HedivalThis Privacy Policy explains how Cloudival ("we", "us") collects, uses, shares and protects information when you play Hedival (the "Game") on Android or iOS, and when you visit this website. By using the Game you agree to this Policy. If you do not agree, please do not use the Game.
2. Information we collect
3. How we use information
4. Legal bases (EEA / UK)
5. Sharing and third parties
6. Advertising
7. In-app purchases
8. How long we keep data
9. Security
10. Your rights and choices
11. Delete your account
12. Children
13. International transfers
14. California residents
15. Changes to this Policy
16. Contact us
1. Who we are
The Game is developed and published by Cloudival, which is the controller of the personal data described here. Contact: xenews.net@gmail.com.
2. Information we collect
| Category | What | Source |
|---|---|---|
| Account | A random player ID; if you sign in with email: your email address and a hashed (never plain-text) password; if you sign in with Google or Apple: the account identifier and the email address that service gives us (with Sign in with Apple this may be a private relay address). | You / sign-in provider |
| Profile | Player name, avatar and cosmetic choices. | You |
| Game data | Progress, heroes, items, in-game currencies, match commands and results, rankings, daily quests and rewards. | The Game |
| Purchase records | Product bought, time, order / transaction ID and receipt to deliver the item. We never receive your card or bank details. | Google Play / App Store |
| Device and technical data | Device model, operating system, game version, language, IP address, time zone, error and crash information, request logs. | Your device / our servers |
| Advertising data | If ads are shown: the device advertising identifier (Android Advertising ID / Apple IDFA, only with your permission on iOS) and ad interaction data, collected by ad partners. See Advertising. | Ad partners |
| Support messages | What you send us by email and your email address. | You |
We do not collect your precise location, contacts, photos, microphone or camera data, health or financial information. Reminder notifications are scheduled on your device only and can be turned off in the Game's Settings or in your phone's settings.
3. How we use information
- To create and run your account, save your progress and let you continue on another device.
- To provide the Game: matches, campaign, PvP matchmaking, rankings, rewards and events.
- To check that match results are genuine and to prevent cheating, fraud and abuse (our servers replay match commands).
- To deliver in-app purchases and restore them, and to handle refunds.
- To show rewarded ads you choose to watch, and to give you the reward.
- To fix bugs, understand performance and improve the Game.
- To answer your support requests and send important service messages.
- To comply with the law and enforce our terms.
We do not sell your personal information and we do not use it for automated decisions that have legal effects on you.
4. Legal bases (EEA / UK users)
- Contract – to provide the Game and your account, deliver purchases.
- Legitimate interests – security, anti-cheat, fixing bugs and improving the Game.
- Consent – personalised advertising and tracking where required (you can withdraw it at any time).
- Legal obligation – tax, accounting and law-enforcement requests.
5. Sharing and third parties
We share information only with service providers that help us run the Game, under contracts that limit their use of it:
| Provider | Purpose | Their policy |
|---|---|---|
| Amazon Web Services | Hosting our servers, database and this website | aws.amazon.com/privacy |
| Google (Sign-In, Google Play) | Sign-in, purchases, app distribution | policies.google.com/privacy |
| Apple (Sign in with Apple, App Store) | Sign-in, purchases, app distribution | apple.com/legal/privacy |
| Advertising partners (if ads are shown) | Rewarded video ads, frequency capping, fraud prevention | See Advertising |
We may also disclose information if required by law, to protect the rights and safety of our players or the Game, or as part of a merger or sale of the business (players would be informed). Your player name, avatar and rankings are visible to other players.
6. Advertising
The Game may offer optional rewarded video ads (for example to get extra gold or a War Banner). Ads are served by third-party ad networks that may collect your device advertising identifier, IP address and ad interaction data to show ads, limit how often you see them and prevent fraud, according to their own privacy policies.
- Android: you can reset or delete your Advertising ID in Settings › Google › Ads.
- iOS: we ask for permission before any tracking (App Tracking Transparency). If you decline, ads are not personalised.
- Players in the EEA, UK and Switzerland are asked for consent before personalised ads.
- The "No Ads" purchase gives the rewards without watching ads.
7. In-app purchases
Purchases are processed by Google Play or the App Store. They handle your payment details; we only receive the information needed to deliver and verify your purchase. Refunds follow the store's policy.
8. How long we keep data
- Account and game data: while your account is active. If an account is inactive for 24 months we may delete it.
- After you ask us to delete your account: deleted within 30 days (see section 11).
- Server logs: up to 90 days. Purchase records: as long as tax and accounting laws require (usually up to 10 years).
- Backups are overwritten within 35 days.
9. Security
Data is sent over encrypted connections (HTTPS / TLS), stored on secured servers, and passwords are stored only as salted hashes. Access is limited to people who need it. No system is perfectly secure, so please use a strong password and keep your sign-in safe.
10. Your rights and choices
Depending on where you live (for example under the GDPR, UK GDPR, CCPA/CPRA, Vietnam's Decree 13/2023/ND-CP or Thailand's PDPA) you may have the right to:
- access the personal data we hold about you and get a copy (portability);
- correct inaccurate data;
- delete your data and account;
- object to or restrict some processing, and withdraw consent at any time;
- complain to your local data protection authority.
To use these rights, email xenews.net@gmail.com from the address linked to your account or include your player ID (shown in the Game's Settings). We answer within 30 days and may ask you to confirm it is your account. You can also log out, turn off notifications in Settings, and limit ad tracking in your device settings.
11. Delete your account and data
To delete your Hedival account and its data:
- Open the Game, go to Settings and note your player ID (or the email / Google / Apple account you use to sign in).
- Send an email to xenews.net@gmail.com with the subject "Delete my Hedival account" and your player ID or sign-in email.
- We confirm the request (we may ask you to verify you own the account) and delete the account within 30 days. We email you when it is done.
What is deleted
Your account and sign-in links, player name, progress, heroes, items, currencies, match history, rankings and support messages. Deletion is permanent: purchased items and currencies cannot be restored afterwards.
What may be kept
Purchase / transaction records that tax and accounting laws require us to keep (up to 10 years), and anonymised statistics that no longer identify you. Uninstalling the Game does not delete your account.
You can also ask us to delete only some data (for example your support emails) without deleting the account, using the same email address.
12. Children
The Game is not directed at children under 13 (or the minimum age in your country, such as 16 in some EEA countries). We do not knowingly collect personal information from children under that age. If you believe a child has given us personal data, contact us and we will delete it.
13. International transfers
Our servers and service providers may be located outside your country (for example in Singapore or the United States). When we transfer data from the EEA or UK we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.
14. California residents
We do not sell or "share" personal information for cross-context behavioural advertising as defined by the CCPA/CPRA, other than through ad partners when you watch ads, which you can limit as described in section 6. You may exercise your rights to know, delete and correct, and you will not be discriminated against for doing so.
15. Changes to this Policy
We may update this Policy. The date at the top shows the latest version. For important changes we will tell you in the Game.
16. Contact us
Cloudival · Email: xenews.net@gmail.com · Website: hedival.cloudival.com