Privacy Policy
1. Who controls the data
Heroes of Ametria is provided by Wallace Barbosa, an individual established in Brazil ("we", "us"). For questions, privacy rights or requests regarding personal data, contact support@heroesofametria.com.
2. Scope
This policy explains how we handle personal data and data related to the use of the game Heroes of Ametria on Android and iOS applications, authentication services, online features, notifications and support. It does not cover third-party services opened by the user outside the application, such as social networks, Google, Apple or app stores; those services have their own policies.
3. Data we process
- Account data and identifiers: user identifier, e-mail address when provided by Google or Apple, authentication method and the display name chosen in the game.
- Game data: level, experience, in-game coins and energy, characters, pets, equipment, inventory, achievements, missions, rewards, customization preferences, tutorial progress, sessions and login records.
- Social data and generated content: friendship IDs, invitations, guilds, display name and avatar, and messages sent to the guild chat.
- Moderation data: when a player reports another, we record who reported, who was reported, the reason chosen, a copy of the reported message when there is one, and the list of players each user has blocked. These records exist to investigate abuse and are accessible only to us — never to other players.
- Technical and notification data: push notification token, notification preference, notification topics, application version, platform and the identifiers/sessions required to authenticate and protect the account.
- Usage data: application interaction events related to social links and social rewards. Firebase services may also process technical identifiers and usage data necessary to provide analytics, authentication, messaging and infrastructure.
- Deletion data: when an account is deleted, the service keeps minimal audit records and a backup copy for the periods defined in section 7, exclusively for security, fraud prevention, incident resolution and legal obligations.
We do not request precise location, contacts, photos, camera, microphone, health information or payment financial data in the application. The game has no real-money purchases, subscriptions or advertising. If that changes, we will update this policy before the change reaches the game.
4. How we use the data
- to create, authenticate, maintain and protect accounts;
- to provide progress, inventory, matches, social features, guilds, tournaments and other online functions of the game;
- to send notifications the user has allowed and is subscribed to;
- to investigate reports, apply blocks between players and act against abuse, harassment and inappropriate content;
- to prevent fraud, unauthorized access, spam and violations of the game rules;
- to fix errors, maintain security, comply with legal obligations and respond to support requests;
- to measure limited interactions in order to understand game features and improve the service.
Where the Brazilian General Data Protection Law (LGPD) applies, we process data to perform the contract for providing the game, to comply with legal obligations, to exercise rights, to serve legitimate interests of security and fraud prevention, or with consent — for example, for notifications when required by the operating system.
5. Who we share data with
We do not sell personal data and we do not use data for cross-app or cross-site behavioural advertising. We may share data with, or allow it to be processed by, the following processors, strictly to provide the services described:
- Google Firebase and Google Cloud: authentication, Firestore, Realtime Database, Cloud Functions, Cloud Storage, Cloud Messaging and Analytics;
- Google Sign-In and Apple Sign In: authentication, when the user chooses those methods;
- Google Play and Apple App Store: distribution, installation and applicable store services.
We may also disclose data when necessary to comply with the law or a valid order, to protect users, to investigate fraud or to defend rights. Guilds and friendships make game data and public identity visible to other players, such as display name, avatar, social data and guild messages.
6. International transfers
Infrastructure providers process data on servers located in the United States. We adopt the measures set out in applicable legislation for international transfers and use providers with appropriate contractual and technical commitments.
7. Retention and deletion
We keep account and game data while the account is active or while it is needed to provide the game. Notification tokens are removed on logout when possible, and may also be removed when invalid. The guild chat keeps only the 100 most recent messages per guild. Guest accounts with no access for more than 30 days are deleted automatically.
Reports are kept for 12 months and then deleted automatically. That period allows repeat offences by the same user to be identified over the course of a year. The list of players you have blocked belongs to your account and is kept while the account exists, or until you undo the block.
After the account is deleted, we delete the authentication account and the associated operational data. Only the following are subject to a residual period:
- the backup copy created at the moment of deletion, automatically erased in 30 days;
- the audit record of the deletion, which contains neither name nor e-mail, erased in 90 days.
Longer periods will only apply if required by law or necessary for security and the defence of rights.
Users can delete their account in the application under Settings > Delete account, or request deletion through the page https://heroesofametria.com/en/account-deletion.html.
8. Security
We use authentication controls, access rules, server-side validation, sessions, action rate limiting and transmission over protected channels provided by the services we use. No system is absolutely secure; we ask users to protect their login provider account and never share credentials.
9. Children and teenagers
Heroes of Ametria is not intended for anyone under 13 years old and we do not knowingly collect personal data from children below that age. The game has chat between players; teenagers should use it with appropriate supervision from a guardian. If you believe a child under 13 has provided data, contact support@heroesofametria.com and we will arrange deletion.
10. Your rights
Under applicable legislation, you may request confirmation of processing, access, correction, anonymisation, blocking, erasure, portability where applicable, information about sharing, withdrawal of consent, and review of automated decisions where relevant. To exercise your rights, write to support@heroesofametria.com. We will respond within 15 days. We may ask for reasonable information to confirm your identity and protect your account.
11. Changes to this policy
We may update this policy when the game, the services or the laws change. We will publish the updated version on this page and change the update date. Where required, we will ask for new consent or provide additional notice.
12. Contact
Controller: Wallace Barbosa — Brazil
Privacy and support: support@heroesofametria.com