ULTRAS WARS
English
EnglishTürkçeEspañolPortuguêsItalianoDeutschFrançaisPolskiΕλληνικάSrpski

Your data

Privacy policy

This policy explains what the Ultras Wars mobile game and ultraswars.com collect, why, who helps us process it and how you control it. Short version: we collect what we need to run the game, we never sell your data, and you can delete everything from inside the game in one tap.

Last updated: 1 October 2026

Who we are

Ultras Wars is an independent game studio. We are the data controller for the information described here. You can reach us at destek@ultraswars.com or through our contact page.

What we collect

  • Game account. On first launch our server creates a random guest account id and a session key. We do not ask for your real name, phone number or address. If you choose to link an email, we store the email address and a one-way hash of your password, never the password itself. Sign in with Apple or Google, when available, gives us only an account identifier and, if you allow it, your email.
  • Game data. Your nickname, character look, country, club and group, progress (level, rep, coins, Gold, tickets, missions, fights, league points, Terrace Pass tiers), items you own and your language setting.
  • Things you write. Messages on your group board, reports you file about other players or groups, and club claims (club name, contact email, website and note).
  • Purchases. In-app purchases are handled by the App Store or Google Play. Our purchase partner RevenueCat receives the store transaction and your anonymous game id; we receive the product, the transaction id and its status. We never see your card or payment details.
  • Push notifications. If you allow notifications, we store the device push token, the platform and your language so we can tell you when a mission ends or your terrace is attacked.
  • Gameplay events and crashes. We record gameplay events (for example "mission started" or "energy empty") with a timestamp on our own server, and we use Firebase Analytics and Firebase Crashlytics to measure usage and fix crashes. These collect an app instance id, device model, operating system, app version, approximate country and crash traces.
  • Ads. Rewarded ads are optional and served by Google AdMob. In the EEA, the UK and Switzerland we ask for your consent first. On iOS, the advertising identifier is only used if you allow tracking in the system prompt.
  • Website and contact form. If you write to us, we keep your name, email, topic and message. Our web server keeps standard access logs (IP address, time, page) for security, and we briefly keep IP addresses of failed sign-in attempts to stop password guessing.

What we don't collect

  • We don't access your location, contacts, photos, camera or microphone.
  • We don't sell or rent your data, and we don't share it with data brokers.
  • We don't run cross-app ad tracking unless you allow it on iOS or give ad consent where required.

How we use it

  • To run the game: save your progress, decide fights on the server, run leagues, missions, rewards and purchases. (Legal basis: performance of our contract with you.)
  • To keep the game fair and safe: stop cheating, abuse and spam, moderate reports, and protect accounts. (Legitimate interest.)
  • To improve the game: understand which features are used and fix crashes. (Legitimate interest, or consent where the law requires it.)
  • To send notifications and show personalised ads, only if you allow them. (Consent, which you can withdraw at any time in your device settings or in the consent screen.)

Your nickname, character, club, group and league results are public to other players. Group board messages are visible to members of your group.

Who processes it for us

  • Our hosting provider, which runs our servers in the EU and Türkiye.
  • Google: Firebase Analytics, Firebase Crashlytics, Firebase Cloud Messaging and AdMob.
  • Apple: App Store purchases and Apple Push Notification service.
  • Google Play: purchases on Android.
  • RevenueCat: purchase validation and subscription status.

Some of these partners may process data outside your country, including in the United States. Where that happens, they rely on safeguards such as the EU Standard Contractual Clauses. We may also disclose data if the law requires it.

How long we keep it

  • Account and game data: as long as your account exists.
  • Gameplay events on our server: 90 days.
  • Failed sign-in records: 15 minutes.
  • Contact messages: until your request is resolved, and at most 12 months.
  • Purchase records: as long as tax and consumer law requires.

Deleting your account

In the game, open Character → Account → Delete my account and confirm. This immediately and permanently removes your character, progress, group membership, board messages, push tokens, gameplay events, reports and claims from our servers. Copies in routine backups disappear in the normal backup cycle. You can also ask us by email; tell us your in-game nickname so we can find the account.

Your rights

Depending on where you live (for example under the GDPR or Türkiye's KVKK), you can ask us to access, correct, export or delete your data, to restrict or object to processing, and to withdraw consent. Write to destek@ultraswars.com; we answer within 30 days. You also have the right to complain to your local data protection authority.

Children

Ultras Wars is meant for players aged 13 and over, or the minimum age required in your country. We do not knowingly collect data from younger children. If you believe a child has created an account, contact us and we will delete it.

Changes

When we change this policy we update the date above. Big changes will also be announced in the game.