TowerRivals: PvP privacy policy

Information we collect

• Account identifiers. When you first open the game we create a guest account with a random account ID using Google Firebase Authentication. If you choose to sign in with Google, Firebase Authentication also holds your Google account ID and email address. We use these only to sign you in, keep your progress and show you which account is connected.
• Profile and game progress. Your display name, @username, trophies, coins, tower levels, lesson progress, match results, weekly standings and prizes.
• Match records. The moves made in ranked matches, which our server replays to confirm the result and prevent cheating.
• Friends and social features. Your friends list, friend requests and invite codes, friendly challenges, whether you are online or in a battle, and short-lived match views when a friend watches your game.
• Multiplayer connection. The game uses Epic Online Services (Epic Games) for matchmaking and to connect players. It creates an anonymous Epic player ID for your device. Epic processes your IP address to connect your match, and the other player's device may see it when a direct connection is used.
• Purchases. If you buy coins, we receive the order or transaction ID and purchase token from the Apple App Store or Google Play to confirm the purchase, add your coins and handle refunds. We never receive your card or payment details.
• Technical logs. Our hosting provider records server requests (such as IP address, time and the request made) for security and troubleshooting. These logs are kept for a short period.
• On your device. Settings such as music, sound and dark mode are stored only on your device.

Unity, the engine the game is built with, may send anonymous technical device details (such as device model and operating system version) to Unity Technologies in some versions of the game.

What we do not do

• We do not show ads or use advertising identifiers.
• We do not track you across other companies' apps or websites.
• We do not sell your personal information.

How we use information

• To run the game: accounts, saving progress, matchmaking, ranked and friendly matches, friends and weekly standings.
• To verify match results, prevent cheating and fraud, and keep the service secure.
• To process coin purchases and refunds.
• To answer your support requests.

What other players can see

Other players can see your display name, @username, trophies, weekly rank and, for friends, whether you are online or in a battle. During a match your opponent sees your moves.

Service providers

We share information only with providers that run the game for us, under their own privacy and security terms:

• Google Firebase: authentication and game database.
• Render: server hosting.
• Epic Games (Epic Online Services): matchmaking and player connections.
• Apple and Google: sign-in, app distribution and payment processing.
• Unity Technologies: game engine.

We may also disclose information if required by law or to protect players and the service.

Keeping and deleting your information

We keep your information while your account exists. In supported app versions, open Account & sound > Manage account > Delete account to confirm permanent deletion. If that option is unavailable, email bookmyscrimsindia@gmail.com from the email linked to your account, or include your @username. Email requests are handled within 30 days. We retain limited purchase verification and deletion records to handle refunds, prevent fraud and prevent deleted accounts from being recreated by old sessions.

Your choices and rights

You can play as a guest without giving us your email. You can ask us for a copy of your information, ask us to correct it or ask us to delete it by emailing bookmyscrimsindia@gmail.com.

Children

TowerRivals is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

Security and international processing

Information is sent over encrypted connections and stored with our providers, which may process it outside your country, including in Singapore and the United States.

Changes

We will update this page when our practices change and change the date at the top.