1. Who we are
Raidcrown is a mobile game and website operated by Zyam Maqsood ("we", "us", "our"). For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR and similar laws, we are the controller of the personal information described in this policy.
- Operator: Zyam Maqsood, trading as Raidcrown
- Postal address: Dr. Hameed Market, Drain Road, Shah Alam Market, Lahore 54000, Punjab, Pakistan
- Country: Pakistan
- Privacy contact: privacy@raidcrown.com
This policy covers the Raidcrown app for Android, raidcrown.com, our support channels and the emails we send. It does not cover Google Play or other services we link to, which have their own privacy policies.
2. The short version
- We collect what the game needs to run, stay fair and stay safe, and to answer you when you contact us.
- We do not sell your personal information, we do not share it for targeted advertising, and there are no ads and no advertising identifiers in Raidcrown.
- Payments go through Google Play. We never see your card or bank details.
- You can download your data in the game and delete your account in the game or on our account deletion page.
- Raidcrown is for players aged 13 and over.
- This website sets no cookies and runs no analytics or tracking.
3. What we collect
3.1 Information you give us
- Age check. When you create an account, the game asks for your birth year and month. We use them only to check your age and never store them. If you are under 13, no account is created and nothing is kept. If you are 13 to 17, we store only the date you turn 18, so we can apply the spending limit for younger players. If you are 18 or over, we store only that you are an adult.
- Your player profile. The player name you choose, and the name, description and settings of any House you create.
- What you write in the game. House chat messages, reinforcement requests, reports you make about other players (the reason, any details you add and, if you report a message, that message) and ban appeals.
- Website forms and emails. If you contact support, we receive your name, email address, player tag (optional), topic and message. If you request account deletion on this website, we receive your player tag, email address and any reason you give. If you subscribe to our newsletter (for people aged 16 and over), we receive your email address and the date you agreed, and we email you a link to confirm. You are only subscribed once you confirm.
3.2 Information created when you play
- Account identifiers: a random player ID and a 9-character player tag.
- Game data: your base layout, resources, gem balance and gem history, buildings, troops, hero, trophies, Renown, league, House membership and role, Season Pass progress, rewards, in-game notifications, and your notification preferences.
- Battles: results, the inputs you made during each battle (so our servers can check the result), replays and a snapshot of each base at the time of the battle.
- Social and safety records: players you mute or block, reports about you, cheat or abuse flags, strikes, chat mutes, bans and appeals.
- Purchases: see section 3.4.
3.3 Information from your device
- An app installation identifier. A random code the game creates when it is first installed, used to keep you signed in on that device. It is not your phone's hardware ID or advertising ID, and it is stored encrypted on your phone.
- Technical information: app version, device model, Android version and a performance tier the game measures to pick graphics settings.
- Country. The country in your phone's region settings when you create your account. We don't use GPS or your IP address to work out where you are, and we don't update it later.
- IP address. Our servers see your IP address when your device connects. We use it only to limit abusive traffic and protect our services. We do not store it in our database or our request logs; rate-limit counters that contain it are deleted within 60 minutes.
- Notifications. The game schedules reminders (for example, when an upgrade finishes) on your device, if you allow notifications. Today we do not collect a push notification token. If we start sending notifications from our servers, we will update this policy before we do.
3.4 Information from Google
- Google Play Games Services. If you sign in with or link Google Play Games, Google confirms your Play Games player ID to us. We store that ID only. We do not receive your name, email address, photo or contacts from your Google account.
- Google Play Billing. When you buy something, Google sends us the order ID, a purchase token, the item and its status, and tells us later if a purchase is refunded or cancelled. We record the item's catalogue price. Google handles your payment and never shares your payment details with us.
- Google Play Integrity. When you sign in and before a purchase, the game can ask Google to confirm that it is a genuine copy of Raidcrown from Google Play running on a genuine Android device. We store the answer (Google's integrity verdict) with your account.
- Crash reports. If your device shares usage and diagnostics data with Google, Google Play Console shows us reports of crashes and freezes (for example, device model, Android version and where the app failed). Google provides these without identifying you to us.
