Privacy

This policy covers the Wizard Brawl mobile game (iOS and Android) and this website. Wizard Brawl is run by David Chia ("we", "us"). Questions or requests: support@wizardbrawlgame.com.

The short version

• Offline play (Vs Bots, Training, Play With Friends on the same Wi-Fi) needs no account and sends nothing to us.
• Online play needs an account. We keep what we need to run it: your player name, how you sign in, and your match results.
• No ads, no ad tracking, no third-party analytics. We don't sell or share your data for advertising.
• You can delete your account in the game at any time.

What we collect

If you play as a guest

Your settings, guest name and progress stay on your device. Play With Friends finds other phones on your local network directly; that traffic does not pass through our servers.

If you sign in to play online

• Sign-in details. If you use Google Play Games or Apple Game Center, the player ID that service gives us. If you use an email and password, your email address and a one-way hash of your password (we never store the password itself).
• Player name, and when you last changed it.
• Sessions. Sign-in tokens for the device you are signed in on, with when they were created and when they expire.
• Gameplay. Match results (team, wins, rounds, knockouts, damage), totals and streaks, per-spell stats, achievements, friends and friend requests, coins, and the cosmetics you own and wear.
• Account safety. When the account was created and last used, failed sign-in counts and lockouts, password-reset requests, and any ban and its reason.
• Connection data. Your IP address, which is needed to connect you to a match. Our servers keep short technical logs of rooms and matches for debugging and to stop abuse.

On this website

This site sets no cookies, has no analytics and no forms. Our host (Vercel) keeps standard server logs, such as IP address and browser type, to deliver and protect the site.

Why we use it

• To run your account and sign you in, and keep you signed in on one device.
• To match you with other players and run online matches.
• To show your profile, stats, achievements, friends and cosmetics.
• To send account emails you ask for, such as password resets and email-change notices.
• To keep the game fair and safe: stop cheating, abuse and offensive names, and enforce our Terms.
• To fix bugs and keep the servers healthy.

Where the law asks for a legal basis (for example GDPR), we rely on our contract with you (running the game you signed up for) and our legitimate interest in keeping the game secure and fair.

Who else sees it

• Other players see your player name, profile, stats, achievements and cosmetics, and see you in their match history.
• Google and Apple, if you sign in with Play Games or Game Center. Their own privacy policies apply to those services.
• Service providers that host our servers and website and send our emails. They handle data only on our behalf.
• Authorities, if the law requires it.

We do not sell personal data, and we do not share it for targeted advertising.

Links to Discord, the App Store and Google Play take you to their services, which have their own policies.

How long we keep it

While your account exists. When you delete it, your sign-ins, linked devices, email, password, friends, stats and achievements are deleted straight away. Matches you played stay in other players' history without your name. Your player name is held for 30 days so nobody can pose as you, and the empty account record is removed after 30 days. Technical logs are kept only as long as needed for debugging and security.

Your choices and rights

• Delete: in the game, or see how to delete your account.
• Correct: change your player name and email in the game.
• Access, export or object: email support@wizardbrawlgame.com from the address on your account, or tell us your player name. We answer within 30 days.

Wizard Brawl is run from Malaysia and is available worldwide. We handle your data in line with Malaysia's Personal Data Protection Act 2010 and the privacy laws that apply where you live. Depending on where that is (for example the EU, UK or California) you may have further rights, including to complain to your local data protection authority.

Children

Wizard Brawl is not meant for children under 13, and we do not knowingly collect personal data from them. If you think a child under 13 has an account, email support@wizardbrawlgame.com and we will delete it.

Security

Passwords are stored only as a one-way hash, sign-in tokens are rotated and revoked when you sign in elsewhere, and repeated failed sign-ins lock the account for a while. No system is perfectly secure, but we work to protect your data.

Where it is stored

Our servers and providers may be in a different country from you. Where the law requires, we use appropriate safeguards for these transfers.

Changes

If we add new features that change what we collect, such as in-app purchases, we will update this page and the date at the top first. For significant changes we will also tell you in the game.