GILDEONPrivacy Policy
Last updated: 10 October 2026. Applies to the game Gildeon Legends and to the website gildeon.com.
This policy explains what data Gildeon Legends collects, why, and what you can do about it. We collect as little as the game needs to work: there is no real name, no password and no contact list involved in playing.
1. Who is responsible
Gildeon is an independent game studio run by Denis Díaz Otero, based in Spain, who is the data controller under the EU General Data Protection Regulation (GDPR). Contact for anything related to privacy: [email protected].
2. The website
gildeon.com uses no cookies, no analytics and no trackers. It is served by Cloudflare, which processes technical data such as your IP address to deliver the page and protect it from abuse. If you email us, we use your address and message only to answer you.
3. What the game collects
| Game account | An anonymous account created by our server when you first play: an internal ID, a public ID and a random secret stored on your device. No email or password is needed. |
|---|---|
| Your progress | Your saved game (city, heroes, resources) so you can keep playing after reinstalling or changing phone, and the time you last played, which the game uses to calculate offline rewards. |
| Public profile | The player name, avatar, title and frame you choose, your era and your Arena trophies. These are visible to other players in rankings, the Arena and friend lists. |
| Arena data | Your defense team and the battles you play, so other players can fight your team and battles can be verified against cheating. |
| Declared age | The age you enter in the game. We use it to protect younger players: limited social features, no personalised ads under 14, and, where local rules require it, restrictions on some purchases. |
| Purchases | If you buy something, Google Play handles the payment. We receive a purchase token and the country of the purchase so we can deliver the item, handle refunds and apply local rules. We never see your card details. |
| Google Play Games (optional) | If you choose to link your account, we store your Google Play Games player ID so you can recover your progress on a new device. |
| Security data | Your IP address is used briefly to limit abuse (for example, too many accounts created from one place), and Google Play Integrity results help us detect modified versions of the game. |
4. Ads
The game may show optional rewarded videos through Google AdMob. Before any ad is requested in the European Economic Area, the UK and Switzerland, the game asks for your consent with Google's consent form. If you decline, or if you are under 14, only non-personalised ads are shown. You can change your choice at any time in the game settings. Players with an ad-free purchase or the premium pass get the rewards without watching ads. Google's use of data is described at policies.google.com/technologies/partner-sites.
5. Why we process your data (legal bases)
- To provide the game (performance of a contract): account, saves, Arena, rankings, purchases.
- Legitimate interest: preventing cheating, fraud and abuse, and keeping the service secure.
- Consent: personalised ads. You can withdraw it at any time.
- Legal obligations: keeping purchase records as tax law requires.
6. Who we share it with
We do not sell your data. We only use these providers to run the game:
- Cloudflare: hosting of our servers and website. Game data is stored in the European Union.
- Google: Google Play (downloads, payments, Play Integrity, Play Games) and AdMob (ads).
Some of these providers may process data outside the EU; when they do, they rely on the safeguards required by the GDPR, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
7. How long we keep it
We keep your account while you play. If you delete it, it is erased immediately. Accounts that are not linked to Google Play Games and that have not been opened for 24 months are deleted. Purchase records are kept, without your account, for as long as tax law requires.
8. Deleting your account
You can delete your account and all its data at any time from the game settings. If you no longer have the game installed, email [email protected] with your public player ID (shown in your profile) and we will delete it.
9. Your rights
You can ask to access, correct, delete or export your data, to restrict or object to its processing, and to withdraw consent, by writing to [email protected]. If you are not happy with our answer, you can complain to the Spanish Data Protection Agency (aepd.es) or the authority in your country.
10. Children
Gildeon Legends is not directed at children under 13. Players who declare an age under 18 get protected settings by default (no search by name, limited friend requests), and players under 14 never receive personalised ads.
11. Changes
If we change this policy, we will update the date at the top and, for important changes, let you know in the game.