3.5 What we don't collect
We do not collect your date of birth, precise location, contacts, photos or files, microphone or camera input, advertising ID, or payment card details. Raidcrown contains no advertising and no third-party analytics or advertising SDKs.
4. How we use your information, and our legal bases
The laws of the EU and UK require us to have a legal basis for each use. Where we rely on legitimate interests, we have weighed them against your rights, and you can object (section 11).
| Why we use it | What we use | Legal basis |
|---|---|---|
| Run the game: your account and sign-in, saving progress, matchmaking, battles, Houses, chat, leaderboards, events and in-game notifications | Account, game, battle and device information; what you write | Performing our contract with you (our Terms of Service) |
| Sell items, grant them, handle refunds and keep accounting records | Purchase information, account | Contract; legal obligations (tax and accounting) |
| Protect younger players: block players under 13 and limit monthly spending for players aged 13 to 17 | Age check result, purchases | Legal obligations; legitimate interest in protecting minors |
| Keep the game fair: re-check battles on our servers, detect cheating and refund abuse, and check app and device integrity | Battle inputs and results, game data, integrity verdicts, purchases | Legitimate interest in a fair game for every player |
| Keep the community safe: filter chat, names and House text, review reports and enforce our Community Guidelines | What you write, reports, safety records | Legitimate interest in a safe community; legal obligations where they apply |
| Balance and improve the game | Gameplay events (section 4.1), technical information | Legitimate interest in improving the game |
| Answer support requests and handle privacy requests | What you send us, account | Contract; legal obligations; legitimate interests |
| Send our newsletter | Email address | Your consent, which you can withdraw at any time |
| Protect our services from attacks and abuse | IP address, request information | Legitimate interest in keeping our services secure |
| Comply with the law, and establish or defend legal claims | Any of the above, as needed | Legal obligations; legitimate interests |
4.1 Gameplay analytics
The game sends us a small set of events, such as starting a session, tutorial steps and the start and end of battles, and our servers record events such as purchases and battle results. Each event is linked to your player ID and includes your app version, device model, Android version, performance tier and country. We use them to understand how the game is played and to balance it. We analyse them within our own systems; they are not sent to analytics or advertising companies.
4.2 Automated decisions
The age check automatically stops anyone under 13 from creating an account. Our servers decide battle results by re-running each battle, and automated checks flag possible cheating, refund abuse or harmful chat for review. A person reviews every case before we ban an account, and every ban can be appealed. We do not make decisions that have legal or similarly significant effects on you by automated means alone.
5. What other players can see
Other players can see your player name, player tag, country, trophies, Keep level, league and House; your base layout when they raid you or view your profile; your name in battle histories and replays; your Renown and rank on leaderboards; and the messages you post in your House's chat (visible to its members).
6. Who we share information with
We share personal information only as described here.
Service providers process information for us, under contracts that limit them to our instructions:
| Provider | What they do for us | Information involved |
|---|---|---|
| Amazon Web Services (AWS) | Hosting the game: game servers, databases, file storage, content delivery, analytics processing and security | Everything we hold, except what only this website's host sees |
| Vercel Inc. (United States) | Hosting this website and delivering its pages | Your IP address and browser request when you visit raidcrown.com |
| Resend, Inc. (United States) | Sending our emails: support-form relays to our team, account-deletion receipts, newsletter confirmation links and newsletters | Recipient email address and the content of the email |
| Hostinger, our email provider | Hosting our support, billing, privacy and press mailboxes | Emails you send us and our replies |
| Unity Technologies | The Unity engine the game is built with, and the Unity in-app purchasing library and Unity Gaming Services core it uses to connect to Google Play Billing | Limited technical information (such as an installation identifier, device model, Android and app version) needed to provide these services |
Google. We use Google Play Games Services, Google Play Billing, Google Play Integrity, Google Cloud Pub/Sub (to receive purchase and refund notifications) and Google Play Console (crash reports). For your Google account and Google Play payments, Google is responsible for its own processing under the Google Privacy Policy.
Other disclosures. We may disclose information if the law requires it, to respond to valid requests from authorities, to protect the safety of players or the public, to enforce our terms, or to establish or defend legal claims. We may share information with professional advisers, such as lawyers and accountants, under confidentiality. If Raidcrown is sold or transferred to another company, your information would transfer with it, subject to this policy, and we would tell you before it is used in a materially different way.
