Last updated: 06.11.2026
We want you to know what happens with your data. Here we explain it as simply as possible.
1. Who is responsible?
The controller for data processing in Glyphguard (Art. 4(7) GDPR) is:
[Vor- und Nachname bzw. Firma]
[Straße und Hausnummer]
[PLZ und Ort]
Deutschland
E-mail: support@playglyphguard.com
2. Summary
- Glyphguard shows no ads.
- We use no analytics or tracking services and build no advertising profile of you.
- We do not sell data.
- You pay for purchases through the App Store (Apple) or Google Play. We never see your payment details.
- You can download or delete all your data in the game at any time (Settings → Account).
3. Data on your device
To work, the game stores on your device: your progress (missions, equipment, classes, currencies), your settings (sound, language, appearance etc.), your friends, guild and chat data, and what you entered at first start (month and year of birth, acceptance of the Terms of Use).
This storage is strictly necessary for the game (§ 25(2) no. 2 TDDDG). The legal basis is performance of the contract (Art. 6(1)(b) GDPR). The data stays until you delete it in the game or uninstall the game.
4. Player account and online features
For friends, guilds, chat, leaderboards, PvP, co-op modes and to back up your progress, we process on our servers:
- your player ID and player name,
- your progress and combat power,
- friendships, guild membership, leaderboard ranks and battle results,
- technical connection data (IP address, time, device type, game version).
The legal basis is Art. 6(1)(b) GDPR (contract). We also use connection data to prevent fraud, cheating and attacks (legitimate interest, Art. 6(1)(f) GDPR) and delete it after 30 days at the latest.
Our servers are operated by Supabase (Supabase, Inc.) with its data centre in Frankfurt am Main, Germany on our behalf (processing agreement under Art. 28 GDPR). The servers are located in the EU.
If you create an account with an e-mail address, we store your e-mail address to protect your account and to send you confirmation codes and password reset e-mails (Art. 6(1)(b) GDPR). These e-mails come from noreply@playglyphguard.com and are sent via Resend (Resend, Inc.), sending from the EU region Ireland on our behalf (Art. 28 GDPR). The service only receives your e-mail address and the content of the e-mail.
To find bugs and improve the game, the game also sends to our own server: error reports when something crashes (error text, place in the program, screen in the game, game version, device type) and simple daily counters (game starts, missions, wins, play time, purchases, watched reward videos), as well as when you first reached important points (e.g. tutorial finished, mission 10 cleared). This is linked only to your player ID, not to your name or email. We do not share this data and use no third-party analytics services (legitimate interest, Art. 6(1)(f) GDPR). We delete error reports after 90 days. You can object at any time (section 11).
5. Sign in with Apple or Google
If you sign in with Apple or Google, we only receive an identifier so you can find your progress on another device. Legal basis: Art. 6(1)(b) GDPR. The sign-in itself is subject to Apple's or Google's privacy notices.
6. Chat, guilds and reports
We store chat messages so you and other players can read them, for at most 30 days. An automatic word filter hides swear words.
If you report a message or player, we store the report, the reported content and the reason to review it and act on rule violations (Art. 6(1)(c) and (f) GDPR, Digital Services Act). We delete reports 6 months after the review is closed unless we must keep them longer (e.g. for authorities).
We store blocked and muted players so you no longer see their messages.
7. Purchases
Purchases are handled by Apple (App Store) or Google (Google Play), who process your payment details under their own responsibility. We only receive a receipt (product, price, time, order number) so you receive your purchase in the game.
Legal basis: Art. 6(1)(b) GDPR. We keep receipts as long as tax and commercial law require (up to 10 years, Art. 6(1)(c) GDPR).
8. Support
If you write to us, we use your e-mail address, player ID and message only to help you (Art. 6(1)(b) and (f) GDPR). We delete them when your request is resolved, after 12 months at the latest.
9. Children and teenagers
At first start we ask for your month and year of birth (not the day). The game uses it to work out your age so it stays correct with every birthday. The date stays on your device. Players under 16 need their parents' permission to play. For players under 16, private messages from strangers are locked; from the 16th birthday you can switch them on yourself. In world chat, a word filter, reporting and blocking protect you. We do not knowingly collect data from children beyond what is needed to play.
Parents: if you think your child gave us data without your permission, write to us and we will delete it.
10. Who receives your data?
- our server provider (see section 4), only on our instructions,
- our e-mail service Resend (Resend, Inc.), sending from the EU region Ireland for confirmation codes and password e-mails (see section 4),
- Apple or Google for purchases and sign-in,
- other players: your player name, character, combat power, guild and chat messages are visible to them,
- authorities only where we are legally required.
Apple and Google may transfer data to the USA. They are certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR).
11. Your rights
You have the right to:
- access your data (Art. 15 GDPR),
- rectification (Art. 16), erasure (Art. 17) and restriction (Art. 18),
- data portability (Art. 20),
- object to processing based on legitimate interest (Art. 21),
- withdraw consent with effect for the future (Art. 7(3)).
Much of this works directly in the game: Settings → Account → "Download my data", "Delete progress" (this device only) and "Delete account" (account and all data on the server too). For anything else write to support@playglyphguard.com.
You may also lodge a complaint with a data protection supervisory authority, for example: [Datenschutz-Aufsichtsbehörde deines Bundeslandes, mit Anschrift].
12. Security
Connections to our servers are encrypted (TLS). Only a few people who need it for operation and support have access to player data.
13. Are you obliged to provide data?
No. Without the data in sections 3 and 4, however, the game or its online features will not work. We do not make automated decisions under Art. 22 GDPR.
14. Changes
When the game changes (e.g. new features), we update this policy. We inform you in the game about important changes.