Privacy Policy

This policy explains what information World of Clashes ("the game", "we", "us", "our") collects, why, who it is shared with, and the choices and rights you have. It applies to the World of Clashes mobile app (iOS and Android), to this marketing website (worldofclashes.com), to the account portal at worldofclashes.com/account, and to the community forums.

1. Information we collect

a) Account & sign-in

• Device identifier. We link an identifier for your device, stored by the game on your device, to your account. The game uses it to sign you back in automatically on that device, and we use it so that a ban for cheating or abuse can't be escaped by reinstalling. Accounts made with older versions of the game may have been created with this identifier alone.
• Sign in with Apple (iPhone and iPad). If you use it, Apple gives us a stable, app-specific identifier and — only if you choose to share it — your name and an email address, which may be Apple's private relay address. We use it solely to sign you in. We never receive your Apple password.
• Email & password. To play, you sign in with an email address and a password (or with Sign in with Apple, above). We store your email address and a one-way bcrypt hash of your password — never your password in readable form. The same sign-in opens the account portal at worldofclashes.com/account and the forums.

b) Gameplay data

To save and sync your progress, our game server stores your characters (heroes) and their names, level, experience, gold, equipment/gear, appearance, current zone and position, quest progress, arena rating, and aggregate play statistics (such as play time and battle outcomes). It also stores your auction house listings (the item, the price and your account's username, a random name our server gives your account).

c) Chat, letters, friends & guilds

Messages you send in the in-game chat are relayed to other players in your area, or to the player or party you write to. Chat is transient relay traffic and is not kept as a stored message history.

In-game letters are different: the subject and message you write, and any gold or items you attach, are stored on our server until the recipient claims or deletes the letter. If the recipient plays on iPhone or iPad with notifications turned on, a notification with your hero's name, the recipient's hero name and the letter's subject is sent through Apple's push service (see §4).

We also store each hero's friends list (each friend's hero name, realm, level and class), your guild membership, and the names and tags of guilds you create. These are in-game connections only — the game never reads the contact list on your phone.

If you report a player, we store the report: your account, the hero you reported and the account it belongs to, the reason you write and the time.

d) Purchases

If you buy an in-app item, the purchase is processed by the Apple App Store or Google Play — not by us. We never see or receive your payment card details. We do receive a purchase receipt / token from the store, which our server validates to unlock the entitlement (for example a cosmetic skin) on your account. When you buy on Android, we give Google Play a one-way-hashed identifier of your game account, so a purchase can be matched to the account that made it.

e) Technical & log data

Like any online service, our servers automatically record connection data such as your IP address and timestamps. We use this to operate the service, keep it secure, and prevent abuse (for example rate-limiting sign-in attempts). On the web account portal, rate-limit records are keyed by a one-way hash, so raw IP addresses and emails are not written to those files. Our game servers' logs and system logs, which can include your IP address, internal account number and hero names, are kept for no more than 30 days. The web server for worldofclashes.com keeps its own access log (your IP address, the page requested, the time and your browser type), which is deleted after 30 days.

For security, abuse prevention and running the service, the game server keeps the most recent IP address and platform (for example iOS or Android) of each signed-in account. To show our small operations team roughly where players are connecting from, and to help them spot abuse such as many accounts signing in from one place, we look up an approximate country and city for that IP address on our own systems, using an offline geolocation database — never your precise location, and nothing more detailed than the city. Your IP address is not sent to anyone else for this lookup. We use the result only in our internal operations tools, never for advertising, and we keep it for no longer than 30 days. IP geolocation by DB-IP (the DB-IP "IP to City Lite" database, licensed under CC BY 4.0).

The server also records each sign-in and gameplay milestones (such as level-ups, quests completed, heroes created or deleted, purchases, and auction and mail activity). While you play, and on the next launch after a crash, the app sends our server performance data (such as memory use and frame times) and error reports, which can include your hero's name. We use these records to run the game, prevent cheating, understand how the game is played and fix bugs. If you allow notifications on iPhone or iPad, we store your device's push token and game language so we can tell you when in-game mail arrives.

f) Website analytics (marketing website only)

On our marketing website (worldofclashes.com, including the home page, the wiki, the press kit and this page — but not the game itself, not the account portal and not the forums), we use Google Analytics 4 to understand aggregate traffic: which pages are visited, roughly where visitors come from, and how the site performs, so we can improve it and reach more players. The Google tag loads on every visit to these pages and uses Google Consent Mode, with analytics cookies off by default. Until you press Accept on the cookie banner, no analytics cookies are set and no analytics identifier is stored in your browser, but the tag still sends Google cookieless measurements (such as the page visited, the time and your browser type) that feed only aggregate reports. If you press Accept, Google Analytics also sets its cookies so it can recognise repeat visits. If you decline or ignore the banner, no analytics cookies are stored. Advertising features are always off, and your choice is remembered in your browser's local storage. Google acts as our data processor; it does not receive your name or email, and IP addresses are not stored in a form that identifies you.

Some pages of the website, the account portal and the forums also load fonts from Google Fonts, so your browser connects to Google's servers, which receive your IP address in order to deliver them.

The game app contains no third-party analytics or crash-reporting SDK. Instead, our own server records gameplay events, sign-ins and error reports (see §1e) to run the game, prevent cheating, understand how the game is used and fix bugs.

g) Forums

If you use the community forums at worldofclashes.com/forums, we store your account name, your main hero's name, class, faction and level, and what you post. Forum posts are public.