We do not sell personal information, and we do not share it for cross-context behavioural or targeted advertising. We don't work with advertising networks or data brokers.
7. Where your information is stored and transferred
Our game servers and databases are hosted by AWS in Singapore. As Raidcrown expands, we may also host in Frankfurt, Germany and Northern Virginia, United States, with player data copied between these regions so the game stays fast and available wherever you play. This website is hosted by Vercel, which serves pages from its network of data centres around the world. We run Raidcrown from Pakistan, so we access personal information from there when we operate the game, answer support requests and handle privacy requests. Our service providers, including Google, Vercel, Resend, Hostinger and Unity, may process information in the United States and other countries.
When we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland to a country without an adequacy decision, we use the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum where UK law applies, or rely on an adequacy decision (such as the EU–US Data Privacy Framework for certified providers). For players in Australia, we take reasonable steps to make sure overseas recipients handle personal information consistently with the Australian Privacy Principles. You can ask us for more information about these safeguards.
8. How long we keep information
| Information | How long we keep it |
|---|---|
| Account and game data: profile, base, progress, House membership, in-game notifications, integrity verdicts | While your account exists. Deleted when your account is deleted (section 12) |
| Sign-in sessions | Expire after 60 days without use; removed when your account is deleted |
| House chat messages | 90 days, or sooner if you delete your account |
| Replays | 30 days (35 days for Feud replays). Battle files expire from storage within 60 days |
| Battle results in other players' histories | While those histories exist. After you delete your account, they show "Deleted player" instead of your name |
| Reports, strikes, flags, bans and appeals | While your account exists. If an account is deleted after a ban, until 365 days after the ban ended, so appeals and repeat abuse can be handled |
| Gameplay analytics events | 25 months from when each event is recorded |
| Purchase records and gem history, and the de-identified account record they belong to | While your account exists, as part of your account. After your account is deleted, 7 years from each purchase, as tax and accounting laws require |
| Support messages | 24 months from when we receive each message, in our systems and in our support mailbox |
| Newsletter sign-ups and subscriptions | Until you unsubscribe. After that we keep only your address and the date you unsubscribed, so we never email you again. A sign-up you never confirm receives no newsletters and is deleted automatically after 30 days |
| Records of deletion requests and of actions our staff take on accounts | 3 years |
| Server request logs (no IP addresses) | 30 days |
| Database backups | Overwritten on a rolling 7-day cycle |
9. How we protect your information
- Connections to our servers and this website are encrypted with TLS 1.2 or newer.
- Our databases, caches, file storage and message queues are encrypted at rest with keys managed in AWS Key Management Service, and our storage is never public.
- Only staff who need player data can access it, through accounts protected by Google sign-in and an allowlist. Moderation and account actions by staff are logged.
- Our servers, not your phone, decide resources, purchases and battle results. Sign-in secrets are stored only in hashed form.
No system is completely secure. If a breach puts your information at risk, we will notify you and the relevant authorities as the law requires.
10. Children and teenagers
Raidcrown is for players aged 13 and over, and we do not target or knowingly collect information from children under 13. Our newsletter is for people aged 16 and over. The age check blocks anyone under 13 before an account is created, and nothing is stored about them. If we learn that we hold information from a child under 13, we delete it. A parent or guardian who believes this has happened can contact privacy@raidcrown.com.
For players aged 13 to 17, we store only the date they turn 18 and limit purchases to US$50 (or the local equivalent) per calendar month. There is no advertising in Raidcrown. Our Parents' Guide explains spending limits, chat safety and account deletion.
11. Your rights
Everyone
Wherever you live, you can:
- download your data in the game: Settings › Account › Download my data;
- delete your account in the game or on our account deletion page;
- unsubscribe from our newsletter at any time, using the link in any newsletter email;
- turn notifications off in the game's settings or your phone's settings;
- ask us to access or correct your information by emailing privacy@raidcrown.com.
