1Who we are
Stenli Games makes Six Kingdoms: Eternal War (“the game”) and runs its online service. Stenli Games is the controller of the personal data described in this policy.
For any question about your data, write to privacy@stenligames.com.
2Data that stays on your device
The game keeps these on your device and does not send them to us:
- your settings, such as language, sound, graphics and screen layout;
- your campaign progress, save slots, decks and local battle logs.
If you play online, the game also stores a secret sign-in token for your Arena profile on the device.
On Android, uninstalling the game or clearing its storage removes all of this. On Windows it stays in the folder %APPDATA%\SixKingdomsEternalWar until you delete that folder.
3Data we collect when you play online
The Arena is the online part of the game: ranked matches, friends, duels, tournaments and seasons. When you use it, our server keeps the following.
- Player ID
- A random ID our server creates for your profile. Your device keeps a secret token for it. The server keeps only a hash of that token, so it can recognise you when you reconnect.
- Nickname Public
- The name you choose, made of Latin letters and digits. Other players see it in matches, rankings, tournaments, friend lists and search.
- Google fingerprint
- Only if you sign in with Google. See section 4.
- Game data
- Your rating, rank and season results; gold and items; the decks you pick for the Arena; tournaments you join or create, their names and your results; friends, friend requests and duel invitations; your choices for ALLOW SPECTATING and “Ignore friend requests”; store items unlocked for your profile.
- Match records
- For every Arena match: the cards, every move and when it was made, the result, and both players’ nicknames at the time. We use them for match history and replays, rankings and fair-play checks.
- Channel links Optional, public
- The handles of your YouTube, Twitch, Kick, TikTok or SOOP channels, if you add them in your PROFILE. Other players see them next to your nickname.
- Reports
- If you report a player: the reason you picked (BOT, HACK, EXPLOIT, WIN TRADING, OFFENSIVE NAME or STALLING), both nicknames and the match.
- Campaign cloud save Optional
- A copy of your campaign progress, uploaded only when you save it online with ONLINE DECK.
- Profile dates
- When your profile was created and when it last connected.
The game has no chat. Nicknames, tournament names and channel handles are the only text players write.
4Sign in with Google
You can sign in with your Google account so that the same profile opens on every device. The game asks Google only to confirm who you are.
Google sends our server a signed token. The server checks it against Google’s public keys and then keeps only a one-way hash (SHA-256) of your Google account’s permanent ID. On Android the token Google sends may also contain your name, email address and picture. Our server does not store any of them.
On Windows, the sign-in happens in your web browser, and our server exchanges the one-time code from Google for the token.
Google’s own handling of your sign-in is described in the Google Privacy Policy.
5What we don’t collect
- No location, contacts, photos, files, camera or microphone. On Android the game itself asks only for network access.
- Google’s sign-in library, which is part of the Android game, also declares the fingerprint and biometric permissions. Android uses them only on its own sign-in screens. The game never receives fingerprint or face data.
- No advertising ID and no hardware identifiers such as the IMEI or Android ID.
- No payment card or bank details.
- No ads, analytics, crash-reporting or tracking tools from other companies.
6How we use your data and why
To run the Arena
Matchmaking, matches, rankings, seasons, tournaments, friends, spectating, match history and keeping your profile the same on every device. This is necessary to provide the game you asked to play (Article 6(1)(b) GDPR). Channel links and the campaign cloud save are features you choose to use, on the same basis.
To keep matches fair
We look for cheating, bots and win trading, review reports and keep offensive names out. An automated check of match records flags unusual patterns, such as reaction times, for a person to review. It never bans or punishes anyone on its own. This is our legitimate interest in fair play for all players (Article 6(1)(f) GDPR).
To keep the service working and secure
Protecting the servers from abuse and finding and fixing errors. Legitimate interest (Article 6(1)(f) GDPR).
To balance the cards
We count how often each card is picked, played and wins across all matches. These counts are about cards, not about individual players. Legitimate interest (Article 6(1)(f) GDPR).
We don’t use your data for advertising, we don’t build marketing profiles, and we don’t sell your data.
8Where your data is stored and how it is protected
- Our game servers are in the European Union. Cloudflare may process connection data in other countries under the European Commission’s standard contractual clauses.
- The connection between the game and our servers is encrypted (TLS).
- Sign-in tokens and the Google fingerprint are stored only as one-way hashes.
- Our administration tools can be reached only from our private network.
- We don’t keep your IP address in your profile or in match records.
9How long we keep it
| Data | Kept |
|---|---|
| Arena profile and game data | As long as your account exists. |
| Guest profile without a nickname | It can no longer be used after 24 hours without connecting. |
| Friend requests | They expire after 7 days if not answered. |
| Deleted account | Hidden from rankings, friends and search at once. After 30 days the profile, nickname, gold, items and campaign cloud save are erased. Until then we can restore the account if you ask, and the nickname stays reserved. |
| Match records and reports | Kept for match history, replays and fair-play reviews. They are not erased with the account and still show the player ID and the nickname used at the time of the match. |
| Server backups | Copies made before server updates may hold your data until those backups are deleted. |
| Data on your device | Until you delete it (section 2). |
10Deleting your account
In the game
- Open SETTINGS and then ACCOUNT.
- Press and hold DELETE ACCOUNT for 3 seconds.
You can’t delete the account while you are searching for a match, playing a match or entered in a tournament that hasn’t finished.
Without the game
Write to privacy@stenligames.com with the subject “Delete my account”. Give your nickname and say whether you sign in with Google or play as a guest. Before deleting, we may ask for details that only the owner of the profile would know. We reply within one month.
What happens next
Your profile disappears from rankings, friends and search at once and is erased after 30 days, as described in section 9. To remove the data on your device, uninstall the game or delete its folder (section 2).
11Your rights
Under the GDPR and similar laws you can ask us to:
- give you a copy of your data, also in a machine-readable form;
- correct data that is wrong;
- delete your data;
- limit how we use it;
- stop using it where we rely on legitimate interest.
Write to privacy@stenligames.com. We reply within one month.
You can also complain to a data protection authority in the EU country where you live or where we are established. In Bulgaria this is the Commission for Personal Data Protection (cpdp.bg).
12Children
The game is meant for players aged 13 and over. We don’t knowingly collect data from children under 13. If you think a child under 13 has created an Arena profile, write to us and we will delete it.
13Purchases and changes to this policy
The game currently has no real-money purchases.
When this policy changes, we will publish the new version on this page and change the date at the top.
14Contact
Stenli Games