1. What we collect
Account data: your username and a hashed password, used to sign you in and to tie a save to you.
Game and device data: progress, purchase records, sign-in times and time played, used to sync saves and to investigate support requests.
Feedback data: whatever you choose to send us in the feedback form, including any contact details you add.
Rewarded ads (app version only): when you choose to watch an ad for a reward, we record which reward you watched for and when, so the reward reaches you once and daily limits apply. The website and desktop versions show no ads.
2. How we use it
To run and maintain the game, sync cloud saves, deliver and reconcile paid content, answer feedback and appeals, and keep accounts and transactions secure.
We do not use this data for anything unrelated to those purposes.
3. Sharing
We do not share your personal data with third parties except: with your separate consent; passing the order details a payment provider needs to take a payment; or where the law requires it.
In the app version, ads are served by AppLovin MAX and the ad networks it works with. They may collect your device's advertising identifier and how you interact with ads, under their own privacy policies. Where the law requires it we ask for your consent first (in the EU and UK through a consent prompt, on iOS through Apple's tracking prompt), and you can change your choice in your device settings. Players under 18, or whose age we do not know, only see non-personalised ads.
4. Storage and security
Data is stored at Singapore and protected with encryption at rest, access control and audit logging.
We keep it for as long as running the service requires and for any minimum period the law sets, then delete or anonymise it.
5. Your rights
You can ask to see, correct or delete your personal data, close your account, and withdraw consent. Send the request through Feedback in the game or to [email protected] and we will answer within fifteen working days.
You can also request a copy of your personal information at any time from Options - Account & Privacy - Request a copy of my personal information.
Closing an account permanently clears the progress and virtual goods tied to it.
6. Children
We do not knowingly collect personal data from children below the age set by the law that applies to them. A parent or guardian can contact support to see, correct or delete a child's data.
7. Contact us
This Privacy Policy is written in English. Translations are provided for convenience only; if a translation conflicts with the English text, the English text prevails.
Operator: GRYFFINDOR PTE. LTD.
Registered address: 12 Woodlands Square, #13-62 Woods Square, Singapore 737715
Data protection contact: [email protected]
Support line: Email support only
Effective date: 2026-11-07