Privacy Policy

This policy explains what personal data Sigilhold collects, why, and what you can do about it. Sigilhold is a game made and run by Softastik, based in Slovenia. Softastik is the controller of your personal data under the EU General Data Protection Regulation (GDPR).

Who to contact

For any question about your data, or to use any of the rights below, email [email protected].

What we collect

• Your account: your email address, the username you choose, and your password, which we store only as a one-way hash that cannot be turned back into it.
• Sign in with Google or Apple: if you use one, we receive from that provider an identifier for your account with them and your email address, which is what we use to recognise you. Apple may give us a private relay address instead of your real one. We never receive your Google or Apple password.
• Your game: your keep, heroes, squads, battles, alliance, territory, scores and settings — everything you do in the game, so it can be played.
• Alliance chat: the messages you send, which the members of your alliance can read.
• Notifications: if you turn on notifications, the address your browser gives us for delivering them, and which kinds of notification you want.
• Technical data: our servers record requests they receive, including your IP address and browser details, to keep the game secure and fix problems.

We do not use advertising, analytics or tracking cookies, and we do not sell your data. The game keeps your sign-in session and display preferences in your browser's storage on your device.

Why we use it

• To create your account, sign you in, and run the game you play, including showing your username, crest, alliance and scores to other players. This is necessary to provide the game you signed up for (GDPR Article 6(1)(b)).
• To keep the game secure and fair — preventing abuse, cheating and attacks, and fixing faults. This is our legitimate interest in running a working, fair game (Article 6(1)(f)).
• To send you notifications, only if you turn them on. This is your consent (Article 6(1)(a)), which you can withdraw at any time in the game's settings or your browser.
• To meet legal obligations that apply to us (Article 6(1)(c)).

Who else sees it

• Other players see your username, crest, alliance, territory, scores and battle reports. Your alliance sees your chat messages. Nobody else sees your email.
• Service providers that host and run our servers process data for us, only on our instructions.
• Google and Apple, if you sign in with them, under their own privacy policies. Your browser's notification service (for example Google, Mozilla or Apple) delivers notifications if you turn them on; their content is encrypted.
• Authorities, where the law requires us to.

Where any of these process data outside the European Economic Area, we rely on the safeguards the GDPR provides for such transfers, such as the European Commission's standard contractual clauses or adequacy decisions.

How long we keep it

We keep your account, and the game history attached to it, for as long as your account exists. When you ask us to delete your account, we delete your personal data, except anything the law requires us to keep. Server logs are kept only as long as needed for security and troubleshooting.

Your rights

You can ask us for a copy of your data, to correct it, to delete it (including your whole account), to restrict or object to how we use it, or to receive it in a portable format. Email [email protected] and we will answer within one month. You can also complain to the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec) or to the data protection authority where you live.

Children

Sigilhold is for people aged 16 and over, and you must be 16 or older to create an account. If you believe a younger child has an account, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update the date above, and tell players in the game when the change matters to them.