Fatebound Privacy Policy
This page is the privacy policy for the Fatebound mobile game published by midblade4295 on Google Play and the Apple App Store.
Who we are
Fatebound is made and published by midblade4295. Questions: vellicgames@gmail.com.
What the app does
Fatebound is a dice arena game. Progress is stored on your device and, when the device is online, may also sync to the same LEGIONARY / Shardfall Firebase project so your games share one player id.
Information we collect
We do not collect your real name, email, phone number, precise location, photos, or contacts.
We may store:
- A random player id (same format as Shardfall, kept on the device)
- An anonymous Firebase Auth id
- Game save data (gold, relics, map state, settings)
- For in-app purchases: the Google Play purchase token, product and order id; on iPhone, Apple's signed transaction (product, transaction id and a random token that ties the purchase to your game account)
- If you use Game Center on iPhone: a one-way hash of your Game Center player id, kept with your game account so it can be restored (see "Game Center")
- Anonymous usage statistics, unless you turn them off (see "Usage statistics" below)
- Diagnostics reports, only when you choose to send one (see "Sending a problem report" below)
Internet use
The app may contact:
- Google Fonts (fonts.googleapis.com / fonts.gstatic.com)
- Google Firebase (Authentication and Cloud Firestore) in project shardfall-5f5de, also used by Shardfall / LEGIONARY
- Our Fatebound game server, for online matches and to check purchases with Google
- Google Play, for in-app purchases (Android)
- Apple's App Store, for in-app purchases (iPhone); our game server also asks Apple's App Store Server API whether a purchase is real
- Apple Game Center, if you are signed in to it on your iPhone (achievements, and to restore your account)
- Google Play Games, if you sign in with it, to keep a copy of your progress in your Google account
- HeyCatch (in.heycatch.ai), a third-party analytics processor, for usage statistics on Android and iPhone, unless you turn them off (see "Usage statistics (HeyCatch)")
- GitHub (raw.githubusercontent.com), to download the game’s art and sound on first launch and when they are updated. These are plain file downloads: no account and no game data is sent; like any web request, GitHub sees your IP address.
Google, GitHub and HeyCatch process those requests under their own policies. We do not run an ad network in the current build.
How we use information
Save data is used to restore progress and to keep a cloud copy under your anonymous id. Usage statistics are used to improve the game and fix problems. We do not sell data or build advertising profiles.
Purchases
Payment happens entirely inside Google Play; we never see card or bank details. When you buy gems, the game sends the purchase token to our game server, which asks Google whether the purchase is real before the gems are added. The server keeps a short record (product, Google order id, a hashed token, the time and the result) so a purchase is granted only once and refunds can be handled. Your save keeps the purchase token for the same reason.
On iPhone, payment happens entirely inside Apple's App Store; we never see card or bank details. When you buy gems, the game sends Apple's signed record of the purchase to our game server, which checks Apple's signature and asks Apple's App Store Server API about the same purchase before the gems are added. The purchase carries a random token made from your game account id, so it is added to that account only. The server keeps the same short record as for Google Play (product, Apple transaction id, a hashed token, the time and the result). "Restore purchases" in the shop asks Apple for purchases made with your Apple ID.
Game server account
When the app reaches our game server it gets a game account there: a random account id and a secret key (the server keeps only a hash of the key). The server keeps your game progress (level, currencies, items, statistics and the in-game name you choose) so purchases and rewards can be checked and can't be edited on the device.
Chat, friends and parties
The game has a global chat, party chat, friends and parties. To make them work our game server handles:
- Your in-game name and title, and a public player code (derived from your account id; it is not your account id or key). Other players see your name, title and code.
- The chat messages you send. They are shown to other players in real time; the server keeps only the most recent lines in memory (the last 50 global lines, the last 30 per party) and does not write chat to disk. Messages are filtered for offensive words and links.
- Your friends list, friend requests, the players you block, and when you were last online (shown to your friends).
- Reports: if a player reports another, the server records who reported whom, the reason, and the reported player's last few chat lines, so the developer can review it and mute or remove abusive players.
Leaderboards: the weekly leaderboard shows the in-game name, title and public player code of players who played online matches that week, with their points, wins and rescues from those matches. Your friends see where you placed among them. The top players each week get in-game prizes, given by the server.
Player cards: when another player taps your name (in the chat, their friends list or the leaderboard) they see your player card: your in-game name, title and player code, your level, your lifetime matches, wins, rescues, knockouts and best win streak, the class you play most and the weapon you win most with, your place on this week's leaderboard and the month you started. It shows nothing about purchases or currencies. Players you have blocked can't see it. Your friends also see when you are in a match, and can join it.
Invite codes: if a new player enters your player code as the friend who invited them, the server records that link between the two accounts so it can give each of you a reward when they reach level 5. Each of you sees the other's in-game name in the game's message about it.
You can turn global chat off in Settings, block any player (you won't see their messages and they can't send you requests or invites), and report them from their name in the chat. Don't share personal information in chat.
Usage statistics
To see how the game is played and to find problems, the game sends our own game server anonymous usage events. Our server receives them, and from version 0.31.212 the phone app also sends usage statistics to HeyCatch, a third-party analytics processor (see "Usage statistics (HeyCatch)" below). There is no advertising network involved.
- What is sent: when a session starts and ends and how long it lasted; tutorial progress; matches played, their mode, result and length, and the hero you played; level-ups; use of the forge, chests and shop; daily rewards claimed; purchases the server verified (the product only); use of chat, friends and parties (counts only, never the text of a message); update screens; whether the phone is Android or iPhone; and start-up problems (for example the game failing to start, with no file paths or other device data).
