Warhorn Privacy Policy

Effective Date: September 4, 2026

Last Updated: September 4, 2026

Company / Data Controller: GAMEASE PTE. LTD.

Contact Email: support@gameasetech.com

Registered Address: 60 PAYA LEBAR ROAD, #04-16, PAYA LEBAR SQUARE, SINGAPORE 409051

Data Protection Contact: Privacy Team, GAMEASE PTE. LTD., Email: support@gameasetech.com

EU/UK Representative, if applicable: Not appointed. We will update this Policy if a representative is required or appointed under applicable data protection law.

Product: Warhorn

1. Overview

This Privacy Policy explains how GAMEASE PTE. LTD. ("Company," "we," "us," or "our") collects, uses, shares, stores, and protects information when you use Warhorn, a 3D hero tower-defense strategy game.

Warhorn includes guest login, account sign-in and binding, cloud saves, game progress sync, achievements, in-game shop features, in-app purchases, feedback, and analytics. These features require network access to our game backend and selected third-party services.

Warhorn is intended for a general audience aged 13 and older. It is not directed to children under 13.

2. Information We Collect

We collect information that is necessary to provide the game, operate accounts, save progress, fulfill purchases, secure the service, respond to support requests, comply with law, and improve Warhorn.

2.1 Account and Login Information

We may collect or generate:

• Guest account identifier: the game generates and stores nakama.device_id locally to create and restore a Guest Account.
• Session information: the game stores Nakama session and refresh tokens locally to keep you signed in.
• Game account identifiers: Nakama userId, public UID (publicUid), username, and related account metadata.
• Username/password login information: if you use username/password login, the username is used in the Nakama account system. The current implementation may create an internal email-format identifier such as <username>@guest.yeeyotower.local.
• Third-party login credentials: if you choose Google, Facebook, Apple, or Game Center login or account binding, we receive tokens or verification parameters from those providers and use them to authenticate or link your Account.
• Account binding status and display information, such as whether Google, Facebook, Apple, or Game Center is linked and names returned by those providers where available.

2.2 Gameplay, Progress, and Cloud Saves

To save progress, restore gameplay, and validate server-side state, we process gameplay data including:

• Cloud Saves: up to 10 save slots, currently limited to about 10 KB per slot. Save data may include nickname, gold, main castle level, region progress, tower data, battle settings, hero positions, resident house data, tutorial completion, and reward claim records.
• Server-side progress: heroes owned and hero levels, achievement completion, daily lottery state, homeland and resident house state, main castle progress, and resource progress.
• Wallet and Virtual Items: diamonds, gold, remove-ads entitlement, build entitlement, pending deliveries, shop limits, and delivery status.
• Achievement and behavior counters, such as enemy kills, stage clears, and tower construction counts.
• Time and reset states for daily rewards, weekly purchase limits, homeland production, and server-time calibration.

2.3 Purchases and Transactions

If you make in-app purchases, we may process:

• Product ID, transaction ID, purchase time, platform, order status, delivery status, refund status, and restore status.
• Apple StoreKit 2 transaction JWS, Google Play purchase token, package name, purchase time, and similar receipt or validation information.
• Account-linking identifiers used for purchase validation, such as Apple appAccountToken or Google obfuscatedExternalAccountId.
• Apple App Store Server Notifications and Google Play server notifications used for validation, delivery, restoration, refunds, and duplicate-delivery prevention.

Payments are processed by Apple App Store, Google Play, or another applicable app store. We do not collect or store full payment card numbers, bank account credentials, or app-store payment passwords.

2.4 Feedback and Support Information

If you submit feedback in the game, we collect:

• Feedback type, feedback content, and submission time.
• Email address, if you choose to provide one.
• Account identifiers such as user ID, username, or public UID.
• Context needed to investigate the issue.

Do not include government IDs, payment card information, precise address, health information, or other sensitive information in feedback unless we specifically request it for a support case.

