Privacy Policy

1. Who is responsible

Mobile Games OÜ is the operator and controller of the game data described here. MGPlayStudio is our mobile game development and publishing brand.

Legal name

Mobile Games OÜ

Estonian registry code

17640927

Registered address

Väike-Rae tee 19/3-19, Assaku, Harjumaa 75310, Estonia

Privacy requests

privacy@mgplaystudio.com

Player support

support@mgplaystudio.com

2. Account and game data

We process a persistent Player ID, guest or linked-account status, account and save timestamps, your chosen character name and appearance, and the data needed to preserve and operate your character. Guest play also creates an online service identity; it is not anonymous to our game services.

Game records include progression, Ascendant Power, ascensions, Gold, Tokens, inventory, swords, equipment, Gems, cosmetics, frames, upgrades, stamina, timed benefits, tutorial and event progress, and inbox and reward-claim records. Connected Guild and encounter features also process membership, applications, invitations, ranks, contributions, actions, encounter participation and reward-settlement records. Developer gifts and codes create eligibility, delivery and redemption records to prevent repeated grants. In-game social records can include friend or contact identifiers and profile snapshots; these refer to game players, not your phone’s address book.

Some information is stored on your device and some in Unity-hosted services. We do not need your legal name, home address, phone contacts, camera, microphone or precise GPS location for ordinary gameplay. A Guild country flag is a player-selected label, not a measurement of your location.

3. Sign-in and game-service providers

We use Unity Authentication, Unity Cloud Save and Unity Cloud Code for account access, cloud saves and connected game operations. Unity processes the identifiers, authentication information, network information and game records needed to provide these services.

Unity Player Accounts: if you choose this sign-in method, Unity operates a separate shared sign-in account, including its account identifier and sign-in email. Unity is responsible for its own account service. A Unity Player Account and your Sword & Shield: Ascendant game account are separate. See Unity’s game-player privacy policy and Unity’s privacy policy.

Google sign-in on supported Android builds: when you choose this option, Google’s account picker supplies an identity token to sign in through Unity Authentication or link the current character. The token contains a Google account identifier and may contain basic profile information such as an email address, name or profile image, depending on Google’s response. We use the authentication result to identify the correct game account. This sign-in integration does not request access to your contacts, friends or Google Drive files. We do not receive your Google password. Google operates its account service under the Google Privacy Policy.

The sign-in options offered depend on your build, device and access to the relevant test programme. A provider option being present does not guarantee that every Google account or device is eligible to use it.

4. Security and diagnostics

Online services process technical information such as IP address, connection and request times, authentication results and service errors. We use relevant operational records to protect accounts, investigate failures, resolve save conflicts and prevent fraud or duplicate rewards.

Game diagnostics can include error messages, stack traces, app and operating-system versions and device information. Unity engine diagnostic reporting is enabled in the current project configuration and can send crash and error information, including an installation-specific identifier, to Unity. The fields and reporting behaviour depend on the engine, build and device. We do not represent all diagnostics as staying on your device. See Unity’s Diagnostics privacy information.

The current game has no connected advertising network, optional audience-analytics service or real-money billing integration. Test currencies, gifts and simulated shop actions do not create a payment. Before introducing advertising, optional tracking or purchases, we will update this policy for the actual service and provide any notice or choice required before processing begins.

5. Player support and the website

When you contact us, we process your reply email, message, any name or account details you provide, correspondence and any attachments you choose to send. Our private support records include a case number, timestamps, status and relevant staff notes. Authorised staff may look up a character and Player ID to investigate a request or administer a game feature.

Our website and email use Zone Media OÜ. Support-form submissions and emails to support@mgplaystudio.com enter the private support system; original emails and attachments also remain in the support mailbox. The privacy mailbox is separate from this automatic intake. The website’s protected forms use Cloudflare Turnstile. The Website Privacy Notice explains these website, email and bot-protection data flows in more detail.

Provide only information relevant to the request. Do not send passwords, authentication tokens, recovery codes or full payment-card details.

6. Why we use data

Where the GDPR applies, we use the following legal bases:

• Providing the game you request: account access, saves and available connected features necessary to perform our agreement with you.
• Legitimate interests: proportionate security, abuse prevention, duplicate-reward prevention, troubleshooting, necessary stability diagnostics and responding to general support requests. We consider necessity, your reasonable expectations and the effect on your rights.
• Legal obligations: responding to data-protection requests and meeting applicable legal requirements.
• Consent where required: processing that requires a separate choice will use that choice. Accepting game terms is not consent to optional tracking.

