Privacy Policy
Last updated: October 3, 2026 · Version française
This policy explains what data Jonesy Games ("we") collects when you play Battle Maidens, why, how long we keep it and how to exercise your rights. The French version is the reference version.
1. Data controller
Jonesy Games, an independent publisher based in France. Contact: contact@jonesygames.com.
2. Data we collect
| Data | Purpose |
|---|---|
| Account: username, email address, password (stored only as an irreversible hash). Guest accounts receive an automatically generated identifier. | Create your account, sign you in, keep your progress. |
| Third-party sign-in (optional): identifier provided by Game Center, Sign in with Apple, Google Play Games or Google. | Let you recover your account on another device. |
| Game progress: cards, decks, virtual currencies, leagues, tournaments, albums, tutorial progress. | Run the game. |
| In-app purchases: transaction identifier and purchased product, provided by the App Store or Google Play. | Verify and credit your purchase, prevent fraud. We never receive your payment details. |
| Technical data: IP address, date and technical content of requests sent to our servers. | Security, abuse prevention, troubleshooting. |
We currently use no audience analytics or advertising tracking tools.
3. Legal bases
- Performance of a contract (the game's terms of use): account, progress, purchases.
- Legitimate interest: security, fraud prevention, technical logs.
- Consent: personalized advertising, once it is offered (see section 5).
4. Hosting and recipients
Game data is hosted in France by OVHcloud. It is never sold or rented. Only the Jonesy Games team can access it, together with the technical providers strictly required to run the service (hosting provider, Apple and Google for sign-in and payments, under their own policies).
5. Advertising (coming later)
A future version of Battle Maidens may offer optional rewarded ads served by Google AdMob. If so:
- a consent screen (Google UMP) will be shown before any ad, and you will be able to change your choice at any time from within the game;
- Google may collect advertising identifiers and technical device data to serve and measure ads and to prevent fraud; without your consent, only non-personalized or limited ads will be served;
- on iOS, the first version will not use the advertising identifier (IDFA);
- see how Google uses information from partner apps.
This policy will be updated before advertising is enabled.
6. Retention
- Account and progress: as long as the account exists. After a deletion request, erased within 30 days.
- Server backups: rotated out no later than 30 days after account deletion.
- Purchase records: for the period required by accounting and legal obligations.
- Technical logs: 30 days maximum.
7. Your rights
Under the GDPR, you can request access to your data, rectification, erasure, portability, restriction of processing, or object to processing. Email contact@jonesygames.com from your account's email address, or include your username. We reply within one month.
To delete your account, follow the account deletion procedure.
You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
8. Children
Battle Maidens is not intended for children. The minimum age is the one shown on the game's App Store and Google Play listings. We do not knowingly collect data about children; if you believe we have, contact us and we will delete it.
9. Changes
We may update this policy. The last update date appears at the top of this page; for significant changes, we will notify you in the game.