2.5 Device, Network, Logs, and Analytics

We may collect:

• Device and app information: device model, operating system, app version, package name, language, region, screen, and performance-related information.
• Technical logs: request time, request path, error codes, backend logs, IP address, crash or exception context, and security logs.
• Firebase Analytics data: events such as login events, app launch, basic interaction events, device/app instance identifiers, and other data automatically or manually logged through Firebase Analytics.
• Facebook SDK-related information: the project includes Facebook SDK. The current Android manifest includes automatic app events and advertiser ID collection settings. The current iOS login path uses Limited Login and disables advertiser tracking preference. Final disclosure should match the actual release build and SDK settings.
• Adjust attribution data: Android Advertising ID, device and app information, IP address, installation, launch, and in-app event data, advertising interaction data, and campaign attribution information used for installation attribution, campaign measurement, analytics, and fraud prevention.

2.6 Advertising and Tracking

Warhorn uses Google AdMob to provide optional rewarded video advertisements. If you have not purchased the remove-ads entitlement, you may choose to watch a rewarded video advertisement in exchange for the in-game reward displayed before the advertisement. Watching a rewarded advertisement is optional.

If you have purchased the remove-ads entitlement, eligible rewarded-ad actions will not request or display a rewarded video advertisement. Instead, after you select the relevant reward action, Warhorn may grant the corresponding in-game reward directly. The remove-ads entitlement applies only to eligible advertisement displays and does not remove reward buttons, reward claims, system notices, shop information, activity notices, Account security notices, legal notices, or other non-ad messages.

Google AdMob may process Android Advertising ID, device and application information, IP address, advertising display, completion and interaction events, diagnostic information, and related technical data for advertising delivery, measurement, frequency control, fraud prevention, and service operation. Android Advertising ID is a resettable device identifier. We do not use it by itself to directly identify your name or other real-world identity.

Warhorn also uses Adjust for installation attribution, campaign measurement, advertising effectiveness analysis, and fraud prevention. Adjust may process Android Advertising ID, device and app information, IP address, installation, launch, in-app event, advertising interaction, and campaign attribution information for these purposes.

Where required by applicable law, we will obtain consent before using information for personalized advertising or other consent-based advertising and attribution processing. You may reset or delete your Android Advertising ID, or manage personalized advertising settings, through your Android device settings. Resetting, deleting, or limiting use of the Advertising ID may affect advertising personalization and attribution measurement, but does not prevent you from using the core game service.

We do not sell personal information as that term is commonly used. Depending on the SDK configuration and applicable law, certain advertising or attribution data uses may be treated as "sharing" or a similar regulated disclosure. Where required, we will provide the applicable choice or opt-out mechanism.

3. How We Use Information

We use information to:

• Create, authenticate, restore, and manage Accounts.
• Save and sync gameplay progress, Cloud Saves, achievements, rewards, wallets, and Virtual Items.
• Validate in-app purchases, deliver purchased items, restore purchases, prevent duplicate delivery, process refunds, and prevent fraud.
• Provide third-party login and account binding.
• Respond to feedback, support requests, troubleshooting, and security incidents.
• Analyze use of the game, improve balance, improve features, and measure service quality.
• Provide optional rewarded video advertisements, grant the associated in-game rewards, measure advertising performance, control advertising frequency, and prevent advertising fraud.
• Attribute installations and campaign performance, analyze advertising effectiveness, and prevent fraudulent or abnormal installations and advertising activity.
• Detect cheating, unauthorized modifications, attacks, abnormal transactions, abuse, and violations of our Terms.
• Comply with legal obligations, platform rules, audits, dispute resolution, and regulatory requests.

4. Account and Data Deletion

You can request deletion of your Account and the personal data we store about you on our servers at any time by emailing us.