We do not use support requests to subscribe you to marketing. We do not make solely automated decisions producing legal or similarly significant effects about you. Automatic access and reward checks apply game rules; you can contact support about a disputed result.

7. Who can receive data

Access is limited to authorised people and service providers who need it to operate, maintain, secure or support the game. Unity provides the connected game services and engine reporting described above; Google is involved when you choose its sign-in service. Zone and Cloudflare provide the website and support services described in our website notice. We may disclose necessary information to meet a legal obligation or protect legal rights.

In enabled shared Guild and encounter features, other participating players can see your chosen character name, appearance, relevant progression or power, Guild identity, role, participation and contributions. Do not use private information as your public character or Guild text. Shared features vary by build; local chat or ranking previews do not mean a live public chat or global leaderboard is available.

We do not sell game or support personal data or share it for cross-context behavioural advertising in the current service. An external community or social-media link takes you to a separately operated service with its own privacy terms.

8. How long data is kept

• Account and saves: while needed to provide your available game account and connected features, until a valid erasure request is completed or the data is otherwise no longer needed. There is currently no automatic inactivity-deletion schedule for game accounts.
• Shared game and reward records: while needed for the relevant membership, event, reward delivery, reconciliation or an unresolved dispute. Account-linked identifiers are included in an erasure review; genuinely anonymous shared totals can remain.
• Support and privacy requests: while the case and necessary follow-up remain open, and for any specifically necessary complaint, security or legal record. Closing a case does not itself erase it.
• Security or fraud evidence: only for as long as a specific investigation, prevention need or applicable legal claim requires. We review the reason rather than retaining all game history indefinitely.
• Unity Diagnostics: Unity documents a default retention period of 90 days for this service. Requests concerning identifiable diagnostic records are considered separately from account deletion.

Limited information may have to remain after account deletion for a legal obligation or a substantiated security or legal claim. Where relevant to your request, we explain which information remains, the reason and its retention period or ending criterion. A blanket copy of your account is not kept merely because you asked for deletion.

Residual copies may remain in access-restricted backups until normal replacement or expiry. They are not used as an active game account. Any restoration must respect completed erasure requests. Contact us for information about the backup copies relevant to your request.

9. International processing and protection

Unity and Google operate internationally; information can be processed outside your country and the European Economic Area, including in the United States. For processing on our behalf, the Unity Data Processing Addendum describes contractual transfer safeguards, including Standard Contractual Clauses where applicable. Provider-controlled sign-in processing is also described in the provider’s privacy policy. We do not promise EU-only processing.

You can contact privacy@mgplaystudio.com for further information about applicable safeguards. We use appropriate access controls and technical and organisational measures to protect information. No connected service can guarantee absolute security.

10. Your rights and account deletion

Depending on applicable law, you can request access, correction, erasure, restriction or a portable copy of your data and object to processing based on legitimate interests. You may withdraw consent where processing relies on it; this does not affect earlier lawful processing. Rights have conditions and exceptions.

Email privacy@mgplaystudio.com or follow our account deletion instructions. You can submit a request without reinstalling the game or knowing your Player ID. We may need proportionate information to identify the account and verify authority. A public name or Player ID alone is not proof of ownership.

Under the GDPR we respond without undue delay, normally within one month of receiving a request. If a permitted extension is needed, we explain it within that first month. We also explain a refusal or any limits and the available remedies. You may complain to the Estonian Data Protection Inspectorate or another competent supervisory authority.

11. Young players

Sword & Shield: Ascendant is intended for players aged 16 or over. Do not use the game if you are below 16 or a higher minimum that applies to you. A parent or guardian must authorise use where required for a player below the age of legal majority. An app-store content rating does not change these account-eligibility rules.

If you believe a child has provided data contrary to these requirements, contact privacy@mgplaystudio.com. We review the report, verify authority where necessary and take the action required by applicable law.

12. Changes to this policy

We update this policy when the game’s data use changes. The effective date identifies the current version. We provide additional notice of material changes and obtain any separate permission required before new processing starts.