Privacy Policy

Effective Date: January 1, 2025 · Last updated: October 13, 2026

Introduction

This Privacy Policy explains how we collect, use, and protect your personal information when you use the Immortal Tiger mobile application (the "App"). By using the App, you agree to the practices described in this Privacy Policy.

Please note that Immortal Tiger is a passion project developed by a single individual. For more information on the nature of the project and the associated risks, please review our Terms of Service.

1. Personal Information We Collect

We collect the following personal information to provide and improve the App's services:

• Email Address: Used for registration, login, and password recovery.
• Age Range (Android only): On Android, an age range and parental-approval status from Google Play Age Signals (see section 2). The App does not ask for your date of birth.
• Device ID (Hashed): Used for frictionless login and account management.
• Character Names: Used for player identification within the game and visible to other players.
• Chat Messages: In-game room chat is not stored, except a single message that a player reports, which is kept for up to 7 days for review. Pack chat keeps only the 50 most recent messages of each pack so members can read them when they return to the game; older messages are replaced automatically, and the history is deleted when the pack is disbanded. Friend chat keeps only the 50 most recent messages of each conversation between two friends; older messages are replaced automatically, messages older than 90 days are removed when the conversation is next used, and a conversation with no activity for 90 days is emptied automatically, and the whole conversation is deleted when either player removes the other as a friend, blocks them, or deletes their account. Reported messages may be retained for up to 7 days for investigation purposes only.
• Friends: Your friends list and pending friend requests (the other player's ID and the date). Friend requests expire after 14 days if not answered. Your friends can see whether you are currently online.
• User Reports and Blocks: Report records (who reported whom, the reason and the outcome), kept for up to 1 year; the reported message itself, kept for up to 7 days; and the players you have blocked, to maintain a safe gaming environment.

2. Age Verification and Google Play Age Signals

2.1 What is Google Play Age Signals?

Google Play Age Signals is a service provided by Google that allows us to verify the age of users and determine if parental approval is required for users under 18 years old. This system helps us comply with legal requirements in various jurisdictions that mandate age verification for certain app content and features.

2.2 Information Collected Through Age Signals

When you use the App, we receive the following information from Google Play Age Signals API:

• Age Category: Your age band (0-12, 13-15, 16-17, or 18+) as verified by Google Play.
• User Status: Whether you are an adult (18+), a supervised minor (under 18 with parental account), or unknown (age not verified).
• Parental Approval Status: For minors, whether a parent has approved your use of this App.
• Install ID: A unique identifier assigned by Google Play to supervised user installs, used solely for tracking revoked app approvals.

2.3 Purpose of Age Verification

We use age verification data exclusively for the following purposes:

• Legal Compliance: To comply with age verification laws (Texas SB2420, Utah HB311, Louisiana Act 440, and similar legislation).
• Content Filtering: To ensure age-appropriate content is provided to users based on their age group.
• Feature Access Control: To restrict or enable features (such as in-app purchases, chat, social features) based on age and parental approval.
• Parental Approval Verification: To verify that minors have received parental consent before accessing the App or making purchases.
• Safety Protections: To apply enhanced safety measures for younger users, including stricter content moderation and privacy protections.

2.4 Install ID Collection and Usage

For Supervised Users Only (Under 18): When a user under 18 years old uses the App with parental supervision, Google Play provides us with an Install ID.

Purpose of Install ID:

• To track and respond to revoked app approvals when a parent withdraws consent.
• To ensure we immediately disable the App for users whose parents have revoked approval.
• To maintain compliance with parental consent requirements.

Install ID Storage:

• Install IDs are stored on our secure backend servers located in Europe.
• Install IDs are retained only for the duration of the user's account lifetime.
• Install IDs are deleted within 30 days of account deletion.
• Install IDs are NEVER used for tracking, advertising, or any purpose other than revocation management.

Install IDs are currently provided only for supervised users.

2.5 Revoked App Approvals

Parents can revoke their approval for their child to use the App at any time through Google Family Link. When this occurs:

1. We receive notification through Google Play Age Signals API or Google Play Console.
2. We immediately disable all app features for the affected user.
3. The user will see a message explaining that parental approval has been revoked.
4. The user's account will remain in a suspended state until parental approval is reinstated.
5. If approval is not reinstated within 90 days, the account may be scheduled for deletion.

