Manarena — Privacy Policy
This Privacy Policy explains what information the Manarena mobile game (the "Game") collects, how we use it, who we share it with, and the choices you have. It applies to the Game on iOS and Android and to any related support channels. By installing or using the Game you agree to this Policy. If you do not agree, do not use the Game.
1. Summary
- You can play without creating an account. The Game creates an anonymous player ID for you.
- We store your game progress (currencies, heroes, ranks, collection) on servers so it survives reinstalls and cheating is prevented.
- Your display name, avatar, frame, rank and the boards you build in ranked play are shown to other players (as opponents and on leaderboards). We never show your email, real name or device identifiers to other players.
- We do not sell your personal information. We do not show third-party advertising in the Game at this time.
- The Game is not directed to children under 13. See Section 9.
- You can delete your account and all server-side data from inside the Game at any time (Player → Account → Delete account).
2. Information we collect
| Category | Examples | Source | Why |
|---|---|---|---|
| Player identifier | A random anonymous player ID generated by Unity Authentication; an in-game display ID (e.g. "IM-XXXX") | Created automatically on first launch | To save your progress and tell players apart |
| Account linking (optional) | If you choose "Sign in with Apple" or "Google Play Games": the token and user identifier the provider gives us; your email only if the provider shares it and you allow it (Apple lets you hide it) | You, via Apple or Google | To recover your progress on a new device |
| Profile and gameplay data | Display name, chosen avatar and frame, player level, hero levels and unlocks, in-game currencies (Gold Dust, Gems, Shards, Tomes, Sigils), foiled cards, Tower progress, Arena standing, ranked rating, season history, match results, the boards you build each round of a run ("ghost boards"), settings and tutorial state | Generated by playing | To run the Game, save progress, match you with opponents and keep play fair |
| Purchase data | Product identifier, transaction/receipt identifier, purchase time, status; we never see your card number | Apple App Store / Google Play when you buy | To deliver what you bought and prevent fraud |
| Device and technical data | Device model, OS version, app version, language, country/region (from app store or IP), approximate time zone, crash and error logs, IP address at the time of a request (not stored long-term) | Your device, automatically | To keep the Game working, fix bugs, enforce fair play, and comply with law |
| Usage analytics | Which screens you open, runs played, session length, tutorial completion, feature usage | Your device, automatically | To understand what players enjoy and improve balance and design |
| Support communications | Emails you send us and the information in them | You | To answer you |
We do not collect precise location, contacts, photos, microphone or camera data, health data, or government identifiers. We do not use the device advertising identifier (IDFA/GAID) and we do not use tracking as defined by Apple's App Tracking Transparency framework.
3. How we use information
- Operate the Game: save and restore progress, run matches, calculate ranks and rewards, deliver purchases.
- Fair play and security: validate match results on our servers, detect modified clients or manipulated data, prevent duplicate purchases, protect our systems.
- Improve the Game: aggregate analytics to tune balance, difficulty, onboarding and performance.
- Communicate: respond to support requests; show in-game notices; send device notifications you have enabled (you can turn these off in your device settings at any time).
- Legal: comply with applicable law, enforce our Terms of Service, and defend legal claims.
We do not use your information for automated decision-making that has legal or similarly significant effects on you. Matchmaking is automated but affects only who you play against.
4. Legal bases (EEA, UK, Switzerland)
Where the GDPR or UK GDPR applies, we process your data on these bases: performance of a contract (operating the Game and delivering purchases under our Terms); legitimate interests (security, fair play, analytics, product improvement, defending claims — balanced against your rights); consent (optional account linking, optional notifications); and legal obligation (tax, accounting, lawful requests).
5. Who can see your data
Other players
Ranked and Arena play is asynchronous: the boards you build each round are recorded and later used as the opponent for other players of a similar rank, alongside your display name, avatar, frame and league. Leaderboards show your display name, avatar and rank. Choose a display name you are comfortable showing publicly; do not use your real name or other personal details in it.
Service providers (processors)
| Provider | What they do for us | Where |
|---|---|---|
| Unity Technologies (Unity Gaming Services: Authentication, Cloud Save, Cloud Code, Remote Config, Leaderboards, Analytics) | Hosts player accounts, saved progress, match validation, configuration and analytics | United States / EU |
| Apple Inc. (App Store, Sign in with Apple, Game Center, push notifications) | Distribution, payment processing, optional sign-in | Global |
| Google LLC (Google Play, Google Play Games Services, Firebase Cloud Messaging) | Distribution, payment processing, optional sign-in, notifications on Android | Global |
| Crash and performance reporting (currently via Unity; we may add a provider such as Sentry or Firebase Crashlytics) | Collects crash logs to fix bugs | United States / EU |
| Email provider for support | Receives and stores support conversations | United States / EU |
Providers may only use your data to provide services to us, under contracts that require confidentiality and security. Apple and Google also act as independent controllers for your App Store / Google Play account under their own privacy policies.
