Privacy Policy

Folklore Clash (“the Game”, “we”, “us”) is a free-to-play game distributed on Google Play and the Apple App Store, with a web version used for preview and development. You can reach the team at folkloreclash@gmail.com.

• You can create an account with email + password or through a supported social sign-in provider (for example Google).
• When you sign in we store your email address, a unique user id, and authentication timestamps. Passwords are never stored in readable form.
• Authentication and account data are processed by our backend provider (Supabase) on our behalf.
• You can request account deletion at any time by emailing folkloreclash@gmail.com. We will remove your profile and gameplay data within 30 days, except where we are required to keep records (for example tax records for purchases).

To run the game we store your progression state — realm level, unlocked spirits, currency balances, buildings, forest layout, team membership, chat messages, and similar in-game activity. This data is tied to your account and is used only to operate the game, sync your progress across devices, power leaderboards and team features, and prevent abuse.

• On Android, purchases are processed by Google Play Billing. On iOS, purchases are processed by Apple In-App Purchase. In both cases the store handles the payment — we never receive or store your card number, and we do not have access to your Google or Apple payment credentials.
• We receive a transaction id, the product purchased, the amount, the currency, the country code, and the timestamp. We use this to grant your purchase, restore purchases across your devices, provide receipts and refunds, prevent fraud, and meet tax and accounting obligations.
• Subscriptions renew automatically until cancelled. You manage or cancel them in your Google Play account settings or in your Apple ID subscription settings — not in the game.
• Refunds follow Google Play’s refund policy or Apple’s refund policy depending on where you purchased. Contact us for anything the store cannot resolve.

• We collect basic usage analytics — screens opened, features used, session length, approximate country (from IP), device type, operating system version, and app version — to understand how players use the game and to fix bugs.
• Analytics events are processed by PostHog. We send event names, timestamps, and non-sensitive gameplay identifiers; we do not send passwords, payment details, or chat message content.
• We collect crash and error diagnostics that may include the stack trace, the route you were on, and non-sensitive device info.
• We do not sell your data, we do not use it for third-party advertising, and we do not track you across other companies’ apps or websites. We do not use Apple’s Advertising Identifier (IDFA) or Android’s Advertising ID, so no App Tracking Transparency prompt is shown.

The game does not request access to your camera, microphone, contacts, precise location, photos, or health data. It uses network access to sync your progress and, if you allow it, notifications to remind you about chests and events. You can turn notifications off at any time in your device settings.

The game stores data locally on your device to keep you signed in, remember settings such as your preferred bet size and whether sound is muted, and cache non-sensitive gameplay state. On the web preview this uses cookies and browser local storage; in the Android and iOS apps the equivalent data is stored inside the app’s own private storage and is removed when you uninstall the app.

We share data only with providers that help us run the game:

• Supabase — account, authentication, database, and file storage.
• Google Play Billing — Android in-app purchases.
• Apple In-App Purchase — iOS in-app purchases.
• Google Sign-In — optional social sign-in, when you choose to use it.
• PostHog — product analytics and event tracking.
• Netlify — hosting for the web version of the game and game assets.

We may disclose information if required by law, to protect the rights and safety of players, or in connection with a business transfer such as a merger or acquisition.

The game is not directed at children under 13 (or under 16 in regions where that is the applicable age). We do not knowingly collect data from children in that age range. If you believe a child has created an account, contact us and we will remove it.

Depending on where you live (for example the EU/EEA, UK, or California) you may have the right to access, correct, export, or delete your personal data, to object to certain processing, and to lodge a complaint with your local data protection authority. To exercise any of these rights, email folkloreclash@gmail.com.

Account deletion. Users can request deletion of their account and all associated data at any time by contacting us at folkloreclash@gmail.com.

After receiving a deletion request, we will permanently remove the user’s account and all stored data from our servers. This includes your profile, progression, spirits, currencies, team membership, chat messages, and support tickets. Purchase records that we are legally required to keep for tax and accounting purposes are retained in anonymised form only.

We keep account and gameplay data for as long as your account is active. If you delete your account, we remove personal data within 30 days, except records we must keep to comply with legal obligations such as tax and accounting rules for purchases.

We use industry-standard measures including encrypted connections (HTTPS), row-level security on our database, and access controls for our team. No system can be perfectly secure, and we cannot guarantee absolute security of information transmitted to or from the game.

We may update this policy from time to time. Material changes will be announced in the game or by email before they take effect. The “Last updated” date at the top always reflects the current version.

Questions, requests, or support tickets? Send them to folkloreclash@gmail.com. All player messages and tickets are routed to this account.