Revocation List Access: We access the list of revoked Install IDs through Google Play Console. This list is retained by Google for 3 months and downloaded by us periodically (typically daily) to ensure compliance.

2.6 Data Retention for Age Signals

Temporary Caching: Age verification data received from Google Play Age Signals API is cached in memory for a maximum of 30 minutes to optimize performance. This cache is automatically cleared and is never written to permanent storage.

No Permanent Storage: We do not permanently store age categories, user status, or parental approval status in our database. This information is requested fresh from Google Play each time it is needed.

Install ID Storage: Install IDs for supervised users are stored in our backend database for revocation tracking purposes only. This is the ONLY age-related data we store permanently, and only for users under 18 with parental supervision.

2.7 Your Rights Regarding Age Verification

You have the following rights concerning age verification:

• Verify Age (Android): You can verify your age at any time through Google Play Store settings.
• Parent Control: If you are a parent, you can manage your child's app access through Google Family Link, including revoking approval at any time.
• Data Access: You can request information about what age-related data we have collected by contacting us at shinavoka@gmail.com.
• Opt-Out: If you do not wish to provide age verification, you may be unable to use certain features or the App may be unavailable in jurisdictions that require age verification.

2.8 Brazil’s Digital ECA Compliance

The Digital ECA is Brazil's child online protection law enacted in 2025 and effective March 17, 2026. It applies to digital products and services directed at or reasonably likely to be accessed by minors in Brazil, regardless of the provider's location.

Parental Consent for Social Features (Article 21):

• Interactive features such as in-game chat or direct player communication may be disabled by default for users identified as minors and may require parental consent before being enabled.
• Parents or guardians may manage these permissions through parental control tools such as Google Family Link or equivalent platform controls.

Prohibited Practices for Minors:

• ❌ No targeted advertising: We do not profile minors for behavioral or targeted advertising purposes (Article 22).
• ❌ No loot boxes: Randomized reward mechanics are not offered to users identified as minors (Article 20).
• ❌ No harmful engagement loops: We do not use manipulative design patterns intended to exploit minors' attention or encourage compulsive usage.

Age Assurance (Article 12): We rely on platform-provided signals such as Google Play Age Signals to determine age categories for Brazilian users. No additional documents are required from users.

Regulatory Authority: Oversight of the Digital ECA is conducted by Brazil's National Data Protection Authority (ANPD). We monitor guidance issued by the ANPD and update our practices as necessary.

3. Purpose of Collecting Personal Information

We collect personal information for the following purposes:

• Account Management: To register and authenticate users.
• Password Recovery: To assist users in regaining access to their accounts.
• Age Verification: To ensure compliance with age restrictions.
• In-Game Communication: To enable players to communicate within the game through real-time text chat features.
• Content Moderation: To monitor and moderate user-generated content (character names and chat messages) to ensure compliance with our Terms of Service and Community Guidelines.
• Safety and Security: To prevent harassment, abuse, and inappropriate content through automated filters and user reporting systems.
• To detect cheating, fraud, abuse, or violations of our Terms of Service.

4. Analytics and Tracking Technologies

We use Firebase Analytics to:

• Measure app performance.
• Analyze user interactions to improve the App.

Firebase Analytics may collect pseudonymous identifiers such as device identifiers or app instance IDs. Data collected through Firebase Analytics is processed in an aggregated and pseudonymized manner. It is used for statistical analysis and operational purposes to help us understand user behavior and improve the App.

Crash Reporting: We use Firebase Crashlytics to monitor application stability and diagnose crashes. Crash reports may include technical information such as device type, operating system version, app version, and anonymous identifiers. This data is used solely to improve app stability and performance and does not contain personal user content.

5. Sharing and Disclosure of Information

We do not sell your personal data. We may share or disclose your information to the following third-party service providers who assist us in operating the App:

• Google Firebase: For analytics and to improve app performance. You can review Firebase's privacy policy here.
• Google AdMob: To display advertisements in the App. AdMob may collect data to serve personalized ads. Ads in the App are rewarded videos that you choose to watch. Where the law requires it (for example in the EEA and the UK), Google asks for your consent through its consent form before ads are personalized. On iOS, AdMob uses your device’s advertising identifier (IDFA) only if you allow tracking in Apple’s App Tracking Transparency prompt; you can change this at any time in your device’s Settings. You can review Google's advertising policies here.
• Google Forms (older versions of the App): For player reporting and moderation purposes. In older versions of the App (before in-app reporting was added), Report opens a Google Form in your browser. When you submit a report through that form, your report data (including reporter ID, reported player information, violation details, and optional video evidence URLs) is processed by Google Forms. This data is stored in our Google account and used solely for investigating violations and maintaining community safety. Google Forms operates under Google's privacy policy (see link above). You can learn more about Google Forms' data handling here. Current versions send reports inside the App, to our own servers.
• Cloud Hosting Providers (Vultr, Hetzner, Contabo, Ovh): Our game servers and databases are hosted on infrastructure provided by these companies in Europe. They do not have direct access to your personal data but store our data on our behalf.
• Content Moderation Services: We may use third-party AI and moderation tools to scan chat messages and character names for inappropriate content in real-time. These services process data only for moderation purposes and do not retain your personal information.

We only share information necessary for them to perform their functions and require them to protect your data.

6. Data Storage and Security

User information is securely stored on servers located in Europe (vps and cloud services provided by Vultr, Hetzner, Contabo and Ovh). We retain your personal data for as long as your account is active or as needed to provide you with our services.

Chat Message Storage:

• In-game room chat (players in the same match) is not stored and is gone when the session ends, except a single message that a player reports, which is kept for up to 7 days for review.
• Pack chat is stored in limited form: each pack keeps only its 50 most recent messages, each with the sender's player ID, character name and tag, the time sent and, for game invitations, the game server and map being joined. Newer messages replace older ones automatically, and the stored history is deleted when the pack is disbanded.
• Friend chat is stored in limited form: each conversation between two friends keeps only its 50 most recent messages, each with the sender's player ID, the text, the time sent and, for game invitations, the game server and map being joined. Messages older than 90 days are removed when the conversation is next used, and a conversation with no activity for 90 days is emptied automatically, and the conversation is deleted when either player removes the other as a friend, blocks them, or deletes their account.
• We do not keep any other chat history or archives.
• Chat translation: When you tap the translate button on a chat message, the App sends that message’s text and your App language to our own servers. The text is translated by open-source translation software (Mozilla’s Firefox Translations models) that we run on our own servers; it is not sent to any third-party translation service. The text sent to the translation software does not include your player ID or character name. To avoid translating the same message twice, the translated text is reused for 60 minutes and then discarded from our servers’ memory, in any case within about two hours; it is identified only by a fingerprint of the original text and the target language, is never written to a database or disk, and is not linked to you. To limit repeated requests, we keep the time of your last translation request for up to a few minutes. Our logs record only the result, the languages, the message length and the time taken, never the message text. Translations are produced automatically and may be inaccurate.
• For safety purposes, messages may be temporarily cached server-side for up to 24 hours for automated profanity filtering and security scanning. This data is not accessible to users or staff and is automatically purged.
• When a player reports a message in the App, only that one message is kept, for up to 7 days for review, and is then deleted automatically. The report record itself holds no message text and is kept for up to 1 year, as described under Report Data Storage below.

Report Data Storage:

• Reports sent in the App: These are stored on our own servers in Europe, with the game's other data. Each report record holds the player IDs of the reporter and the reported player, the reported player's character name at the time of the report, the reason chosen, where the report was made (a player's profile or a chat line), whether the reporter also blocked the player, and the outcome of our review. It holds no message text and no free-text comment. The report record is kept for up to 1 year and the reported message for up to 7 days; both are then deleted automatically.

Reports sent through the Google Form in older versions of the App (before in-app reporting was added):

• In older versions of the App, player reports submitted through our external reporting system are stored in Google Forms and linked Google Sheets.
• Report data includes: reporter player ID (anonymized game identifier), reported player information, violation type, description, optional video evidence URLs (older versions of the App only; in-app reports take no links), timestamp, and game version.
• This data is retained for as long as necessary to investigate violations and maintain community safety records, typically up to 1 year after resolution.
• Resolved reports may be archived or deleted at our discretion based on the severity and nature of the violation.

If you delete your account, we will delete your data within 30 days, unless we are required to retain it for legal reasons. Records of your purchases are kept as described in the In-App Purchases section. Messages you posted in a pack's chat are an exception: they stay in that pack's recent history (its 50 most recent messages) until newer messages replace them or the pack is disbanded. Your friend list, friend requests and friend chat conversations are deleted with your account. To protect your data, we implement the following security measures:

• Encryption in Transit: The App communicates with our servers over encrypted connections (HTTPS/TLS). Device identifiers are hashed on your device before they are sent.
• Access Control: Restricted access to personal data to authorized personnel only.
• Regular Security Audits: Periodic reviews and updates to security protocols.