- It is tied only to your random game account id. We do not store your IP address, device id or advertising id with it, nor your name, chat text, purchase token or order id.
- The copy on our server is not shared with anyone or sold. It is kept for 90 days and then deleted. It is used only to improve the game and fix problems.
- Turn it off at any time in Settings → "Share anonymous usage stats". The game then deletes the events still waiting on your device, tells the server once that you opted out, and sends nothing more; the server stops recording anything for your account.
- To have the statistics for your account deleted sooner, email us with your player id (see "Retention and deletion").
Usage statistics (HeyCatch)
From version 0.31.212, the Android and iPhone app also sends usage statistics to HeyCatch (heycatch.ai), a third-party analytics service that processes them for us. They are sent over an encrypted (HTTPS) connection to in.heycatch.ai.
- What is sent: app interactions (screens you open, tutorial progress, match and shop events, session length and the other usage events listed above); purchase history (the product id of a completed purchase, with no price paid, purchase token or order id); the app version; and the operating system and platform (Android or iOS).
- It is tied to a pseudonymous user id: a salted one-way hash of your game account id (never the account id itself), or a random id before your game account exists, which is linked to the hashed id once it does.
- It does not include your name, email, chat messages, device id or advertising id.
- It is used only for analytics and to improve the game. It is not used for advertising or to track you across other apps or websites, and we do not sell it.
- It is on by default. Turn it off at any time in Settings → "Share anonymous usage stats"; the app then stops sending to HeyCatch (and to our server).
- HeyCatch processes this data under its own terms and privacy policy. To ask us to delete it, email vellicgames@gmail.com.
Sending a problem report
Settings → "Send to developer" sends a problem report to our own game server, only when you tap Send (the game shows what it sends first). The report contains the game's own log from this phone (what the game was doing, its errors and warnings, frame times and memory use), the app version, your phone model, Android or iOS version and graphics chip, your in-game name, your game account id if you have one, and anything you type about the problem. It does not contain chat messages, purchase details, your contacts, files or anything from other apps. Your IP address is used only for a moment, in memory, to limit how many reports can be sent, and is not stored. Reports are read only by the developer to fix problems, are not shared or sold, and the server keeps only the most recent ones (older reports are deleted automatically). To have a report deleted sooner, email us with the report number the game showed you. "Copy diagnostics" in Settings copies the same log to your clipboard instead, without sending anything.
Google Play Games
Signing in with Google Play Games is optional. When you are signed in, the game reads your Play Games display name to show it in Settings, and keeps a copy of your game progress (the same save data that is on your device: level, currencies, items, statistics and settings) as a Saved Game in your Google account, so you can restore it on another phone. Google stores that copy under Google’s policies; it is not sent to our game server. You can delete it from the Google Play Games settings on your phone. While you are signed in, the game also reports your achievements (such as matches won or enemies knocked out) to Google Play Games, which shows them in your Google Play Games profile.
Game Center (iPhone)
On iPhone, the game uses Apple's Game Center if you are signed in to it in iOS Settings. The game shows your Game Center name in Settings and reports your achievements (such as matches won or enemies knocked out) to Game Center, which shows them in your Game Center profile under Apple's policies. To let a reinstalled game or a new iPhone signed in to the same Game Center player get your progress back, our game server stores a one-way hash of your Game Center player id with your game account, after checking Apple's identity signature for it. The player id itself is not stored, and it is never part of usage statistics. If the same Game Center player already has another Fatebound account, the game asks which progress to keep.
Moving your progress to another phone
Settings → Account → "Move to another phone" asks our game server for a one-time code (8 characters, valid for 10 minutes, kept only in the server's memory). Entering it on another phone (Android or iPhone) gives that phone its own key to the same game account. Nothing else is shared.
Notifications
The game can show a notification when a chest has finished unlocking (on Android and iPhone). It asks first (and Android or iOS asks for permission). The notification is scheduled on your phone; nothing is sent to us or anyone else for it. Turn it off in Settings → Notifications, or in your phone's settings.
Links to Discord
Settings → "Join our Discord" opens our community's invite link in your browser or the Discord app, and gives a one-time gift of gems in the game for it (recorded on your game server account so it is given only once). The game sends nothing to Discord; what you share there is covered by Discord's own privacy policy.
Sharing
We do not sell personal information. Usage statistics on our own game server are not shared; the usage statistics described in "Usage statistics (HeyCatch)" are sent to HeyCatch, which processes them for us for analytics only. Cloud saves live in our Firebase project. Google Play processes installs and purchases under Google’s policies.
Children
Fatebound is general-audience fantasy combat. We do not knowingly collect a child’s real-world identity. There is no email sign-up.
Retention and deletion
There is no email-and-password Fatebound account. Settings → Account → "Delete account" deletes your game server account (progress, currencies, items, purchases recorded on it, your Game Center link, your name, friends and blocks, and your leaderboard place) right away; nothing more is recorded for it, and its usage statistics are deleted with the rest after 90 days. The short purchase record (a hashed token, product, time and result) is kept so a purchase can't be added twice. To delete local data, clear the app storage or uninstall. Usage statistics are deleted automatically after 90 days. To ask us to delete a cloud save, your game server account, its usage statistics (including those sent to HeyCatch), a problem report you sent, or your friends list and any reports about you, email vellicgames@gmail.com with the player id shown by the game if you have it (it looks like SF-XXXX-XXXX).
Security
Cloud writes require an anonymous Firebase session. Protect the device with a lock screen.
Contact
midblade4295
vellicgames@gmail.com
App: Fatebound