This policy explains how the Mage Fortress app and site handle the personal data of players and of people who contact support.
1. Account data
At sign-up we keep your login, email and a password hash; the password itself is never stored. Signing in with Google stores your email and Google identifier. If you provide them, we also keep your name, date of birth, country, gender, avatar and photos — the profile fields you choose to show.
2. Games, chat and gold
We keep your duels (opponent, battlefield, stake, move log, result), rating and statistics, chat and private messages, your gold balance and the log of gold: gifts, duels, codes and purchases.
For a purchase in the app we keep the Google Play order number, the product and the date. Payment is handled by Google: we never see your card or bank details.
3. Cookies and technical data
The game stores a session cookie, a language cookie and game preferences on your device (sound, table look, card art). An IP address is kept for a short time to protect sign-up and the game from abuse. There are no advertising cookies. See the cookie policy for details.
4. Why we use the data
To run your account, hold duels and tournaments, settle stakes and ratings, credit purchases, moderate chat, answer requests and stop fraud. Data is not sold, not shared for advertising and not used for advertising profiles.
5. Who else receives data
Google receives what it needs to process a purchase in Google Play and, if you use it, to sign you in with Google. If bot protection is switched on, Google reCAPTCHA checks sign-up. Email is sent through our mail provider. Nobody else receives your data.
6. How long we keep it
Account and game records are kept while the account exists. Purchase records are kept as long as accounting law and Google Play refunds require, without your login once the account is deleted.
7. Deleting your account and other requests
You can delete your account yourself in your profile (Profile → Delete account) or as described on the Account deletion page. Your login, email, password, avatar, photos, profile and friends are erased at once; duel results and messages stay without your name where your opponents need them.
Through support you can also ask us to correct your data or send you a copy.
8. Security and changes
Passwords are stored only as hashes and the connection is encrypted. Staff never ask for your password. This policy may be updated; the date under the title is the date of the current version.