Others
We may disclose information (a) to comply with law, regulation, legal process or a government request; (b) to enforce our Terms and protect the rights, property or safety of us, our players or the public, including investigating fraud or cheating; (c) in connection with a merger, acquisition, financing or sale of assets, in which case this Policy continues to apply to your data; and (d) with your consent.
We do not sell personal information and we do not share it for cross-context behavioral advertising.
6. International transfers
We are based in the United States and our providers may store data in the United States, the European Union and other countries. Where required, transfers out of the EEA, UK or Switzerland rely on the EU Standard Contractual Clauses, the UK Addendum, the EU–US Data Privacy Framework where a provider is certified, or other lawful mechanisms.
7. Retention
- Account and progress data: for as long as your account exists. If you delete your account, server-side data is deleted within 30 days, except as noted below.
- Ghost boards: kept only for recent runs (a rolling window per player) and deleted with the account.
- Purchase records: kept as long as required for tax, accounting and fraud-prevention purposes (typically up to 7 years), in a form that no longer identifies your gameplay profile.
- Anonymised, aggregated gameplay statistics (which cannot identify you) may be kept indefinitely for balance and research.
- Inactive accounts: we may delete accounts that have not been used for 24 months after reasonable notice where we have a way to contact you.
8. Your rights and choices
- Delete your account in the Game: Player → Account → Delete account. This removes your server-side data and signs you out; it cannot be undone and purchases are not refunded.
- Access, correction, portability, restriction, objection: email [email protected] from the address you want us to reply to, with your in-game display ID. We may ask you to verify control of the account. We respond within the time required by law (generally 30 days; 45 days under California law).
- Notifications: disable in your device settings or in the Game's Settings.
- Account linking: optional; you can play anonymously. If you unlink or delete, recovery on a new device will not be possible.
- Marketing: we do not send marketing email. If we ever do, each message will include an unsubscribe link.
- Complaints: you may lodge a complaint with your local data protection authority. EEA residents may contact the authority in their member state; UK residents the ICO.
California and other US state privacy rights
If you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon or another state with a comprehensive privacy law, you may have the right to know what personal information we collect, to access or delete it, to correct it, to obtain a copy, and to opt out of sale, sharing or targeted advertising. We do not sell or share personal information and do not engage in targeted advertising, so there is nothing to opt out of. We do not use or disclose sensitive personal information for purposes that require a right to limit. We will not discriminate against you for exercising your rights. You may designate an authorized agent to make a request on your behalf; we will require proof of authorization. California residents: in the preceding 12 months we collected the categories listed in Section 2 (identifiers, commercial information, internet activity, and geolocation at country level) for the purposes in Section 3, and disclosed them to the service providers in Section 5.
9. Children
The Game is not directed to children under 13 (or under the age of digital consent in your country, e.g. 16 in parts of the EU). We do not knowingly collect personal information from children under that age. The Game contains in-app purchases and asynchronous competition with other players' boards; we recommend parental supervision for younger teens and the use of platform parental controls (Apple Screen Time / Ask to Buy, Google Family Link). If you believe a child has provided us personal information, email [email protected] and we will delete it.
10. Security
We use industry-standard measures: all traffic is encrypted in transit (HTTPS/TLS), server-side data is stored by Unity Gaming Services with access controls, gameplay-critical values are computed and validated on our servers rather than trusted from the device, and access to production data is limited to the developer. No system is perfectly secure; we cannot guarantee absolute security, and you use the Game at your own risk to that extent. If we learn of a breach affecting your data we will notify you and the relevant authorities as the law requires.
11. Third-party links and services
The Game may link to third-party sites or services (for example, app store pages or support pages). Their privacy practices are their own; this Policy does not cover them.
12. Changes to this Policy
We may update this Policy. The effective date at the top will change and, for material changes, we will show a notice in the Game or on this page before the change takes effect. Continued use after the effective date means you accept the updated Policy.
13. Contact
Daniel Eordogh
[email protected]
If you are in the EEA or UK and we are required to appoint a representative under Article 27 GDPR, their details will be listed here.