2. What we do not collect

• No advertising identifier (IDFA / Android Advertising ID) and no advertising at all.
• No third-party analytics, attribution, or crash-reporting SDKs in the game app (the marketing website uses Google Analytics with Google Consent Mode — see §1f).
• No cross-app or cross-site advertising tracking.
• No access to your device's location (GPS), camera, microphone, photos, or files, and no access to the contact list on your phone (your in-game friends list, described in §1c, is separate).
• We do not sell your personal data, and we do not share it for advertising.

3. How we use your information

• To create your account and sign you in.
• To save, sync, and restore your game progress across sessions and devices.
• To run real-time multiplayer features (shared world, chat, letters, friends lists, guilds, the auction house, arenas, duels).
• To tell you when in-game mail arrives, if you allow notifications on iPhone or iPad.
• To validate purchases and grant the items you bought.
• To keep the game safe: moderation (including player reports), anti-cheat, and abuse/security prevention.
• To understand how the game is played and to find and fix bugs and crashes, using our own server records — not third-party analytics.
• To show our operations team how many players are online and roughly which countries and cities they connect from, and to help spot abuse.

4. How your information is shared

We do not sell your data and we do not share it with advertising networks or data brokers. No other company receives your IP address to work out where you are: we look up the approximate country and city ourselves (see §1e). We may disclose information if required by law or to protect the safety, rights, or property of our players or us.

5. Where your data is stored & how it is protected

Our game servers, website and databases are hosted with Amazon Web Services in the European Union (Paris, France). Our small operations team runs its operations dashboard and admin tools on its own computer, which may be outside the European Union. Those tools receive the data they show — such as account email addresses, hero details, recent IP addresses and activity — from our servers over an encrypted (SSH) tunnel, and the country-and-city lookup described in §1e runs there, with its results kept for no longer than 30 days. We protect your data with measures including encrypted connections (HTTPS/TLS, and SSH for our own tools), one-way bcrypt password hashing, server-authoritative access controls, and hardened, HttpOnly web sessions. No method of transmission or storage is ever 100% secure, but we work to protect your information.

6. Data retention

We keep your account and game data for as long as your account exists. Some records have their own limits:

• Chat is relayed, not stored. Letters are kept until the recipient claims or deletes them.
• Copies of mail notifications for iPhone and iPad (the sender's hero name, the recipient's hero name and the letter's subject) are deleted within 14 days of being sent, or within 60 days if they can't be delivered.
• Game server logs and system logs are kept for no more than 30 days. The website's access logs are kept in their own log and deleted after 30 days.
• The approximate country and city looked up from your IP address are kept for no more than 30 days.
• Records our staff make when they change an account, which can include the account's old and new email address, are kept for up to 12 months.
• Ban records — the banned email address or device identifier, the internal account number, the hero name, the reason and the time — are kept as long as the ban is in force.

When you delete your account in the game or on the web, we delete it straight away; a request by email is completed within 30 days of confirming it comes from you. Deleting your account also deletes the reports other players filed about it. We keep a small number of records for fraud prevention, security and moderation, for limited periods — the full list, with how long each is kept, is on Delete your account. If you delete a single hero, it is removed straight away, together with its places on the arena ladders, but its name can still appear in older entries of your account's activity log and on the cave leaderboards until you delete the account, and in other players' own records. Purchase records held by Apple or Google are governed by their own policies.

7. Your choices & rights

• Delete your account and data. You can do it three ways: in the game (Settings → Delete Account, then confirm), on the web at worldofclashes.com/account without the app, or by emailing privacy@worldofclashes.com. Deletion is permanent. Our Delete your account page (بالعربية) explains each way, how we confirm an email request comes from you, and exactly what is deleted, what we keep and for how long.
• Block & report. You can block any player (their chat disappears for you) and report abusive behaviour from the player menu or with /report. Reports go to our moderation team.
• Access, correction & portability. You can ask us what data we hold about your account, ask us to correct it, or ask for a copy, by contacting us.
• Regional rights. If you are in the European Economic Area or the UK, you have rights under the GDPR (access, rectification, erasure, restriction, objection, portability, and to lodge a complaint with a supervisory authority). If you are a California resident, you have rights under the CCPA/CPRA, including to know, delete, and correct your information; we do not sell or "share" personal information as those laws define it.
• Website cookies. On worldofclashes.com you choose whether to allow analytics cookies using the banner. To change your choice later, clear this site's stored data in your browser and the banner will appear again on your next visit.

8. Children's privacy

World of Clashes is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under the minimum age of digital consent in your country (up to 16 in some countries), please play only with a parent's or guardian's permission. If you believe a child under 13 has provided us personal information, contact us and we will delete it. Because the game contains real-time chat with other players, we recommend parental guidance for younger players.

9. International users

The game is available internationally and our servers are located in the European Union. If you access the game from outside the EU, your information will be transferred to and processed on our EU servers. Our operations team's dashboard and admin tools also receive some of it, as described in §5, and Apple and Google process the data they receive (§4) under their own policies.

10. Changes to this policy

If we change this policy, we will post the updated version at this address with a new effective date. Material changes will be reflected here; your continued use of the game after an update means you accept the revised policy.

11. Contact us

For any privacy question, or to make a data access or deletion request, contact us at privacy@worldofclashes.com. You can also reach the team through the community links at worldofclashes.com.