Privacy Policy

1. Who we are

This Privacy Policy explains how ShadowHand (“we”, “us”, or “the App”), operated by Hailsom, collects, uses, and shares information when you play our multiplayer card game on iOS and Android.

App identifier: com.hailsom.shadowhand

Contact: privacy@hailsom.com

2. Information we collect

Depending on how you play, we collect:

• Account and profile data. A display name and username (generated for guests, editable by you), your avatar and card-deck choices, and a player ID. If you sign in with Google, we receive your Google account identifier, your email address, and your name.
• Device identifier. A random install-scoped ID generated by the App and stored on your device, used to create and restore guest accounts, plus basic device metadata sent at sign-in (platform and model). This is not your advertising ID.
• Network data. The IP address our servers see when you sign in or play, used to operate the service, resume sessions, and prevent abuse.
• Gameplay data. Room codes, match results, rankings and ratings, virtual-currency balances, friends and friend requests, owned items, and player reports you submit or that are made about you.
• Purchases. Product and transaction identifiers for in-app purchases made through the Apple App Store or Google Play and validated by RevenueCat. We never receive your payment card or Apple/Google account password.
• Push notification tokens. A Firebase Cloud Messaging token (and, on iOS, the APNs token that Firebase uses) if you allow notifications.
• Analytics and diagnostics. Firebase Analytics events (for example sign-in, match start/end, shop actions) and Firebase Crashlytics crash reports with device and OS details.
• Advertising data. When ads are shown, Google AdMob and its partners may collect your device advertising identifier (IDFA on iOS, if you allow tracking; Advertising ID on Android), approximate location, and ad interaction data.
• On-device data. Settings and a session token are stored locally on your device.

We do not collect your contacts, photos, or precise GPS location. In-game balances are virtual and have no cash value.

3. How we use information

• Create, restore, and secure guest and Google-linked accounts
• Run matchmaking, private rooms, rankings, friends, and live matches
• Show your name, avatar, and rank to other players
• Process and protect purchases of virtual items and currency
• Send notifications you have enabled (invites, friend activity, rewards)
• Measure usage, fix crashes, and prevent cheating and abuse
• Show ads that help keep the App available
• Comply with legal obligations

4. How we share information

We share information only as needed:

• Other players — your display name, avatar, rank, and in-match status.
• Google — Google Sign-In, Firebase (Analytics, Crashlytics, Cloud Messaging), and AdMob. See Google’s Privacy Policy.
• RevenueCat — purchase validation and entitlements. See RevenueCat’s Privacy Policy.
• Hosting providers — our servers and database run on cloud infrastructure that stores your data on our behalf.
• Legal and safety — when required by law or to protect users and the service.

We do not sell your personal information.

5. Advertising and tracking

ShadowHand shows interstitial and rewarded ads through Google AdMob.

• iOS. We ask for your permission through Apple’s App Tracking Transparency prompt before using your advertising identifier (IDFA) for tracking or personalized ads. If you decline, ads are still shown but are not personalized using your IDFA. You can change this at any time in Settings → Privacy & Security → Tracking.
• EEA / UK. Where required, we ask for consent with Google’s User Messaging Platform. You can review your choice in the App’s Settings when available.
• Android. You can reset or opt out of personalized ads in your device’s Google settings.

6. Data retention

We keep account and gameplay data while your account exists. When you delete your account, your profile and related server data are removed (see section 8). Anonymized purchase transaction identifiers may be kept to prevent duplicate redemption and for accounting. Analytics and crash data held by Google follow Google’s retention schedule. Data stored on your device stays until you clear app data or uninstall.

7. Children

ShadowHand is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

8. Your choices and rights

• Play as a guest without linking any account.
• Sign out any time from Settings.
• Delete your account in Settings → Delete Account. This permanently removes your profile, progress, friends, items, match records, and push tokens from our servers. Step-by-step instructions: Delete your account.
• If you cannot use the App, email privacy@hailsom.com from the address linked to your account (or include your username) and we will delete it.
• Manage tracking and notifications in your device settings.

Depending on where you live (for example under the GDPR or CCPA), you may have rights to access, correct, delete, or export your data and to object to certain processing. Contact us to exercise them.

9. Security

We use reasonable technical and organizational measures, including encrypted connections and token-based authentication. No method of transmission or storage is completely secure.

10. International transfers

Our service providers may process data in countries other than yours. By using the App you understand your information may be transferred to those locations to provide the service.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date above changes when we do. Continued use after an update means you accept the revised policy.

12. Contact

Questions about this policy or your data: privacy@hailsom.com