Vaelmark — Privacy Policy

This Privacy Policy explains what information the mobile game Vaelmark (package com.vaelmark.game, the “Game”) collects, how it is used, and the choices you have. The Game is operated by Vaelmark Games (Ercan Doğan) (“we”, “us”). By creating an account and playing, you agree to this Policy.

1. Information We Collect

Data	Why	Where it is stored
Account username	Identifies your account and characters	Our game server
Email address	Verifies your account when you register and lets you reset a forgotten password. One account per address.	Our game server (with an email‑to‑username index so an address is only used once). Delivery of the codes is handled by Brevo.
Password (hashed)	Sign-in security	Our game server — stored only as a salted PBKDF2-HMAC-SHA256 hash. We never store or see your plain password.
Character & gameplay data	Saves your progress: level, stats, inventory, gold/gems, quests, clan, friends and in-game settings	Our game server
Gameplay analytics	Anonymous first-party event counts (e.g. quest completions) used to balance the game	Our game server. Never sold or shared.
Abuse reports & block lists	Player safety and moderation	Our game server
Push notification token	Sends alerts you opted into (world boss, mail, clan). Only if you allow notifications.	Our game server + Google Firebase Cloud Messaging
Advertising & device identifiers	Only when you choose to watch a rewarded ad	Google AdMob (we do not receive them)
Purchase records	Delivers gems you bought and prevents duplicate delivery	Google Play Billing. We see the product purchased — never your card or billing details.

Apart from the email address above, we do not collect your real name, phone number, precise location, contacts, photos, camera or microphone data. Chat messages are not stored — they are relayed live between players and then discarded. The exception is a message you report, which is kept for moderation.

2. How We Use Your Information

To run the Game: save your characters, sync the world, and let you play with others.
To keep players safe: enforce blocks, mutes and bans, and review abuse reports.
To balance and improve the Game using aggregated gameplay statistics.
To deliver purchases and rewarded-ad rewards.
To send only the notifications you enabled.

We do not sell your data, and we do not use it for profiling or targeted advertising of our own.

3. Third-Party Services

Google Play Services / Billing — account sign-in on the device and in-app purchases.
Google AdMob — optional rewarded ads. AdMob may use advertising identifiers under Google’s own policy.
Brevo — delivers your registration and password-reset emails. Brevo receives only your email address and the code being sent.
Firebase Cloud Messaging — push notifications, if you enable them.

These services are operated by Google and are governed by Google’s Privacy Policy.

4. Data Retention & Deletion

We keep your account data for as long as your account exists. You can delete it yourself at any time — no email required:

Delete a character: character-select screen → select the character → Delete. It is purged after a 1-day grace period (so an accidental deletion can be undone by contacting us within that window).
Delete your whole account: character-select screen → Delete Account → type your username to confirm. Your account and every character on it are removed from our servers immediately.

You can also email us and we will delete your account for you within 30 days.

Full deletion instructions →

After deletion, anonymous aggregated statistics that cannot identify you may remain, and purchase records may be retained by Google where required by law or accounting rules. Server backups are rotated and expire within 30 days.

5. Children’s Privacy

Vaelmark is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

6. Security

Passwords are stored only as salted PBKDF2-HMAC-SHA256 hashes. All traffic between the Game and our servers is encrypted in transit using DTLS, which protects your sign-in and gameplay from passive interception. No system is perfectly secure, but we work to protect your data and will notify affected players of a breach that puts their data at risk.

7. Your Rights

Depending on where you live (for example under GDPR or KVKK), you may have the right to access, correct, export or delete your data, and to object to certain processing. You can exercise all of these by contacting us at the address below — deletion is also available instantly in-game.

8. Changes to This Policy

We may update this Policy as the Game evolves. The “last updated” date at the top always reflects the current version, and material changes will be announced in-game or on our Discord.

9. Contact

Questions, data requests or deletion help: tsunade147@gmail.com

Vaelmark Games (Ercan Doğan) — playvaelmark.com