Service Discontinuation: In the event that the service is discontinued, we will permanently delete all personal user data within 60 days of the service termination date.

7. User-Generated Content (UGC) and Chat Features

7.1 Character Naming

Players can create custom character names that are visible to other players. By creating a character name, you agree to:

• Comply with our Terms of Service and Community Guidelines.
• Not use names that are offensive, discriminatory, sexually explicit, or violate others' rights.
• Not impersonate other players or public figures.

We reserve the right to reject or modify character names that violate our policies. Character names are subject to automated profanity filters and manual review.

7.2 In-Game Chat

The App includes text chat functionality that allows players to communicate with each other in real-time. Regarding chat features:

• Room Chat Is Not Stored: Messages in the in-game room chat are only available during your active game session and are not stored, except a single message that a player reports, which is kept for up to 7 days for review.
• Limited Pack Chat History: Pack chat shows the pack's 50 most recent messages so members can catch up when they return. Older messages are replaced automatically and cannot be recovered, and the history is deleted when the pack is disbanded. Messages you posted remain visible to the pack's members until they are replaced or the pack is disbanded.
• Limited Friend Chat History: A conversation between two friends shows its 50 most recent messages. Older messages are replaced automatically, messages older than 90 days are removed when the conversation is next used, and a conversation with no activity for 90 days is emptied automatically, and the conversation is deleted when either of you removes the other as a friend, blocks the other, or deletes the account.
• Real-Time Profanity Filtering: We use automated profanity filters to detect and block offensive language, vulgar words, and inappropriate content in real-time before messages are delivered to other players.
• Prohibited Content: Users must not share personal information (such as real names, addresses, phone numbers), engage in bullying, harassment, hate speech, or post illegal, violent, or sexually explicit content. While we filter profanity, users are responsible for following these guidelines.
• User Responsibility: Players should exercise caution and not share personal or sensitive information in chat. Our profanity filters help maintain appropriate language, but users should report any violations they encounter.
• Tap-to-Translate: You can tap the translate button on another player’s message to see it in your App language, and tap again to return to the original. Translation runs on our own servers, the message text is never saved to a database or disk, and translations are automatic and may be inaccurate. See Section 6 for details.
• Safety Scanning: For safety purposes only, messages may be temporarily cached server-side for up to 24 hours for automated profanity filtering and security scanning. This data is not accessible to users or staff and is automatically purged.
• Reported Content: When a player reports a message in the App, only that one message is kept, for up to 7 days for review, and is then deleted automatically. The report record (who reported whom, the reason and the outcome, with no message text) is kept for up to 1 year.

7.3 Reporting and Blocking

To maintain a safe environment, the App provides the following features:

• In-App Reporting: You can report a player from their profile or from a line in chat. Choose a reason (offensive or abusive chat, harassment or bullying, hate speech, sexual content, inappropriate name, cheating or exploiting, spam or scam, or something else), optionally block the player at the same time, and send. The report is sent inside the App to our own servers; there is no free-text comment. In older versions of the App (before in-app reporting was added), Report opens the Google Form described above instead.
• Block Function: Users can block other users to prevent unwanted communication. Blocked users cannot send you chat messages or see your online status. Blocking a friend also removes them from your friends list and deletes your conversation with them.
• Review: Reports are reviewed by our team, and we act on violations, which may include banning the account.

7.4 User Responsibilities

Before using chat or character naming features, users must:

• Accept our Terms of Service and Community Guidelines.
• Understand that user-generated content is visible to other players.
• Not share personal or sensitive information through chat or character names.
• Report any violations or inappropriate behavior they encounter.

8. External Links and Third-Party Services

The App may contain links to external websites and services, including but not limited to:

• Player Report Forms (older versions of the App): In older versions of the App (before in-app reporting was added), Report opens a Google Form (docs.google.com) in your device's web browser. This external service is used to collect and manage player reports for moderation purposes. Current versions send reports inside the App, to our own servers.
• Video Evidence Platforms (older versions of the App): In older versions of the App (before in-app reporting was added), the Google Form lets users provide links to video evidence hosted on third-party platforms such as YouTube, Streamable, Google Drive, or Vimeo. We do not control these platforms and are not responsible for their content or privacy practices.
• Support and Community Resources: Links to our Terms of Service, Privacy Policy, Discord community, or other external resources.

