Legal
Privacy policy
Last updated September 4, 2026
Under Heavens is an online game, playable without an account. Sign in with Apple or Google and your progress is bound to that account so it can be recovered. No advertising, no third-party analytics, no tracking.
This policy explains how Dorian Wolff (“the studio”, “we”) handles personal data in the mobile game Under Heavens (com.underheavens.game on Google Play, com.underheavens.game on the App Store) and on this website.
The studio is the data controller. Contact: support.dorian@gmail.com. The full registered identity is on the legal notice.
The short version
- Under Heavens is an online game: it needs a connection to play.
- You can play without an account. Signing in is optional and is done through Apple or Google — we never ask you to create a password. It binds your progress to that account so a new phone or a reinstall can recover it.
- We do not use advertising, advertising identifiers, or third-party analytics or tracking SDKs.
- We never sell or rent personal data, and we do not build advertising profiles.
- If you do sign in, you can delete the account and everything attached to it at any time, in three taps.
What we collect, and why
Playing signed out
Only the technical data your device must send to reach the servers — see the last row below. Your roster and journeys stay on the device, and nothing identifies you to the studio.
If you sign in with Apple or Google
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| The account identifier Apple or Google returns, and the email address they release | To recognise the account and recover access on a new device | Contract (art. 6(1)(b)) |
| Display name | To show you on contest leaderboards and replays | Contract |
| Game progress: roster, journeys, currencies, purchases granted | To bind your progress to the account so it survives a reinstall | Contract |
| Contest submissions: score, the pile you used, and the replay transcript | To verify results and let others watch the replay | Contract, and legitimate interest in preventing cheating (art. 6(1)(f)) |
Always
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Technical data your device sends to connect: IP address, app version, device model | To deliver the service, and to rate-limit and secure it | Legitimate interest (art. 6(1)(f)) |
If you use Apple’s “Hide My Email”, the studio only ever sees the relay address Apple gives it.
If you buy something
Purchases are processed by Apple or Google. The studio receives a receipt to verify from the platform, plus the identifier of the item bought. Card numbers, billing addresses and payment details never reach the studio.
Diagnostics
If the game crashes, it may store a crash report on your device. Reports are only sent to the studio if you choose to send one. They contain the error, the device model and the app version — never the contents of your account.
This website
This site is a set of static files served by GitHub Pages. It sets no cookies, runs no analytics and embeds nothing from third parties. GitHub records server access logs (including IP addresses) as the site’s host; see the GitHub Privacy Statement. The playable demo on this page runs entirely in your browser and sends nothing anywhere.
Who else sees your data
| Processor | Role | Where |
|---|---|---|
| Supabase | Database and authentication for accounts, contests and events | European Union |
| Apple, Google | App distribution, sign-in (if you choose it), and purchase processing | Worldwide, under their own policies |
| GitHub | Hosting for this website | Worldwide |
We use no other processors. If that changes, this page changes with it, and the date at the top moves.
How long we keep it
- Account data: until you delete the account.
- Signed-out play: nothing is retained beyond the connection logs below.
- Game progress: until you delete the account, or after 24 months of complete inactivity.
- Contest entries and replays: a bounded, rolling retention — the studio keeps a small number of your most recent and favourited replays, and older entries are removed automatically.
- Connection logs: at most 12 months.
- Purchase records: as long as required by accounting and tax law.
- Deleted accounts: removed from live systems within 30 days; backups roll off within 90 days.
Your rights
Under the GDPR you may request access, correction, deletion, restriction, portability, and object to processing based on legitimate interest. Write to support.dorian@gmail.com and we will answer within one month.
The quickest route to deletion is the account deletion page.
You may also lodge a complaint with your national supervisory authority. In France this is the CNIL.
Children
Under Heavens is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect data from them. If you believe a child has created an account, write to support.dorian@gmail.com and we will delete it.
Security
Traffic is encrypted in transit. Account data is stored in access-controlled databases with row-level security, so one player’s rows cannot be read by another. Scores, currencies and pack results are computed on the server — the game client is never trusted to write them.
Changes
Material changes are announced in the game before they take effect. The “last updated” date at the top of this page always reflects the current version.