminate against you for exercising these rights. You may use an authorized agent.
10. Children
- Rival Monarchs is for players aged 13 and over. It's rated 13+ on the App Store. On Google Play the rating comes from the International Age Rating Coalition and depends on your region.
- We don't ask your age yet. Once we use an age check from Apple or Google, online play won't be available to players under 13; the offline modes stay open to everyone.
- If we learn we hold personal data from a child under 13 without verified parental consent, we delete it.
- Parents can contact hello@radiantprotocols.com.
- There's no chat, and promotional notifications are off unless you turn them on. Once the age check is in place, players aged 13–17 will show a generated name only (not their first name from Apple or Google) and won't get promotional notifications.
11. Security
We use encrypted connections (TLS), store your app's sign-in key only as a one-way hash, restrict access to production data, and keep our server secrets out of the app. No system is perfectly secure. If a breach affects you, we'll tell you as the law requires.
12. Our website and mailing list
The website uses no cookies, no analytics and no trackers. If you email us to join the beta list, we keep your email address and the time zone you mention. We use them only to send beta and launch news. Every email has an unsubscribe link, and we delete your address when you unsubscribe. Our web host processes IP addresses to deliver the site.
13. TestFlight and testing on Google Play
If you join the beta through Apple's TestFlight, Apple shares limited information with us: your name and email if we invited you by email, crash reports, and any feedback you send. Apple's TestFlight terms apply. If you test the Android app through Google Play, we hold the email address we invited you with, and Google Play gives us crash and performance reports and any feedback you send. Google Play's terms apply.
14. Changes
We'll post updates here and, for important changes, tell you in the app before they take effect.
15. Contact
Radiant Protocols DMCC, Unit No. 3O-01-5467, Jewellery & Gemplex 3, Plot No. DMCC-PH2-J&GPlexS, Jewellery & Gemplex, Dubai, United Arab Emirates, hello@radiantprotocols.com.