When you access external links or third-party services:

• You are leaving the Immortal Tiger app environment.
• These external services have their own privacy policies and terms of service.
• We are not responsible for the privacy practices, content, or security of external websites.
• We encourage you to review the privacy policies of any external services you visit.

9. User Rights

Users have the following rights regarding their personal information:

• Access and Edit: You can access and modify your account details at any time using in-app features.
• Delete Account: You can permanently delete your account and all associated data (including character names) using the in-app account deletion feature. This action is irreversible. Deleting your account deletes the reports you sent in the App and the in-app reports about you. Note that messages you posted in a pack's chat remain in that pack's recent history until they are replaced by newer messages or the pack is disbanded, and that records of your purchases are kept as described in the In-App Purchases section.
• Chat History: Room chat is not stored, except a single message that a player reports, which is kept for up to 7 days for review. Pack chat keeps only each pack's 50 most recent messages, which the pack's members can read in the App. Friend chat keeps only the 50 most recent messages of each conversation, which both friends can read in the App; removing a friend deletes the conversation.
• Report Data: Reports sent in the App are deleted with your account, as described above. In older versions of the App (before in-app reporting was added), reports are sent through a Google Form; if you wish to request deletion of reports you have submitted that way or such reports made against you, please contact us with specific details. We will review such requests on a case-by-case basis while balancing community safety needs.
• Object to Processing: Depending on your jurisdiction (e.g., under GDPR), you may have the right to object to or restrict certain processing of your data. To exercise this right, please contact us.

For additional assistance, contact us at shinavoka@gmail.com.

10. Contact Information

If you have any questions about this Privacy Policy or your data, please contact us at:
Email: shinavoka@gmail.com

11. Compliance with Laws

Our practices are designed to align with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Vietnamese Personal Data Protection Laws
• Children's Online Privacy Protection Act (COPPA)
• Brazil's Digital Statute of the Child and Adolescent (ECA Digital — Lei n° 15.211/2025), effective March 17, 2026

12. Children's Privacy

The App is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we discover such data has been collected, it will be promptly deleted.

Chat Features and Minors: Users under 18 should obtain parental permission before using chat features. We strongly recommend that parents monitor their children's use of communication features and discuss online safety with them.

Safety Measures for Young Users:

• Real-time automated profanity filters to block inappropriate language and offensive content.
• Regular warnings displayed in-game reminding users not to share personal information (such as real names, addresses, phone numbers, or email addresses) in chat.
• Minimal chat retention: room chat is not stored (except a single message that a player reports, which is kept for up to 7 days for review), and pack chat and friend chat keep only the 50 most recent messages of each pack or conversation, so only a short recent window of conversation is kept.
• Easy-to-use reporting system allowing users to report inappropriate behavior or content.
• Blocking functionality enabling users to prevent unwanted communication.
• Enhanced moderation priority for reported issues involving minors.

Parental Controls: If you are a parent or guardian concerned about your child's account or activity in the game, please contact us at shinavoka@gmail.com with your child's account information. We will work with you to address your concerns, which may include account monitoring, restriction of features, or account deletion. Please note that while we will make every effort to accommodate reasonable parental requests, some actions may require verification of parental authority to protect user privacy.

13. Advertising

We use third-party services like AdMob to display advertisements. Ads in the App are rewarded videos that you choose to watch. Where the law requires it (for example in the EEA and the UK), Google asks for your consent through its consent form before ads are personalized. On iOS, AdMob uses your device’s advertising identifier (IDFA) only if you allow tracking in Apple’s App Tracking Transparency prompt; you can change this at any time in your device’s Settings. For more information on what data is collected and how it is used, please refer to the "Sharing and Disclosure of Information" section of this policy.

14. In-App Purchases (IAPs)

The App offers in-app purchases, including one-time items and subscriptions. Payments are processed through Google Play and Apple App Store, and we do not receive or store your card or bank details. We keep a record of each purchase (the product, the store order ID, the time and its status) to deliver items, handle refunds and prevent fraud. This record is kept after you delete your account for as long as these purposes and accounting rules require.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be communicated through the App. Continued use of the App after updates constitutes acceptance of the revised policy.

Thank you for trusting Immortal Tiger. By using our App, you agree to this Privacy Policy.