This Privacy Policy explains how ExtensioHub (“we,” “us,” or “our”) collects, uses and protects information in connection with the Bannermarch mobile game, website and related services (collectively, the “Services”). ExtensioHub is the controller of personal information for which it determines the purposes and means of processing. Some providers described below may act as separate controllers under their own policies.
1. Information we process
Local game data
Bannermarch stores gameplay progress, settings, notification preferences, audio preferences and related state on your device. Guest progress may remain only on the device unless you sign in and enable online or cloud features.
Account and identity information
When you sign in with Google, Google provides the identifiers needed to authenticate you and may provide your email address and basic profile information. Bannermarch uses Supabase to create and maintain your game account and authentication session. We also process the ruler name you choose and your assigned player and world identifiers. Your Google password is not provided to us.
Cloud saves and online gameplay
For signed-in players, we process cloud-save data and information needed to operate worlds, rankings, events and multiplayer features. This may include game progress, world or server assignment, ruler name, avatar, scores, ranking, army or Arena squad data, battle records, rewards, event activity and related timestamps. Ruler names, avatars, scores, rankings, squad information and selected battle results may be visible to other players as part of leaderboards, Arena and other online features.
Purchases and entitlements
If you make an in-app purchase, the Apple App Store or Google Play processes your payment details. We and our purchase providers may receive or process the product identifier, purchase status and time, store transaction or verification data, an obfuscated or hashed transaction reference, and the account or game world to which an entitlement or item is delivered. We do not receive your full payment-card details.
Advertising and technical information
Bannermarch uses Google Mobile Ads to offer rewarded advertising. Depending on your device, region, consent choices and provider settings, Google and its advertising partners may process IP address and approximate location derived from it, advertising or app-instance identifiers, device and app information, ad requests, impressions, interactions, rewards, diagnostics and fraud-prevention signals.
Support and website information
If you contact us by email or through the website form, we receive the information you choose to provide, such as your email address, selected topic, platform, ruler name, Player ID, message and any diagnostic details you include. For an account-deletion request, we also record your explicit confirmation that deletion is permanent. The form is delivered through Web3Forms, which may also process technical request information such as IP address, browser information and timestamps for delivery, security and spam prevention. The website also requests fonts from Google, which receives ordinary network request information such as your IP address and browser details.
2. How and why we use information
We use information to:
- authenticate players and provide accounts, cloud saves, worlds, rankings, multiplayer features and support;
- save settings, deliver purchased items and entitlements, and operate game features;
- show rewarded ads, record completed rewards, measure ads and prevent invalid traffic;
- maintain security, prevent fraud and abuse, diagnose problems and improve the Services;
- respond to messages and privacy requests; and
- comply with legal obligations and enforce our Terms.
Where applicable law requires a legal basis, we rely on performance of our agreement with you to provide requested Services; our legitimate interests in operating, securing and improving Bannermarch and responding to users; your consent for personalized advertising or other processing where consent is required; and compliance with legal obligations, including transaction, tax and consumer-protection requirements. You may withdraw consent through the available privacy controls without affecting processing already carried out lawfully.
3. Advertising and your choices
Rewarded ads are used in specific free gameplay flows. Depending on your region and choices, ads may be personalized, non-personalized or limited. Where required, the game asks for consent before requesting ads and provides an in-game privacy-options control when Google indicates that it is required. You can also manage advertising permissions and identifiers through your device or Google account settings. Declining personalized advertising does not necessarily remove ads; it changes how eligible ads are selected and measured.
4. Service providers
We use third-party providers to operate the Services. They process information under contracts with us, their own privacy terms, or both. These include:
- Google for Google Sign-In, Google Play distribution and billing, Google Mobile Ads, consent controls and website font delivery - see Google’s Privacy Policy and how Google uses information from partner apps and sites;
- Apple for App Store distribution and billing on iOS - see Apple’s Privacy Policy;
- Supabase for authentication, database hosting, cloud saves and online game services - see Supabase’s Privacy Policy;
- Superwall for presenting and managing premium offers, subscriptions and entitlements - see Superwall’s Privacy Policy; and
- Web3Forms for securely delivering website contact-form submissions and filtering abuse - see Web3Forms’ Privacy Policy.
These providers may use their own infrastructure and subprocessors. Their processing is also governed by their privacy documentation and the controls available through your device, store or provider account.
5. Sharing and sale of information
We do not sell personal information for money. We disclose information to the providers above as needed to operate the Services; to other players when you use public or multiplayer features; when you direct us to do so; in connection with a business reorganization; or where necessary to comply with law, protect rights, investigate abuse or maintain security. Some privacy laws may define certain personalized advertising disclosures as “sharing” or “selling.” Where applicable, use the consent and device controls described above to manage those disclosures.
6. Retention and deletion
Local game data remains on your device until it is reset, cleared or removed, subject to device backups. Account, cloud-save and online gameplay data is generally kept while your Bannermarch account remains active and then deleted or anonymized after a valid deletion request, except where limited retention is needed for security, fraud prevention, transaction records, legal obligations or legal claims. Some short-lived online records, such as recent battle history, are removed sooner as part of normal game operation.
Support communications are kept only as long as reasonably necessary to answer the request, maintain appropriate support records, protect the Services and meet legal obligations. Web3Forms states that form submission data may be retained for up to three years unless it is deleted earlier or a shorter period applies. Other providers retain information according to their own policies.
7. Account and data deletion
You can request deletion of your Bannermarch account and associated cloud data through our contact form by choosing “Account or data deletion.” Enter the email address connected to your Bannermarch sign-in and the Player ID displayed under Player Profile → Settings → Other, then confirm the permanent-loss warning. These details help us verify ownership and locate the correct account. We may ask for additional verification before deleting data.
Deleting a Bannermarch account does not automatically cancel an App Store or Google Play subscription, erase store transaction records controlled by Apple or Google, or remove local device backups. Manage subscriptions and store data through the relevant store account. Information we must keep for legal, accounting, fraud-prevention or security reasons will be retained only for those purposes and for the required period.
8. Your privacy rights
Depending on your location, you may have rights to access, correct, delete or receive a copy of your personal information; restrict or object to certain processing; withdraw consent; and lodge a complaint with your local data-protection authority. You may reset local game progress from the in-game settings, manage advertising choices through available app or device controls, and manage purchases through your store account. To exercise a right, use the contact form or email us. We may need to verify your identity and may retain a record of the request where required.
9. International processing
Our providers may process information in countries other than your own. Where required, transfers are covered by appropriate safeguards, such as adequacy decisions or standard contractual clauses.
10. Security
We use reasonable administrative and technical measures designed to protect information, including authenticated access and encrypted network connections where supported. No system can guarantee absolute security, and you are responsible for protecting access to your Google and store accounts.
11. Children
Bannermarch is not directed to children under 13 or the minimum age required in their jurisdiction, and we do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.
12. Changes to this policy
We may update this Privacy Policy as the game, website, providers and applicable law evolve. We will post the updated policy here and revise the effective date. Material changes may also be communicated in the app or through the relevant store listing where appropriate.
13. Contact
Questions, privacy requests and complaints may be submitted through the Bannermarch contact page or sent to pgbuilds.tech@gmail.com. Please include “Bannermarch Privacy” in the subject line when emailing.