1. Who we are
This policy explains how Gamefiar, LLC ("we", "us") handles information for Rise of Tyrants: Age 3 at age3.riseoftyrants.com. It covers this version of the game and its support communications.
We operate from Louisville, Kentucky, USA. For privacy questions or account requests, email fury@riseoftyrants.com.
2. Information we handle
- Account information: your chosen username, internal player identifier, optional email address, account timestamps, and sign-in records. Starting signup also creates a temporary enrollment record even if you do not finish. An email entered during passkey registration is not automatically verified and does not currently provide account recovery.
- Passkeys: public keys, credential identifiers, credential names and technical metadata needed to verify sign-ins. Your passkey's private key stays with your authenticator or passkey provider. We do not receive your device PIN, fingerprint, or face scan through passkey sign-in.
- Game activity: progress, resources, units, actions, battles, rankings, premium entitlements, and messages you post to community chat.
- Technical information: requests and connection details, IP addresses where recorded by our infrastructure, browser and operating-system information, sign-in capability and error reports, timestamps, and diagnostic identifiers.
- Support and purchases: information you send us, and order, payment-status, payer, or transaction details returned by a payment provider when you use a purchase feature. Avoid including passwords, passkeys, or full payment-card details in support messages.
3. External sign-in
This section applies if you choose Google sign-in when it is offered. Google provides a unique account identifier and your email address and verification status. We use this information to authenticate you and associate the Google identity with your game account. We retain the identity association so that later sign-ins reach the same player. Google email claims are not saved as a recovery address, and we do not retain Google access, refresh, or ID tokens.
We request basic sign-in and email access, not access to Gmail messages, contacts, Drive files, or your Google password. We do not sell Google user data, use it for advertising, or use it to train general-purpose AI models. Access is limited to operating, securing, and supporting the sign-in service, with human access only with your permission for support, or when necessary for security or legal obligations.
We handle Google user data under the Google API Services User Data Policy, including applicable Limited Use requirements.
Existing game accounts are not automatically combined just because their email addresses match. Choosing Google sign-in does not by itself enroll you in email recovery. You can review or revoke the game's Google access in your Google Account connections; revoking access does not itself delete your game account. Google's handling of your information is described in its Privacy Policy.
Microsoft
If you choose Microsoft sign-in when it is offered, we receive a verified identity assertion and retain its issuer and unique account identifier to connect later sign-ins to the same player. We request basic sign-in access only, not access to your mailbox, contacts, files, or Microsoft password. We do not retain Microsoft access, refresh, or ID tokens or save incidental profile claims as game account or recovery information.
Linking Microsoft to an existing player is an explicit action in the game's sign-in settings; accounts are not combined by matching email addresses. Removing a linked method does not delete your game account. Microsoft's processing is described in its Privacy Statement. Work or school accounts may also be subject to your organization's policies.
4. How we use information
We use information to create and authenticate accounts, save progress, deliver multiplayer gameplay and chat, handle purchases and support requests, investigate failures, prevent abuse, protect accounts, and meet applicable legal obligations.
Where data-protection law requires a legal basis, we rely on providing the service you request, our legitimate interests in operating and securing the game, compliance with legal obligations, or consent where required. When we rely on consent, you can withdraw it; this does not undo processing that was lawful before withdrawal.
6. Browser storage
The game uses your browser's local storage to keep you signed in and retain chat history, interface preferences, and pending purchase information. This storage remains on your device until it is replaced, removed by the game, or cleared through your browser. Signing out does not necessarily clear cached chat or preferences.
External sign-in uses a short-lived, secure cookie for each provider to connect the browser that starts sign-in with the browser that returns from that provider. Each cookie contains an opaque random value, not your provider identity or a provider token. We also use session storage for a pending sign-in-method action during a redirect.
Clearing site data can sign you out and remove local settings; it does not delete your server-side account or game history. Protect shared devices and keep access to your sign-in method. External services may use cookies or other storage under their own policies.
7. Retention and security
Account and game records are retained while needed to operate your account and the game. Transaction, support, and security records may need to be retained longer to resolve disputes, prevent abuse, or satisfy legal obligations. Retention depends on the purpose and type of record; there is no single automatic deletion period covering all game data.
Deleted or changed information may remain in backups until those backups are replaced or removed. Copies of chat or other public activity may also remain on other players' devices. We consider these limits when responding to deletion requests and explain any information we must retain.
We use access restrictions and other technical safeguards to protect information, but no online service can guarantee absolute security. Our infrastructure and service providers may process information in countries other than yours. Contact us if you have questions about where your information is processed.
8. Your choices and requests
You can choose whether to provide an optional email address, manage linked sign-in providers and passkeys in the game, and stop using the service. Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, restrict or object to certain processing, or complain to your local data-protection authority.
For an account or privacy request, contact fury@riseoftyrants.com with your username and the request. We may ask for information sufficient to verify ownership before disclosing or changing account data. Do not send a password, passkey, or device PIN. Deletion requests are handled through support; the game does not currently have a self-service account-deletion button.
Removing a sign-in method or clearing browser data is not the same as deleting an account. Keep a usable sign-in method until your request is resolved.
9. Age requirements
Age 3 is intended for people aged 18 or older, subject to the additional eligibility requirements in our Terms of Service. If you believe a child below that age has provided personal information, contact us so we can investigate and take appropriate action.
10. Changes to this policy
We will update this page when our information practices change and revise the date below its title. For material changes, we will provide additional notice where appropriate or required. Contact fury@riseoftyrants.com if you have questions.