Privacy Policy

This Privacy Policy explains how Hand of Legends ("we", "us") collects, uses and protects your personal data when you play the game or use this website. We are committed to compliance with the EU GDPR, the Swiss nDSG and Google Play's data-safety requirements.

Who we are

Hand of Legends is developed and operated by SecureIT Swiss. For any privacy question or to exercise your rights, contact us at [email protected].

What we collect

• Account data: if you create an account, your email address, a hashed password, and/or your Google sign-in identifier.
• Game data: your progress, collection, purchases and in-game currency balances (your "cloud save").
• Device & technical data: a device identifier used to keep you signed in, plus basic diagnostic information.
• Purchase data: records of in-app purchases (processed by Google Play — we do not receive or store your card details).
• Marketing data: if you subscribe on this website, the email address you provide and, where applicable, the referral code you arrived with.

Guest play is supported: you can play offline without creating an account, in which case your progress stays on your device.

How we use it

• To provide and sync your game progress across devices.
• To operate accounts, sign-in, email verification and password reset.
• To process and validate in-app purchases and prevent fraud/cheating.
• To attribute referrals to creators and friends who invited you.
• To send you the launch announcement and, if you opt in, occasional game news.

Legal bases

We rely on contract (to run the game you asked to play), legitimate interests (security, fraud prevention, product improvement) and consent (marketing email), depending on the purpose.

Sharing

We share data only with service providers who help us run the game — for example cloud hosting, Google Play billing, and email delivery — under appropriate data-processing terms. We do not sell your personal data.

Retention

We keep account and game data for as long as your account is active. When you delete your account we anonymise it (see below); certain records required for accounting or fraud prevention are retained in anonymised form.

Your rights

You may request access, correction, deletion, restriction or portability of your data, and object to certain processing. You can delete your account and personal data at any time from the account deletion page or by emailing us. You may also lodge a complaint with your data-protection authority.

Children

Hand of Legends is not directed at children under the age required by your local law, and we do not knowingly collect their data.

Changes

We will post any changes to this policy on this page and update the "last updated" date above.

This policy is a working draft pending final legal review and is not yet binding.