4.1 How to Request

How to request. Send an email to support@gameasetech.com with the subject line "Data Deletion Request" and include the following so we can verify your identity and locate your data:

• Your in-game public UID and/or username
• The login method you use (Guest, Google, Facebook, Apple, or Game Center)
• The email address associated with your account, if any

4.2 What We Will Do

After we verify your identity and account ownership, we will delete or irreversibly de-identify the personal data associated with your Account that is stored on our servers within 30 days of your request, and we will confirm completion by reply email.

4.3 What Will Be Deleted

This includes your Account identifiers, profile information, Cloud Saves and gameplay progress, heroes and achievement data, wallet and virtual items, and feedback records.

4.4 What May Be Retained

We may retain limited information for longer only where required by law or for legitimate purposes, such as:

• Purchase and transaction records, kept as required for accounting, tax, refunds, dispute resolution, and fraud prevention
• Security and abuse-prevention logs, kept for a limited period
• Data needed to establish, exercise, or defend legal claims

Where retention applies, the data is kept only for the stated purpose and is not used for anything else.

4.5 Effect of Deletion

Deleting your Account is permanent and cannot be undone. Your gameplay progress, Cloud Saves, virtual currency, and any unused or non-consumed entitlements will be lost.

4.6 Third-Party Sign-In

If you sign in through a third-party provider (such as Google, Facebook, Apple, or Game Center), you can also request deletion of your data from that provider's own settings, where available. Requests made through those providers are processed as described in this section. You may also unlink your third-party account from Warhorn at any time; unlinking does not by itself delete the data stored on our servers, which is handled only through the deletion request described above.

5. Legal Bases for EEA and UK Users

If GDPR or UK GDPR applies, we rely on the following legal bases:

Where we rely on legitimate interests, we balance our interests against your privacy rights and use safeguards such as access controls, data minimization, and retention limits.

6. Third-Party Services and SDKs

Warhorn uses or may use the following third-party services. These providers may process data under their own privacy policies.

Google AdMob's privacy policy is available at https://policies.google.com/privacy. Adjust's privacy policy is available at https://www.adjust.com/terms/privacy-policy/. If we add, remove, or materially change advertising, attribution, crash reporting, push notifications, or other SDKs, we will update this list.

7. Sharing and Disclosure

We do not sell personal information as that term is commonly used. We share or disclose information only as needed to:

• Provide game services through backend, analytics, login, store, IAP validation, hosting, and support providers.
• Provide optional rewarded advertising, advertising measurement, installation attribution, campaign measurement, analytics, and fraud prevention through providers such as Google AdMob and Adjust.
• Complete purchases, refunds, purchase restoration, order disputes, or app-store review with Apple, Google, or applicable stores.
• Process feedback, customer support, security, data hosting, diagnostics, analytics, or technical operations through bound service providers.
• Comply with laws, regulations, court orders, regulatory requests, app-store rules, or lawful protection of users, the Company, and third parties.
• Transfer information in connection with a merger, acquisition, financing, reorganization, asset transfer, or similar transaction, subject to continued protection of the information.

8. International Transfers

Warhorn is intended for international distribution. Your information may be processed in countries or regions other than where you live. Where required, we use appropriate safeguards for international transfers, such as contractual protections, transfer impact assessments, or other legally recognized mechanisms.

9. Retention

We keep information only for as long as reasonably necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

In general:

• Account, gameplay progress, Cloud Saves, wallet, purchase, and delivery records are kept while your Account remains active or as needed for restoration, fraud prevention, dispute resolution, and legal compliance.
• Feedback is kept for a reasonable period after it is processed.
• Technical logs and analytics data are kept for operational, security, and statistical needs.
• Advertising, attribution, and Advertising ID-related data are kept only for as long as needed for advertising delivery, measurement, attribution, fraud prevention, analytics, and legal or operational requirements. Third-party providers may retain data under their own privacy policies and configurations.
• Local save data, session tokens, and guest device identifiers remain on your device unless you uninstall the app, clear app data, or delete them through the game or operating system.

