Privacy Policy

This policy covers the Gods & Magic mobile game (com.nksolutions.godsandmagic on Android and iOS) and this website, both operated by NK Solutions EOOD ("we"), which publishes its games on Google Play as NK Games Studio and on Apple's App Store. The short version: the game stores the data it needs to run your hero, a few details about your device and, on Android, how you found the game – no ads, no tracking, no selling of data.

Data we collect

• Account data. By default you play as a guest: the app generates a random device identifier used to find your hero again. If you choose to create an account, we also store your email address and a hash of your password (Argon2id – we never store or see the password itself).
• Game data. Your hero name, level, stats, talents, items, town, runs, god favor and other progression, so your save works across sessions and devices.
• Purchase records. Payments are processed entirely by the store you installed the game from, Google Play or Apple's App Store – we never receive your payment details. To deliver and support a purchase we store the product bought, the store's purchase token or transaction id and its order id, the price, and what the purchase granted in the game.
• Device details. The version of the app you run, whether your device runs Android or iOS and which version of it, and a country guessed from your device's time zone or language setting (never from location services). The game uses the app version to apply that version's rules, and we use these details to see which versions and systems are in use and where our players are.
• Install source. On Android, the note Google Play keeps on how the game was installed: from the store's own search and pages, or through a link or one of our ads (and then which campaign and ad). We store it with your account, together with when the install began, and use it to see which of our ads bring players. We drop any ad-click identifier the note carries, never read your device's advertising ID, and send nothing back to the ad network. iOS keeps no such note.
• Technical logs. Server request logs including IP addresses, used only for security, rate limiting and debugging, and kept for 30 days.
• Messages to us. If you email us, we keep your message and address to answer you and to handle what you asked for.

What we do not collect

• No ads in the game, and no advertising identifiers: neither your device's advertising ID nor ad-click identifiers.
• No third-party analytics or tracking SDKs.
• No access to your contacts, location services, photos, microphone or files.

Leaderboards and season battles

Public leaderboards and season battles show your hero name and progress to other players. Hero names are chosen by you and act as a pseudonym – pick one that does not reveal who you are if that matters to you.

Where your data lives

Game servers and the database run on Microsoft Azure in the European Union (North Europe region). All traffic between the app and our servers uses HTTPS. Google and Apple may process store and payment data outside the European Union, including in the United States, under the safeguards described in their own privacy policies.

Sharing

We do not sell or rent personal data. It is shared only with the services that make the game work:

• Microsoft Azure – hosting and database infrastructure.
• Google Play – distributes the Android app, processes its payments and verifies purchases.
• Apple – distributes the iOS app through the App Store and processes payments made in it. With each purchase the app gives Apple the random id of your game account, so the purchase is delivered to that account.

Microsoft processes this data only on our behalf, under its data processing terms, and protects it at least as well as this policy describes. Google and Apple handle store and payment data under their own privacy policies, which give the same or equal protection.

Why we use your data

• To run the game you play (performance of a contract, GDPR Art. 6(1)(b)): account data, game data, device details and purchase records.
• To meet legal obligations (Art. 6(1)(c)): purchase records kept for bookkeeping and tax.
• For our legitimate interests (Art. 6(1)(f)): keeping the service secure and working (technical logs), knowing which app versions, systems and countries we serve, which of our ads bring players (install source), and our sales statistics.

We send no marketing and nothing here depends on a separate consent. You can withdraw your consent at any time by deleting your account, as described below; that ends all processing except keeping the purchase records the law requires.

Retention and deletion

Account and game data are kept for as long as the account exists. You can delete your account at any time in the game, under More → Account → Delete Account, guest accounts included. Deletion is immediate and permanent: your sign-ins (the device identifier, and the email address with its password hash), sessions, hero name, save, device details, install source and all progress are erased, and the game starts over with a new guest hero.

The purchase records of a deleted account (product, price, date, what was granted and the store's transaction id) are kept, attached only to an account number that no longer leads to an email address, device or hero, for as long as bookkeeping and tax law require them. Our sales statistics are built on them.

You can also ask for deletion by email at gm@godsandmagic.com, from the address linked to the account or, for a guest account, with your hero name.

Your rights

You can ask us for a copy of your data, to correct it (you can rename your hero in the game yourself), to delete it, to restrict or object to how we use it, or to receive it in a portable format. Write to gm@godsandmagic.com; we answer within one month. You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the data protection authority where you live.

Children

The game is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided personal data, contact us and we will delete it.

Changes

If this policy changes, the new version is published at this address with an updated effective date.

Contact

NK Solutions EOOD („Ен Кей Солюшънс“ ЕООД), unified identification number (UIC) 206452320, registered office: Sofia 1172, Izgrev district, zh.k. Dianabad, bl. 3A, vh. A, et. 10, ap. 61, Bulgaria · gm@godsandmagic.com