EU, EEA, UK and Switzerland
You have the right to access your personal information, correct it, have it erased, restrict how we use it, receive it in a portable format, object to processing based on our legitimate interests, and withdraw your consent at any time (without affecting earlier processing). You also have the right to complain to a data protection authority, such as the one where you live or work. In the UK, that is the Information Commissioner's Office (ico.org.uk).
United States (including California)
If you live in a US state with a consumer privacy law, such as California (CCPA, as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas or Oregon, you have the right to know what personal information we collect, use and disclose; to access and receive a copy of it; to correct it; to delete it; and not to be discriminated against for using these rights.
We collect these categories of personal information, from you, your device and Google, for the purposes in section 4:
- Identifiers: player ID, player tag, app installation identifier, Google Play Games player ID, and your email address if you contact us or subscribe;
- Commercial information: purchase records;
- Internet or other electronic network activity: gameplay events, battle inputs and results, and the messages you post;
- Characteristics of protected classifications: whether you are under 18;
- General location: the country from your phone's region settings (not precise geolocation).
We disclose these categories only to the service providers in section 6, for business purposes. We do not sell or share personal information as those terms are defined in California law, and we never have, including the information of consumers under 16. We do not use or disclose sensitive personal information for purposes that require a right to limit. Because we don't sell or share, there is nothing to opt out of; we still treat a Global Privacy Control signal as a valid opt-out request.
You, or an authorised agent with your written permission, can make a request by emailing privacy@raidcrown.com. We will verify your request by matching details about your account, and reply within 45 days. If we decline your request, you can appeal by replying with "Appeal" in the subject line; if you are unhappy with the result, you can contact your state attorney general.
Australia
The Privacy Act 1988 (Cth) and the Australian Privacy Principles give you the right to access and correct the personal information we hold about you. If you have a complaint about how we handle your information, contact us first at privacy@raidcrown.com; we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).
New Zealand
The Privacy Act 2020 gives you the right to ask for access to, and correction of, the personal information we hold about you. If you have a complaint, contact us first at privacy@raidcrown.com. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
Philippines
The Data Privacy Act of 2012 (Republic Act No. 10173) gives you the right to be informed, to access your personal information, to object to its processing, to have it corrected, erased or blocked, to receive it in a portable format, to claim damages, and to file a complaint with the National Privacy Commission (privacy.gov.ph).
Malaysia
Under the Personal Data Protection Act 2010, you can ask to access and correct your personal data, withdraw your consent, and ask us to stop using your data for direct marketing, such as our newsletter. Send requests and complaints to privacy@raidcrown.com.
Pakistan
We are based in Pakistan. You can use every right listed under "Everyone" above, and raise any concern about how we handle your information with us at privacy@raidcrown.com or at our postal address.
How to use your rights
Use the options in the game, email privacy@raidcrown.com, or write to us at the postal address in section 1. To protect your account, we may ask for details that show it is yours, such as your player tag and a Google Play order number. We reply within one month (sooner where the law requires), and we don't charge for reasonable requests.
12. Deleting your account
You can delete your account in the game (Settings › Account › Delete my account) or on our account deletion page, which explains exactly what is deleted, what we keep and why. In short: after a 14-day grace period in which you can change your mind, we delete your profile, base, progress, chat messages and other game data, and keep only purchase records and the other records listed on that page. Deletion is completed within 30 days of your request.
13. This website
raidcrown.com is a static website hosted by Vercel. It sets no cookies, uses no analytics, advertising or tracking tools, stores nothing in your browser, and serves its fonts and images itself rather than from third-party services. Like any website host, Vercel processes your IP address and browser request to deliver pages and protect the site from attacks, and may keep short-lived technical logs for those purposes. We don't use them to track visitors, and we don't keep our own records of website visits.
When you use a form on this website (support, newsletter or account deletion), the details you type are sent to our servers and used as described in this policy. Links to Google Play and other websites take you to services with their own privacy policies.
14. Changes to this policy
We may update this policy as the game and the law change. We will post the new version here with its effective date. If we make a significant change, we will tell you in the game or by email before it takes effect.
15. Contact us
Questions or requests about privacy: privacy@raidcrown.com, or write to Zyam Maqsood, Dr. Hameed Market, Drain Road, Shah Alam Market, Lahore 54000, Punjab, Pakistan.