Privacy Policy
This policy explains what data the Brutoria mobile app (the "Game") processes, why, and what rights you have.
Who is responsible
The controller of your data is Adrián Cánovas Acosta, developer of Brutoria, based in Spain. Contact: [email protected].
What data we process
- Account: an anonymous identifier created when you play as a guest, your profile name and number and, if you link your account, your Google Play Games or Apple identifier.
- Game data: your brutes and their appearance, level, fights, history, quests, achievements, friends, rankings, tournaments and in-game balance.
- Purchases: product, date and order identifier. Payment is handled by Google or Apple: we never see your card details.
- Advertising: advertising ID, IP address, device data and ad interactions, collected by Google AdMob, and your consent choice.
- Notifications: a device identifier used to send you alerts, your language and your time zone, if you allow notifications.
- Usage and errors: device model, system version, installation identifiers, game events and crash reports.
The Game does not collect your precise location, contacts or photos, and does not use your data to train artificial intelligence.
Why we use it and on what legal basis
- Providing the service (account, fights against other players, purchases, support): performance of the contract you accept by playing.
- Security, preventing cheating and fraud, and fixing errors: legitimate interest.
- Improving the Game with usage statistics: legitimate interest.
- Personalised ads: your consent, requested in the Game in the European Economic Area and the United Kingdom. Without it, ads are not personalised. You can change your choice in Settings.
- Meeting legal and tax obligations, such as keeping purchase records.
What other players can see
Your profile name and your brutes (name, appearance, level, stats, equipment and results) are visible to other players in the arena, rankings, tournaments and friends lists.
Who we share data with
These providers process data, each under its own policy:
- Google Firebase (accounts, database, servers, notifications, Analytics, Crashlytics and app verification)
- Google AdMob (ads and consent)
- Google Play and Apple (download, purchases and sign-in)
- Unity (game engine and in-app purchases)
We do not sell your data. We only disclose it to an authority when the law requires it.
International transfers
The Game's servers are in the United States. Transfers rely on the safeguards offered by Google, such as the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
How long we keep it
- Account and game data: until you delete your account.
- After deletion, some technical copies expire on their own: combat and attack records, up to 7 days; advertising data, up to 30 days; brackets of tournaments already played, where your brute's name may still appear, up to 60 days.
- Purchase records are kept as long as the law requires, even if you delete your account.
- Usage data, up to 14 months, and crash reports, up to 90 days.
Your rights
You can request access, rectification, erasure, restriction, portability or objection, and withdraw your consent, by writing to [email protected]. If you believe your request was not handled properly, you can complain to the Spanish Data Protection Agency or your local authority.
To delete your account, go to Settings → Delete Account or follow the steps on this page.
Children
The Game is not directed at children under 13, or under 14 in Spain. If you are a parent or guardian and believe a child has given us data, contact us and we will delete it.
Security
Data travels encrypted and access to it is limited. No system is infallible, but if a breach affected your rights we would notify you as the law requires.
Changes to this policy
If we change it, we will publish the new version here with its date. If the change is significant, we will also announce it in the Game.