10. Security

We use reasonable technical and organizational measures to protect information, including access controls, encrypted transport, server-side permissions, purchase validation, duplicate-delivery prevention, and log minimization or masking where appropriate.

No internet service is completely secure. You are responsible for protecting your Account, password, device, and third-party accounts. If you believe your Account or purchase history has been compromised, contact us at support@gameasetech.com.

11. Your Privacy Rights

Depending on where you live, you may have the right to request:

• Access to your information.
• Correction or update of inaccurate information.
• Deletion of your Account, Cloud Saves, feedback, or other personal information.
• Restriction or objection to certain processing.
• Portability of certain information.
• Withdrawal of consent where processing is based on consent.
• Management of advertising-related choices, including personalized advertising choices where available, and reset or deletion of your Android Advertising ID through your device settings.
• Deregistration or unlinking of third-party accounts.
• Information about how we process your data.

To exercise rights, contact support@gameasetech.com. We may need to verify your identity and Account ownership. Deleting an Account or Cloud Saves may permanently remove gameplay progress, Virtual Items, purchase entitlements, and cloud/local data, except information we must retain for legal, accounting, fraud prevention, security, or dispute-resolution reasons.

12. EEA and UK Rights

If you are in the EEA or UK, you may also have the right to lodge a complaint with your local data protection authority. You may contact us first at support@gameasetech.com so we can try to resolve your concern.

EU/UK Representative: Not appointed. We will update this Policy if a representative is required or appointed under applicable data protection law.

13. California Privacy Rights

If California privacy law applies, California residents may have rights to know, access, correct, delete, and limit certain uses of personal information, and to opt out of the sale or sharing of personal information.

Warhorn uses Google AdMob for optional rewarded video advertisements and Adjust for attribution and advertising measurement. Depending on the SDK configuration and applicable law, certain data uses may qualify as a "sale" or "sharing" under California law. Where required, we will provide the applicable "Do Not Sell or Share My Personal Information" choice or other legally required opt-out mechanism.

We will not discriminate against you for exercising applicable privacy rights.

14. Children

Warhorn is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will delete or de-identify it within a reasonable time.

Parents or guardians may contact us at support@gameasetech.com if they believe a child has provided information or made a purchase without appropriate permission.

15. Platform Permissions

Based on the current project configuration, Warhorn may involve:

• Network access for login, Cloud Saves, resource downloads, purchase validation, feedback, and analytics.
• Android com.google.android.gms.permission.AD_ID permission to access the Android Advertising ID for Google AdMob advertising and Adjust attribution. This is not an Android runtime permission that displays a system permission prompt. You can reset or delete the Advertising ID, or manage personalized advertising settings, through your Android device settings.
• iOS App Tracking Transparency capability and description text, mainly related to Facebook SDK configuration. Whether the prompt appears depends on the final release build and SDK settings.
• iOS local network usage text written by the build script. If the final build does not use local network features, this should be removed or updated before release.
• Sign in with Apple and Game Center capabilities for iOS login or binding.

As of the effective date of this Policy, Warhorn does not require camera, microphone, precise location, contacts, or photo library access for its game features.

16. Changes to This Policy

We may update this Policy for feature changes, SDK changes, legal requirements, platform rules, or business changes. If changes are material, we will provide notice through the game, store page, in-app notice, or another appropriate method. The updated Policy applies from the effective date shown above.

17. Contact Us

For privacy questions, data deletion requests, or Account-related requests, contact:

• Company / Data Controller: GAMEASE PTE. LTD.
• Contact Email: support@gameasetech.com
• Registered Address: 60 PAYA LEBAR ROAD, #04-16, PAYA LEBAR SQUARE, SINGAPORE 409051
• Data Protection Contact: Privacy Team, GAMEASE PTE. LTD., Email: support@gameasetech.com
• EU/UK Representative, if applicable: Not appointed. We will update this Policy if a representative is required or appointed under applicable data protection law.