Thornvyr · Privacy Notice

Controller and contact

Vilhelm Nihlmark, trading as Thornvyr, is the data controller for personal data processed to operate this game. You can reach the controller by email at Thornvyn.app@gmail.com. Paddle is separately responsible for personal data it processes as Merchant of Record under Paddle’s Privacy Policy.

Data, purposes and legal bases

• Accounts: email, account identifier, sign-in method and authentication information enable registration, sign-in and account security. The legal basis is performance of our agreement; security and fraud prevention also rely on legitimate interests. Passwords are handled by the authentication service, not displayed to us.
• Public player profiles: keeper name, preset portrait or uploaded picture, and profile identifiers let you personalize your account. Names and portraits are public and may appear in lobbies, matches and rankings. The basis is performance of the requested service. Avoid uploading sensitive information.
• Game records: submitted solo scores, waves, gold, kills, duel room state, match results and rankings provide saved results and multiplayer gameplay. The basis is performance of our agreement.
• Portal guest rankings: /play stores a random guest token on your device and uses a hash of it to verify battle action logs without sign-in. A name you submit, waves, gold and kills appear publicly. Verification checkpoints and score records expire after 90 days; deletion happens during subsequent ranking requests. Daily hashed IP identifiers limit abusive requests and expire after two days. This is requested gameplay and legitimate-interest fraud prevention, not optional visitor analytics. Clearing your browser data loses your guest token; contact us for data-rights requests.
• Lobby presence: chosen names, portraits and queue status support matchmaking while you are present. Presence is temporary; it is not intended to disclose your email.
• Optional visitor analytics: with your consent, a random device identifier, event timestamps and visit/first-wave/wave-10 milestones measure return visits and game progression. The legal basis is consent. This identifier is pseudonymous, not intentionally linked to your game account. Analytics is off until you opt in and is not required to play. Manage or withdraw consent on the Data Consent page.
• Browser purchases: purchase intent, account linkage, transaction/customer identifiers, amount, currency and verification/refund status confirm Supporter ownership and handle billing disputes. The bases are performance of our agreement, fraud-prevention legitimate interests and applicable legal obligations. We do not receive or store your card number.
• Technical and support data: hosting providers may process IP addresses, device/browser details and error logs for delivery and security. Any support messages you submit are used to resolve your request. The bases are contract performance and legitimate interests in secure service and support.

Recipients and payments

Lovable Cloud and its infrastructure providers host accounts, game records, images and technical logs. Paddle receives information needed for browser sales, payment processing, tax compliance, invoicing, customer service and refunds as Merchant of Record. Relevant records may be shared with professional legal/accounting advisers or authorities where legally required, and with service providers needed to operate the game. Public profiles and rankings are visible to other visitors.

In configured phone apps, Apple/Google handle store payments and RevenueCat verifies store receipts and entitlement status using a store-managed customer identifier. The game shows no ads and includes no advertising SDK. See RevenueCat and Google for their own processing.

Retention

Account, profile and associated gameplay data are generally retained for the lifetime of your account, until deletion is requested or they are no longer needed to provide the service. Purchase verification records are retained while needed to maintain ownership and resolve refunds or disputes; records subject to a legal retention duty follow that duty. Payment providers apply their own legally required retention periods.

Optional analytics consent and its identifier expire 90 days after opt-in. Analytics events are retained for up to 90 days; automatic daily cleanup removes expired consent records and linked events within the following 24 hours. Withdrawing consent stops collection immediately and deletes linked analytics records when the request succeeds. Earlier analytics collected before these controls were introduced is also subject to the 90-day event limit. Temporary lobby presence ends when you leave. Browser saves and preferences remain on your device until cleared. Technical hosting logs follow the provider’s operational retention rules, not this analytics schedule.

Your rights

Subject to applicable law, you can request access, a copy/export, correction, erasure, restriction and portability of your personal data; object to legitimate-interest processing; and withdraw consent without affecting earlier lawful processing. You can change your keeper name and picture in Account and request account deletion there. Browser saves can be downloaded in the game and removed by clearing site storage. Account deletion does not itself request a refund or erase records payment providers must legally retain.

Send any request to Thornvyn.app@gmail.com, including requests about optional analytics records. We aim to reply within one month, subject to lawful extensions. For UK/EEA requests you may complain to your supervisory authority, including Sweden’s Integritetsskyddsmyndigheten (IMY). These rights apply even where an in-game export or correction control is not yet available.

Security and international transfers

We use appropriate technical and organizational safeguards, including encrypted connections, authentication and access controls; no system can guarantee complete security. Providers may process data outside the UK/EEA. Where required, transfers must be protected by applicable adequacy decisions, Standard Contractual Clauses or other lawful safeguards. Actual provider locations and contractual safeguards must be checked before relying on a particular transfer mechanism.

Cookies and device storage

Essential authentication cookies or browser storage keep you signed in. Local storage also holds solo saves, tutorial progress, audio choices and challenge badges. Optional analytics uses a separate consent token only after you allow it. You can refuse or withdraw through Data Consent, linked from the game menu; refusal does not affect gameplay. Choices expire after 90 days. Clearing site storage removes device-held data and signs you out but does not automatically erase submitted server records; analytics still expires automatically. The browser has no advertising cookies added by the game. Phone advertising preferences are separate.