HEROES OF DARKWOODS - PRIVACY POLICY Last updated: 16 August 2026 THE SHORT VERSION The game asks once, on first launch, whether it may send anonymous notes on how it is played. If you say no, it sends nothing and stores nothing about you. If you say yes, it sends what is listed below and nothing else. You can change your mind at any time in Settings, and changing it back to no deletes the identifier from your device. There is no account, no advertising, no ad identifier, and nothing that identifies you or your device to anyone else. WHO IS RESPONSIBLE Simon Schubert Parkstr. 43 13585 Berlin Germany simon@librem.one The controller for the processing described here, within the meaning of the General Data Protection Regulation (GDPR). WHAT IS COLLECTED, IF YOU AGREE Nothing in this section happens unless you have agreed to it. Events describing what happens in the game: - the app being opened, and whether it is the first time - the tutorial being offered, started, reached step by step, finished or skipped - a match being started, finished or abandoned, with its island, game mode, difficulty, size, number of realms, how long it lasted, whether it was won, how many camps were cleared and which achievements were earned - a match being picked up again after the game was closed in the middle of it - the purchase screen being reached, and whether a purchase was started, restored, completed, cancelled, left pending or refused - a fault: a saved game that this version of the game could not open - your answer to the question this policy is about Technical information sent with each event: - the version of the game - the operating system and its version - whether the device is a phone or a desktop computer - the language your device is set to - whether the full game has been bought, and whether the store you installed from offers it for sale at all - which wording of the purchase screen you were shown, where that is being tested - see below An identifier: - a random number, generated by your installation of the game the first time you agree, and stored only on your device. It is not your device's identifier, not an advertising identifier, and nothing another app could arrive at independently. Reinstalling the game, or withdrawing your agreement, discards it permanently. Your IP address: - necessarily seen in transit to deliver the data, as it is by every server you connect to. It is not stored alongside the events, and no location of any kind is derived from it - the game explicitly tells the analytics service not to look it up. WHAT IS NOT COLLECTED - your name, email address, or any account - your Google Play Games or Apple Game Center identity - any advertising identifier, or any identifier belonging to your device - your location, precise or approximate - your contacts, photos, files or anything else on your device - anything you type - your saved games or the islands you play on, which never leave the device WHY, AND ON WHAT BASIS To understand how the game is actually played and decide what to improve: which islands people start, how long a match runs, and where in the tutorial people give up. It is read by one developer, for that purpose only. The legal basis is your consent, under Article 6(1)(a) GDPR. Storing the identifier on your device, and reading it back, additionally rests on your consent under section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Neither is something the game does before you have agreed to it. Some players are shown different wording on the purchase screen, chosen at random, so that the clearer version can be identified. This affects only the words on the screen. It never changes how the game plays, and no decision about you is made automatically. WHO ELSE SEES IT PostHog Inc., which provides the analytics service, acting as a processor on the controller's instructions under a data processing agreement. The data is held on PostHog's European infrastructure in Frankfurt, Germany. PostHog Inc. is established in the United States and its staff may access European infrastructure for support and maintenance; where that happens it is covered by the European Commission's Standard Contractual Clauses. The data is not sold, not shared for advertising, and not passed to anyone else. HOW LONG IT IS KEPT Event data is held by the analytics service named above, on the controller's behalf. It is kept while it is still useful for the purpose described here and deleted when it is not, which in practice means it is reviewed and cleared at least once a year. Withdrawing your agreement stops all collection immediately, discards anything the game has not yet sent, and deletes the identifier from your device. Data already collected can be deleted on request, and will be - see below. YOUR RIGHTS You may withdraw your consent at any time, in Settings, without giving a reason. Withdrawing it does not affect the lawfulness of what was collected beforehand. You also have the right to request access to your data, its correction or erasure, restriction of its processing, and to receive it in a portable form. To exercise any of these, write to the address above. Because the data is tied only to the random identifier described earlier and not to you, a request will need that identifier to be answered - it can be found in Settings. You have the right to lodge a complaint with a data protection supervisory authority, in the country where you live or where the controller is established. OTHER THINGS THE GAME DOES These happen whether or not you agree to the above, because they are the game working rather than the game counting. Settings and saved games are written on your device and stay there. If you choose to sign in to Google Play Games or Apple Game Center, your achievements are sent to that service. Google and Apple are responsible for what they then do with them, under their own privacy policies. If you buy the full game, the purchase is handled entirely by Google Play or the App Store. The game is told only whether the product is owned. Payment details are never seen by the game or by the controller. CHILDREN The game is not directed at children under 16, and consent is not knowingly sought from them. If you believe a child has agreed to the collection described here, write to the address above and it will be deleted. CHANGES If this policy changes in a way that affects what is collected or why, consent will be asked for again rather than assumed.