Privacy Policy

1. What data we collect

• Telegram sign-in. Your Telegram ID and the name from your Telegram profile (it becomes your hero's initial name). We do not receive your phone number or Telegram contacts.
• Google or Apple sign-in. Your Google or Apple account identifier, email address and name for the hero's initial name. With Sign in with Apple you can hide your email; we then receive an Apple relay address.
• "Save your hero" (email and password). Your email address and your password as a one-way hash. We never store or see the password itself.
• Guest play. No registration: the account is tied to a token the game keeps in your browser or app storage.
• Device and network. IP address and a random device token created by the game itself. It is not an advertising ID or a hardware serial number. When you arrive via an ad link, also your browser and device type (user agent) and the country derived from the IP.
• Diagnostics. Error and slow-loading reports: browser and device type, memory size, number of CPU cores, screen parameters, the error text.
• Game data. Hero progress, items, currency, battles, rankings, guilds, friends, an in-game activity log, questions to the in-game helper.
• Communication. Messages in the global and guild chats, private messages, message reports. Party voice chat is relayed in real time through our own voice server and is not recorded. The microphone is used only when you turn on party voice.
• Photos and videos you upload. An avatar photo (reviewed by a moderator) and a video review. A video review is uploaded only with your consent to show it in ads for the game.
• Purchases. What was bought, when, the amount and the transaction number in the payment system: Telegram Stars, Tribute, Google Play or App Store. We never receive or store bank card details; payments are processed by the payment system.
• Advertising. If you came from an ad: the click identifier (TikTok ttclid, Meta fbclid, fbp and fbc, Google gclid) and link parameters (utm).
• Notifications. A push token: Firebase Cloud Messaging on Android, Apple Push Notification service on iOS, web push in the browser. In Telegram, notifications come from the game bot.
• Support requests. The correspondence and anything you include in it.

We do not ask for access to your contacts, precise location or phone number. The camera and gallery are used only when you choose a photo or video yourself.

2. Why we use it

• To run the game: sign-in, saving progress, one hero across Telegram, browser and apps, battles, chat, parties, purchases. Legal basis: performance of a contract (our Terms).
• Security and abuse prevention: protecting accounts, fighting fraud, hacking and violations of the rules. This uses, among other things, the IP address and device token. Legal basis: legitimate interest.
• Support and moderation: answering requests, refunds, handling reports, reviewing photos. Legal basis: contract and legitimate interest.
• Improving the game: statistics, balance, bug hunting. Legal basis: legitimate interest.
• Measuring ads: learning which ads bring players. Legal basis: legitimate interest, or consent where the law requires it. Video reviews: consent only.
• Notifications about game events. You can turn them off in your phone or browser settings or by stopping the bot.
• Payment accounting and legal requirements. Legal basis: legal obligation.

We do not sell your data and we do not show ads from other companies inside the game.

3. Who we share it with

• Telegram - the platform the Telegram version runs on, the game bot and Telegram Stars payments.
• Google - Google sign-in, Google Play and its billing, Android push notifications, the Google Ads tag on our ad landing pages.
• Apple - Sign in with Apple, the App Store and its billing, iOS push notifications.
• Tribute - card payments inside Telegram. Tribute sends us the payment details: product, amount, your Telegram ID and Telegram username, and your email if you entered it in Tribute.
• TikTok and Meta (Facebook, Instagram) - to measure ads: in-game events (opening the game, sign-up, first gate, reaching levels 5, 10 and 20, purchases and their amount; purchases are reported also for players who did not come from an ad), the click identifier, IP address, user agent and a hash (SHA-256) of your Telegram ID or internal account number. We do not share your name, email or messages. No events are sent to TikTok or Meta from the iOS app (iPhone and iPad); once you have played from it, your account's events are not sent when you play on the website or in Telegram either. Our ad landing pages use the TikTok and Meta pixels.
• Hosting provider - the servers that run the game and its database.
• Authorities - only when required by law.

These companies process data under their own privacy policies and may do so in other countries, including the United States.

What other players see: your hero's name and avatar, level, class, guild, ranking, chat messages, gear and stats. Gear and stats can be hidden in the privacy settings.

4. How long we keep it

• Account and game data - for as long as the account exists.
• Sign-in records with IP and device token - up to 31 days.
• The IP address and user agent in ad click records - up to 90 days. The click record itself (click identifier, campaign) - while the account exists; after deletion it remains without any link to it.
• Error reports - together with the event log; after account deletion without the browser and device type.
• Payment records - as long as accounting, tax law and refund disputes require; after account deletion they are not linked to a game profile.
• Support correspondence - as long as needed to resolve the issue and any dispute.
• Data disappears from backups as they are rotated.

5. Deleting your account

In the game: Settings → "Delete account" and confirm. The account is deleted after 7 days. Until then you can cancel with "Cancel deletion".

When the time comes we erase your heroes and all progress, items, currency, messages, friends, photos and videos, sign-in data (Google or Apple identifier, email, password hash, sessions, push tokens) and device and IP records. Payment records and a log of game actions without hero names or contact details remain without any link to you.

Without the app: email support@reborn-gates.com. Details: Account deletion.

Uninstalling the app or deleting your Telegram account does not delete your game account.

6. Age and children

The game is intended for players aged 13 and over and is not directed at children under 13. We do not knowingly collect data from children under 13 (or under the age at which you can consent to data processing yourself in your country) without parental consent. If we learn about such a child's account without parental consent, we will delete it.

Minors may make purchases only with a parent's permission. Google Play and the App Store offer parental purchase controls.

7. Your rights

You can:

• find out what data we hold about you and get a copy;
• correct inaccurate data;
• delete your account and data;
• restrict or object to processing, including sharing events for ad measurement;
• withdraw consent where processing is based on consent;
• complain to the data protection authority in your country.

Email support@reborn-gates.com. We reply within 30 days and may ask you to confirm the account is yours.

8. Cookies and local storage

The game keeps a device token and sign-in data in your browser or app storage so you don't have to sign in every time. Our ad landing pages set cookies for ad measurement (_fbp, _fbc) and remember which page variant you saw. The TikTok and Meta pixels and the Google Ads tag run on those pages.

9. Security

Connections to the game are encrypted (HTTPS), passwords are stored only as hashes and database access is limited to a few people. No system is perfectly secure: if a breach affects your data, we will notify you as the law requires.

10. Changes

The revision date is at the top of this page. We will announce material changes in the game or via the game bot.

11. Contact

EZ Games Studio
Email: support@reborn-gates.com
Telegram: @reborn_gates_game