TO BE A KING · Legal
Privacy Policy
This policy explains what TO BE A KING by Stalemate Gaming Development stores and sends. Last updated 2026-10-22.
1. Stored on your device only
Saved games, settings, achievements, challenge progress and your profile (name, banner and crest, and an optional email if you create a local profile) are kept in the app's storage on your device. Local profiles are not server accounts (online accounts are described in section 4), and a local password, if set, is only stored as a salted one-way hash. Uninstalling the app or clearing its data deletes all of this. We cannot see or recover it.
2. Ads (optional) and purchases
- Optional reward videos (Google AdMob). The free version can show a short video only when you choose to watch one for a small in-game reward. Ads are served by Google AdMob, which collects your device's advertising ID, IP address, device and app information and ad interactions to show and measure ads. In the EEA, the UK and Switzerland we ask for your consent with Google's consent form before any ad loads; without consent only non-personalised ads are shown. Change your choice any time in the Royal Shop under Ad privacy choices, and reset or delete your advertising ID in your Android settings. Remove Ads turns all ads off. See policies.google.com/technologies/ads.
- Purchases (Google Play). Payments are handled entirely by Google Play. We never see your card or bank details. We receive an order/purchase token, the product and its state, which we keep to deliver, restore and (if refunded) remove the item. For online accounts, the items you own are stored with your account on our server.
- We use no analytics or tracking of our own, and we do not sell your personal information.
3. What can leave your device
- Match ratings (optional). If you rate a match after it ends, your 1-5 stars, your optional comment, the game version and basic match info (result, map size, number of computer kings and queens, duration, difficulty) are sent to a Google Form we read. No name, email or device ID is attached. Unsent ratings wait on your device and are sent later. See Google's privacy policy for how Google handles form data.
- Feedback and bug reports (optional). "Send feedback" opens your own email app with a pre-filled message (game version, Android version, device model, screen size, graphics setting and, for bug reports, a one-line summary of your last game, all visible and editable before you send). Nothing is sent unless you send that email. We use what you send only to reply and fix problems.
- Update check (non-Play builds only). Copies installed from itch.io ask itch.io once per launch which is the latest version. This is a plain request with no personal data, but itch.io receives your IP address like any web request. The Google Play version does not make this check.
- Links. The Discord, itch.io and PayPal buttons open those sites in your browser; their own privacy policies apply there.
- Email delivery (Brevo). For online accounts, password-reset codes and rare account notices are sent through Brevo (Sendinblue SAS, France), which receives only your email address and the message.
- Game server (DigitalOcean, Frankfurt, Germany). Online accounts and the online world are stored on a server rented from DigitalOcean, LLC in Frankfurt.
- Support on Discord. If you ask for help in our Discord server, what you post is handled by Discord Inc. under Discord's privacy policy. Never post your password or payment details; you can email us instead.
4. Online accounts (only if you play online)
Offline play needs no account. If you create an online account, our server stores: your username (visible to other players); your email address (only for password resets and important account notices, never shown to others, never used for marketing, never sold); your password only as a salted one-way hash (scrypt); a sign-in session token, stored as a hash, lasting 30 days; a keyed one-way hash of your IP address, used only for abuse limits; your game data (kingdom, buildings, armies, ships, resources, wars and in-game messages; there is no fog of war online, so others see the shared map); the items you bought; and technical server logs.
How long we keep it: your account until you delete it (a kingdom offline for 7 days leaves the world, the account stays); purchase records for as long as you have the account and up to 5 years where tax law requires; reset codes 15 minutes; IP hashes up to 24 hours; server backups: daily backups kept 14 days, hourly backups kept 7 days, so deleted data leaves all backups within 14 days. Ad data is kept by Google under its own rules.
5. International transfers
We are based in South Africa and our server is in Germany (EU). Google, Discord and DigitalOcean may process data in the United States and other countries; Brevo processes data in the EU. For transfers across borders we rely on the providers' standard contractual clauses or data processing terms and adequacy decisions where they exist, and share only what each service needs.
6. Children
The game is suitable for a general audience and does not knowingly collect personal information from children. Online accounts need an email address: do not create one if you are under the age of digital consent where you live without a parent's or guardian's permission. Ratings are anonymous and feedback is only sent if you choose to email us. If you believe a child has sent us personal information, contact us and we will delete it.
7. Your choices
You can skip ratings, feedback and reward videos. Delete your online account with Online → Account → Delete account (it erases your account, email, password hash, sessions and kingdom at once). Restore purchases with Royal Shop → Restore; refunds: see the Refund Policy. Depending on where you live (for example POPIA in South Africa or the GDPR in the EU/UK) you may have rights to access, correct, delete or object: email us, or complain to your data protection authority (in South Africa, the Information Regulator). To delete all your data, use Settings → Delete account & data: it erases every profile, saved game, setting and your agreement from the device at once (clearing the app's data or uninstalling it does the same). To ask about or delete anything you emailed us, write to us.
8. Changes
If this policy changes, the game will show the new version and ask you to accept it again.
9. Contact
Stalemate Gaming Development: stalemategp@gmail.com