Privacy Policy
In short: you can play Realm Brawlers as a guest without giving us your name or email. We save your game progress so you don’t lose it. We only collect gameplay data for improving the game if you say yes, and you can change your mind at any time in Settings › Account & data. We never sell your data.
Who we are
Realm Brawlers is made and run by Yagiz Ozyurek, a sole proprietor based in Türkiye (“we”, “us”). We are responsible for your personal data under the EU and UK General Data Protection Regulation (GDPR) and Türkiye’s Personal Data Protection Law No. 6698 (KVKK).
Contact: support@realmbrawlers.com
What we collect
| Data | Why | Legal basis |
|---|---|---|
| Account: a random account ID. If you sign in with Google: your email address, name and profile picture from Google. If you sign in with email: your email address. | To create your account, let you sign back in and keep your progress safe across devices. | Providing the game you asked for (contract) |
| Game progress: your save (levels, fighters, items, coins, gems, missions, settings) and a log of coin and gem changes. | To save and restore your progress and keep the game economy fair. | Contract; our legitimate interest in preventing cheating |
| Your choices: your answer to the gameplay data question, and any data deletion request. | To respect your choice and handle your request. | Legal obligation |
| Gameplay data (only if you say yes): which screens you open, levels you play and how fights go, shop items you view or buy, errors, and session length. With it: the type of device, operating system, browser, language and screen size, and the campaign link (for example an ad) that brought you to the game. | To fix bugs, balance difficulty, improve the game and understand which promotions work. | Your consent |
| Survey answers (only if you take a survey): your answers, and with them your profile level, play time, levels cleared, training status, sign-in type and device type. | To understand what players like and what to improve, and to compare answers between groups of players. | Your consent (taking the survey is optional) |
| Technical data: your IP address and basic request logs, kept by our hosting providers. | To deliver the game and protect it from abuse. | Legitimate interest |
We do not collect payment card details. When purchases are introduced, payments will be handled by the payment provider (Stripe on the web, Apple or Google in the apps), who will process your payment details under their own privacy policies. Gameplay data never includes your name, email or payment details.
If you say no to gameplay data
Nothing about how you play is recorded or sent, and any gameplay data still waiting on your device is deleted. The game works exactly the same. You can switch this on or off at any time in Settings › Account & data.
Who we share data with
We do not sell or rent your personal data, and we do not share it with advertisers. We don’t show ads today. If we add them, we will update this policy, name the ad partners, and ask for your consent before any data is shared with them.
We use these service providers, who process data only on our instructions:
- Supabase: database, accounts and storage. Your data is stored in the European Union (Frankfurt, Germany).
- Cloudflare: hosting and delivering the game, and domain services.
- Google: only if you choose “Continue with Google”, to confirm your identity.
- An email delivery provider: to send sign-in links when you use email.
Some of these providers may process data outside your country, including outside the EU and Türkiye. Where they do, they use legal safeguards such as the EU Standard Contractual Clauses.
How long we keep data
- Account and game progress: while your account exists. If you ask us to delete your data, we delete it within 30 days.
- Gameplay data: up to 26 months, then deleted or made fully anonymous.
- Records of your consent and deletion requests: as long as we need to show we respected them.
Your rights
You can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, and you can withdraw your consent at any time. To ask for deletion, use Settings › Account & data › Request data deletion in the game, or email us. For anything else, email support@realmbrawlers.com. We reply within 30 days.
You can also complain to a data protection authority: in Türkiye, the Personal Data Protection Authority (KVKK); in the EU or UK, the authority where you live.
Children
Realm Brawlers is not intended for children under 13, and we do not knowingly collect personal data from them. If you are under 16 (or the age of digital consent where you live), please ask a parent or guardian before signing in or saying yes to gameplay data. If you believe a child has given us personal data, contact us and we will delete it.
Storage on your device
The game stores your save, your sign-in session and any gameplay data waiting to be sent in your browser’s local storage. These are needed for the game to work. We do not use advertising cookies or cross-site tracking.
Security
Data is sent over encrypted connections. Each player can only read their own data, and changes go through checks on our server. No system is perfectly secure, but we work to protect your data and will tell you and the authorities about a serious breach as the law requires.
Changes
If we change this policy, we will update the date at the top and, for important changes, tell you in the game.