Privacy Policy - War Map
Last updated: 25 August 2026
1. Who is responsible for your data
Antonio Ortiz Apps, is the data controller for the personal data processed through the Bid War Map app (the “App”). Contact: ortizrojas_bnk@hotmail.com.
2. The short version
The App has no accounts, no sign-up form and no advertising trackers. We do not ask for your name, your email address or your phone number, and we do not track you across other apps or websites. We hold the minimum needed to keep your coins and your territories attached to your device, and to show the banners players publish.
3. What we process, and why
a) Device identifier
When you first open the App we read the identifier Apple assigns to our app on your device (identifierForVendor). We never store it as-is: we store a one-way hash of it. It is used for one purpose only — to make sure the welcome coins are given once per device and not once per reinstall.
Legal basis: legitimate interest (preventing abuse of a free bonus).
b) Session token
Your device is issued a random token that identifies your player. It is stored in the iOS Keychain on your device; the server only keeps a hash of it. It is what links you to your coin balance and your territories.
Legal basis: performance of the contract (providing the game).
c) The content you publish
The empire name, colour, optional slogan and web link you choose when you claim a territory. This is published publicly inside the App to every other player — that is the purpose of the game. Do not put personal information there that you do not want to be public.
Legal basis: performance of the contract.
d) Game activity
Which territories you hold, what you paid, when, your coin transactions, and aggregate counts of clicks on the links shown on the map. Conquests are shown publicly in the in-app “war report” together with the empire name you chose.
Legal basis: performance of the contract.
e) Purchases
When you buy coins, Apple processes the payment. We never see your card details, your Apple Account or your billing address. Our payment provider, RevenueCat, tells our server that a purchase for a given product identifier was validated, and we credit the coins. We keep the transaction identifier, the product and the date so that a purchase is never credited twice.
Legal basis: performance of the contract and legal obligation (accounting).
f) Reports
If you report a banner, we store which territory you reported, the reason, and the identifier of the reporting player, so that a human can review it and so that abuse of the report system can be detected.
Legal basis: legitimate interest (keeping the service safe) and legal obligation.
g) Technical logs
Our server keeps standard request logs, which include IP addresses, for a short period. They are used for security, abuse prevention and debugging.
Legal basis: legitimate interest (security).
4. What we do not do
- We do not use advertising identifiers and we do not run the App Tracking Transparency prompt, because we do not track you.
- We do not sell or rent your data.
- We do not build advertising profiles.
- We do not use analytics SDKs that follow you across other apps.
5. Who else processes your data
| Provider | Role | More information |
|---|---|---|
| Apple | App distribution and payment processing | apple.com/legal/privacy |
| RevenueCat | Validation and management of in-app purchases | revenuecat.com/privacy |
| Our hosting provider | Servers and database | Data stored within the European Union or under an approved transfer mechanism |
Where a provider is located outside the European Economic Area, transfers are covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.
6. How long we keep it
- Player data, coins and territories: while you use the App, and up to 24 months after your last activity.
- Published banners: while you hold the territory. Conquest history remains in the public war report as a record of the game.
- Purchase records: as long as accounting law requires (generally 6 years in Spain).
- Reports: up to 12 months after they are resolved.
- Technical logs: up to 30 days.
7. Your rights
You can ask us to access, correct, delete, restrict or port your data, and object to processing based on legitimate interest. Write to ortizrojas_bnk@hotmail.com.
Because there are no accounts, we need a way to identify your player before we can act. The App’s Settings screen shows your player identifier; include it in your message.
Please note that deleting your player data also deletes your coin balance and releases your territories. That cannot be undone and no refund is due for coins already spent.
If you believe we have not handled your request properly, you may complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority in your country of residence.
8. Security
All traffic between the App and our servers travels over HTTPS. Session tokens and device identifiers are stored only as hashes. Access to the administration tools is protected by a separate credential and is limited to the people who moderate content.
9. Children
The App is not directed at children. It displays content published by other users and is rated 17+. We do not knowingly collect data from children. If you believe a child has used the App, contact us and we will delete the data.
10. Changes
If we change this policy we will update the date above and, where the change is significant, announce it in the App.
Comentarios
Publicar un comentario