Privacy Policy

1. Controller and contact

The data controller is Digital HesTech - Damian Hyski, Tęczowa 50, 29-100 Czarnca, Poland, tax ID 6090084847, REGON 527447629.

For data protection matters, contact support@voltborn.eu or +48 882 519 205. The controller has not appointed a Data Protection Officer.

2. Scope and data sources

This policy covers Voltborn for Android and iOS, player accounts, online features, support and the public voltborn.eu website.

We receive data directly from you, automatically from the app and server and, depending on the features used, from Google, Apple and the relevant app store. We do not purchase personal data lists.

3. Data we process

• account and authentication: username, display name, email, player code, password hash, sign-in methods and session records;
• external sign-in: Google or Apple account identifier and basic information supplied by the selected provider;
• gameplay: level, experience, Volts, inventory, settings, statistics, match history, rank and selected characters, skins and music;
• social features: friends, invitations, blocks, player reports and their handling;
• support: account email, subject, message, attached technical context and response history;
• technical and security data: IP address, session identifier, device and operating system type, app version, approximate region, connection times, errors and security events;
• purchases: product identifier, store, transaction identifier or token, verification status, amount and currency supplied by Google Play or the App Store; we do not receive full payment card details;
• notifications: device token, platform, selected notification categories and operating system permission state;
• advertising, once enabled: consent state, advertising identifiers and impression data used by Google AdMob.

4. Purposes and legal bases

• accounts, authentication, progression, gameplay, matchmaking, ranks, inventory and core support - performance of a contract;
• purchases, granting Volts or items, restoring purchases and handling complaints - performance of a contract and legal obligations;
• account protection, fraud, abuse, cheat and attack prevention, and legal claims - our legitimate interest in protecting the service and users;
• stability, diagnostics, service measurement and development using aggregated statistics - our legitimate interest in maintaining and improving the service;
• tax and accounting records and lawful authority requests - compliance with legal obligations;
• personalized advertising, optional marketing reminders and other clearly optional features - consent, which may be withdrawn at any time.

5. Required and optional data

Data marked as required are necessary to create and operate an account. Without them, online services cannot be provided. Personalized ads and marketing reminders are optional and refusing them does not prevent gameplay.

6. Recipients and providers

Data may be processed by providers of hosting, server and email infrastructure, in particular OVHcloud, and by security, support and maintenance providers acting on our instructions.

Depending on the platform and features used, recipients or independent controllers may include Google (Google Play, Google Sign-In, AdMob and Firebase Cloud Messaging) and Apple (App Store, Sign in with Apple and Apple Push Notification service). These providers also process data under their own privacy policies.

We disclose data to public authorities only where a valid legal basis requires it.

7. Advertising and consent

Once advertising is enabled, Voltborn will use Google AdMob. In the EEA, United Kingdom and Switzerland, advertising choices will be collected through Google User Messaging Platform or another certified CMP before sending an ad request that requires consent.

Refusing personalized advertising does not block the game. Non-personalized or limited ads may be served where permitted and technically available. Advertising privacy choices will be available again from the game settings.

The Remove Ads purchase disables forced ads. Optional rewarded ads may remain available but never start without the user's action.

8. Push notifications

Notifications are optional and require operating system permission. They may cover match invitations, account events, rewards, updates or optional reminders.

Notification categories can be disabled in the game, and all notifications can be disabled in device settings. After opt-out or account deletion, the push token is deleted or no longer used.

9. First-party analytics and automation

We use first-party analytics based mainly on account, match, activity, progression and in-game economy records. It supports stability, game balance, retention and shop performance. We currently do not use Firebase Analytics or Firebase Crashlytics.

Matchmaking, AI opponents, ranks, certain abuse checks and rewards use automated rules. They do not make decisions producing legal or similarly significant effects within the meaning of GDPR Article 22.

10. Retention

• active account, progression and inventory - while the service is used;
• inactive account - after 3 years since the last login it may be scheduled for deletion; we then provide at least 30 days' warning before automated deletion;
• account data after a deletion request - deleted or irreversibly anonymized without undue delay, normally no later than 30 days after successful verification;
• backups - isolated from ordinary use and rotated within no more than 30 days;
• technical logs and IP addresses - normally up to 90 days, longer only for a specific security incident or legal claim;
• closed support requests - up to 24 months after closure;
• abuse reports and enforcement records - up to 3 years after closure, unless proceedings or a claim remain ongoing;
• purchase and accounting records - for the period required by tax and accounting laws, normally 5 years calculated under the applicable rules;
• anonymous aggregate statistics that cannot be linked to an individual - may be retained indefinitely.

11. Account deletion

Account deletion is available in the game settings. If the app is unavailable, send a request from the account email to support@voltborn.eu using the instructions at voltborn.eu/en/delete-account.

We remove sign-in data, profile data, social relationships, active sessions, tokens and data no longer required. Match history may remain only after it has been permanently disconnected from the player's identity. Temporary suspension or deactivation does not count as account deletion.

12. Transfers outside the EEA

Some providers, particularly Google and Apple, may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, including the EU-U.S. Data Privacy Framework, or Standard Contractual Clauses with the required safeguards.

13. Your rights

• access your data and receive a copy;
• correct your data;
• request deletion or restriction;
• receive portable data where applicable;
• object to processing based on legitimate interests;
• withdraw consent without affecting prior lawful processing;
• complain to the Polish Data Protection Authority or the competent authority in your country of residence.

14. Minors

Voltborn is intended for users aged 16 and over. A store content rating describes content suitability and does not change the minimum age for independently creating an account.

If we learn that an account was created by a person under 16 without a valid legal basis, we will restrict the account and delete the data after the necessary verification.

15. Security and breaches

We use encrypted transport, secure password hashing, access controls, administrator authentication, request limits, backups and security monitoring. No system can provide an absolute security guarantee.

Where a personal data breach is likely to result in a high risk, affected users will be informed as required by law.

16. Policy changes

We may update this policy when adding features or providers or when legal requirements change. Material changes will be announced in the game or by email, and the current version and effective date will remain available here.