Privacy Policy
Last updated: June 6, 2026
0. Data Controller Details
The party responsible for processing personal data is:
- Owner: Alejandro Martos Gómez (Trade name: Stormhold Studios)
- Address: (La Cala del Moral, Málaga) Spain.
- NIF: Available upon request (for formal complaints or exercising GDPR rights)
- Contact Email: info@stormholdstudios.com
- Website: https://stormholdstudios.com
This section is included in compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
At Stormhold Studios we value and respect the privacy of our users. This Privacy Policy describes what data we collect, how we use it, and who we share it with when you use our video game "Stormhold TD" and the services offered through our website stormholdstudios.com.
1. Information we collect
To provide the online features of the game (global leaderboard, progress persistence across reinstalls, future rewarded ads and in-app purchases) we collect the following data associated with your player identity:
- Opaque Google Play Games identifier (player_id): when you sign in with your Google account through Google Play Games Services, we receive a unique code provided by Google. It does NOT contain your email, real name, or any directly identifiable data. It is an identifier valid only within this application.
- User-chosen nick (alias): the public name you type on the first launch of the game, used to identify you in the leaderboard (3-12 characters, letters, digits, hyphens and spaces).
- Game-session data: city played (1-12), difficulty level, stars earned and, exclusively in the final city, the time taken to defeat Lord Storm in seconds. Used solely to compute your global leaderboard score.
- In-game coin balance: we sync your virtual coin balance with our server so it survives uninstall + reinstall. The coins are an in-game currency with no real-world monetary value.
- Technical device data: the device's total RAM (to decide whether to serve high- or low-resolution textures) and the system language. These are not associated with your identity and are not transmitted to the server.
Offline / not-signed-in mode: if you choose not to sign in with Google Play Games, the game will function entirely locally. In that case we do not send any data to the server, but you will lose all progress if you uninstall the app.
2. Local storage on your device
To improve game performance, certain data is stored locally on your device. This data never leaves your device except when synced with our server (see section 3):
- Progress cache: unlocked cities, stars and coin balance, in the game's WebView localStorage.
- Custom maps: maps you build with the editor are stored only locally. They are not synced with the server in this version.
- Preferences: music and effects volumes, selected language.
- Cached identifier and nick: to avoid querying the server on every game launch.
3. Storage on our server
The data described in section 1 (except the purely technical device data) is stored on our server with the following configuration:
- Provider: OVH SAS (Roubaix, France), within the European Economic Area.
- Database: MariaDB on encrypted shared server.
- Transfer protection: all communications between the game and our server are exclusively over HTTPS with TLS 1.2 or higher encryption.
- Anti-tampering: every write operation (nick registration, score submission, coin sync) is cryptographically signed with HMAC-SHA256 to detect traffic alteration.
Retention: your data is kept while your Google account remains active in the game. If you request data deletion through the contact email, we will erase it within 30 calendar days at the latest.
4. Sharing with third parties
For the game to function we share data with the following third parties:
| Third party | Data | Purpose | Location |
|---|---|---|---|
| Google Play Games Services (Google Ireland Ltd) | player_id, Play Games gamertag | Stable player identity for progress saving | Ireland (EEA) + USA under EC standard contractual clauses |
| OVH SAS | All data from section 1 (except technical) | Server and database hosting | Roubaix, France (EEA) |
We do not sell your data to third parties nor share it with advertisers or marketing agencies in the current version.
5. User Rights
In accordance with the GDPR (EU) 2016/679 and the LOPD-GDD 3/2018 (Spain), you have the following rights over your personal data:
- Access: request what data we hold about you.
- Rectification: correct inaccurate data (you can change your nick from the game's settings panel).
- Erasure ("right to be forgotten"): request deletion of your data.
- Restriction / Objection: request that we stop processing your data.
- Portability: receive your data in a structured format.
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, email us at info@stormholdstudios.com indicating your nick and the right you wish to exercise. We will respond within 30 calendar days at the latest. You have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing of your data does not comply with the regulations.
6. Minors
Stormhold is not specifically directed at children under 13, but its content is suitable for all audiences. We do not knowingly collect personal information from minors. If you believe a minor in your care has provided us with personal information without your authorization, contact us at info@stormholdstudios.com and we will delete it immediately. Future ad and IAP integrations will be configured in accordance with Google Play Family policies.
7. Cookie Policy
The stormholdstudios.com website does not use tracking, analytical or advertising cookies. Strictly technical cookies required for hosting-server operation may be generated; these cookies do not store personal information nor are shared with third parties. The mobile application does not use cookies as such (the Capacitor WebView operates against local resources and stateless HTTPS endpoints).
8. Upcoming services
Upcoming game versions will integrate the following services. This policy will be updated with a detailed section BEFORE any of them is activated. We will also notify you inside the game itself.
- Google AdMob (rewarded ads): optional video ads that the player may watch in exchange for in-game coins. Will share with Google: advertising identifier (Advertising ID), device data (model, OS, network), approximate country.
- In-app purchases via Google Play Billing and RevenueCat: coin packs available for real money. Google Play handles the payment fully (bank/card data never reaches Stormhold Studios). RevenueCat validates the purchase and notifies us of success; it receives only: transaction identifier, product purchased and opaque player identifier.
- International transfers: AdMob and RevenueCat process data in the United States. Transfers will be carried out under the standard contractual clauses approved by the European Commission, which guarantee a level of protection equivalent to the GDPR.
Important: these services are not active in the version currently distributed on Google Play. Their integration will be announced with sufficient notice.
9. Changes to this policy
We may update this policy to reflect changes in our services or due to legal requirements. The "Last updated" date at the top indicates when it was last modified. We recommend reviewing this page periodically. Significant changes (for example, the activation of ads or IAP) will be notified within the app before taking effect.
10. Contact
If you have any questions, you can contact us at:
info@stormholdstudios.com
Versión en español disponible en:
stormholdstudios.com/#privacidad