Lane Dominion1. Who is responsible
The controller of your personal data is Torvel Games (“we”), the trading name of David Simunek, an individual game developer in the Czech Republic. Contact: [email protected].
2. The short version
- No ads, no advertising ID, no tracking across apps or websites, and we never sell data.
- Offline play (tutorial, practice against bots) keeps its data only on your device.
- Online play stores a small amount of data on our server: an account ID, a display name, your platform player ID, match results and ratings, your friends and party lists, your gold and the items you own.
- Payments are handled by Apple or Google. We never see your card or bank details, only a record that a purchase happened.
- We do not ask for your real name, email address, phone number, location, contacts, photos or microphone. There is no free-text chat, only a few fixed emote phrases.
- Some matches include computer-controlled opponents that look like other players.
- This website uses no cookies and no analytics.
3. Data we process
| Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Account ID (random, created by our server) | Operate your account for online play | Contract, Art. 6(1)(b) | Until account deletion |
| Platform player ID (Apple Game Center or Google Play Games) | Sign in; one account per platform identity | Contract, Art. 6(1)(b) | Until account deletion |
| Sign-in sessions (stored only as a one-way hash) | Keep you signed in; sign out from a device | Contract, Art. 6(1)(b) | Until they expire, you sign out, or the account is deleted |
| Display name (generated by the game, visible to other players) | Show you in lobbies, matches, friends lists and leaderboards | Contract, Art. 6(1)(b) | Until account deletion |
| Match results, ranked points, per-nation statistics and game progress | Ranked matchmaking, leaderboards, your match history and public profile, fair play | Contract, Art. 6(1)(b); legitimate interest in fair play, Art. 6(1)(f) | Until account deletion (see section 7 for what stays in other players' records) |
| Friends, friend requests, blocks, party membership and invites | Play together with friends | Contract, Art. 6(1)(b) | Until you remove them or delete the account |
| Gold balance, items you own and wear (looks, themes, nations), daily gift, quests, rewards and profile flair | Give you what you earned or bought and show your looks in matches | Contract, Art. 6(1)(b) | Until account deletion |
| In-app purchases: the store's transaction ID, the product, the time and the platform (Apple or Google take the payment) | Deliver what you bought, restore it on a new device, handle refunds | Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c) | Until account deletion, except records that tax or consumer law requires us to keep longer |
| Invite code, the friends who joined with it and their progress; a salted one-way hash of the app's install ID | Pay invite rewards; stop the same phone from redeeming a code twice | Contract, Art. 6(1)(b); legitimate interest in preventing abuse, Art. 6(1)(f) | Until account deletion; the install-ID hash is kept without any link to an account |
| Push notification token, platform, time-zone offset and your "Friends & invites" switch (only after you allow notifications on your phone) | Tell you about friend requests and party invites, outside quiet hours | Consent, Art. 6(1)(a) | Until you turn notifications off or delete the account |
| Player reports: who reported whom, the reason, the match and an optional note (up to 500 characters) | Review cheating, offensive names and abuse | Legitimate interest in fair and safe play, Art. 6(1)(f) | Until the report is handled, at most 12 months; removed with the reporting account |
| Online status (online / in a match), shown to your friends | Let friends see when you can play | Contract, Art. 6(1)(b) | Expires within minutes after the app stops reporting it |
| Live match traffic (commands, game state, fixed emotes) | Run the match on our server | Contract, Art. 6(1)(b) | Server memory only; discarded when the match ends |
| IP address and technical connection data | Network routing and security at our hosting provider | Legitimate interest, Art. 6(1)(f) | Not stored by our code; short-lived operational logs at the hosting provider |
| Support emails | Answer your request | Legitimate interest / contract | Up to 2 years after the last message |
Public profile. Other players can see your display name, rank, ranked record, per-nation statistics and your last ten online match results (for example from the leaderboards). They never see your account ID, platform ID or any contact data.
Computer-controlled opponents. When not enough players are searching, empty seats in Ranked and Casual are filled with computer-controlled opponents shown with player-like names and profiles. They are not real people and hold no personal data.
Analytics and crash reports. The game currently sends no analytics or crash reports. The app already asks for your choice where the law requires consent (the EU / EEA, the UK and Switzerland); elsewhere the setting starts on. Either way you can change it in Settings → Privacy at any time. When we add a provider, nothing is sent without that consent, no advertising IDs are used, and this policy will name the provider first. Unity's own analytics and performance reporting are switched off.
4. Who receives data (processors)
- Fly.io — hosts the game server in Frankfurt, Germany. Sees IP addresses and live match traffic.
- Supabase — managed database for account, rating, match and friends records, hosted in London, United Kingdom.
- Cloudflare — hosts this website and forwards emails sent to our support address.
- Google (Gmail) — the mailbox in which we read and answer support emails.
- Apple (Game Center) and Google (Play Games Services) — provide sign-in and your player identity under their own privacy policies; they are independent controllers for their own data.
- Apple (App Store) and Google (Play) — take payment for in-app purchases as independent controllers under their own privacy policies; we receive only the transaction record described above.
- Apple Push Notification service and Google Firebase Cloud Messaging — deliver notifications to your phone, only if you allow them.
These providers act on our instructions under data processing agreements. We do not sell your data and do not share it with advertisers or data brokers.
5. International transfers
Our game server is in Germany and our database in the United Kingdom, which the European Commission recognises as providing adequate data protection. Fly.io, Supabase, Cloudflare and Google are US-headquartered companies, so limited access from outside the EU/EEA can occur; where it does, we rely on the EU–US Data Privacy Framework certification of the provider and/or the EU Standard Contractual Clauses in its data processing agreement.
6. Children
Lane Dominion is intended for players aged 13 and over. We do not knowingly collect data from children under 13. In some EU countries, including the Czech Republic (15), the age from which you can consent to online services yourself is higher; below that age a parent or guardian must agree. If you believe a child has created an account without that permission, email [email protected] and we will delete it.
7. Your rights and account deletion
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Matchmaking and ratings are calculated automatically from match results only.
Under the GDPR you have the right to access your data, correct it, have it deleted, restrict or object to processing, receive a copy in a portable format, and withdraw consent at any time (without affecting earlier processing). Email [email protected] to exercise them; we answer within one month.
When your account is deleted we remove your account, display name, platform link, sessions, ratings, statistics, progress, gold, owned items, friends, blocks, party, invites, notification tokens and the reports you made in one step. Matches you played remain in the other players' histories without any link to you. See Delete your account.
You may complain to the supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, www.uoou.cz, or to the authority in your own EU country.
8. Security
All traffic between the app and our server is encrypted (HTTPS / WSS). The database is reachable only from our server, never directly from the app. Sign-in sessions are stored only as one-way hashes. No system is perfectly secure.
9. Changes
We will update this policy when the game's data handling changes and show the date at the top. Significant changes will be announced in the app.