1. Data controller

The controller is CS-Nørskov Consulting, CVR 32507646, Denmark. Registered address: [PLACEHOLDER]. Privacy contact: [PLACEHOLDER]. General contact: [PLACEHOLDER].

2. Data we collect

• Account data: user ID, email address for registered accounts, authentication method, display name and avatar emoji.
• Gameplay and social data: matches, guesses, results, timing, trophies, streaks, preferred language, friendships, invitations, requests and in-app notifications.
• Subscription and advertising data: Premium status, product and entitlement identifiers, subscription period and expiry, purchase-event status, and whether a rewarded advertisement was completed. Apple, Google and RevenueCat process payment details; we do not receive full card details.
• Technical data: session and security information, device/runtime signals needed to provide mobile features, and error or request information necessary to keep the service reliable and secure.

3. Local storage and similar technology

Logomachia uses device storage for authentication sessions, language, visual preferences, tile settings, wrong-letter preferences, and dates used to avoid scheduling duplicate daily or streak reminders. This storage is necessary to remember your choices and keep you signed in. The app does not currently use a third-party web analytics tool.

4. Analytics

We record limited first-party events in our backend, including completed rewarded advertisements and Premium activations, to understand the subscription funnel and operate the free-battle allowance. These records are not used to build third-party advertising profiles.

5. Notifications

If supported and permitted on your device, Logomachia schedules local reminders for Daily Battles, streaks and friend activity. These notifications are generated on your device through the Despia native runtime. You can control notification permission in your device settings.

6. Payments, subscriptions and advertisements

Purchases are made through Apple App Store or Google Play and subscription status is managed with RevenueCat. These providers process identifiers and transaction information under their own privacy terms. The mobile app uses Google AdMob to display interstitial and rewarded advertisements to eligible non-Premium players. Information processed by an advertising platform may include device, advertising, interaction and approximate-location signals according to your permissions and the platform's own notices and choices.

7. Why we process data

• Contract: to create accounts, run battles, maintain progress, provide social features and deliver Premium.
• Legitimate interests: to secure, troubleshoot and improve the service, prevent cheating and fraud, and understand feature and subscription performance.
• Legal obligation: to comply with accounting, tax, consumer, law-enforcement and other legal requirements.
• Consent: where required for notifications, advertising technology or another optional feature. You may withdraw consent through the relevant device or platform setting without affecting earlier lawful processing.

8. Service providers and sharing

We share data only as needed to operate Logomachia, process purchases, display advertisements, comply with law, protect rights or complete a business transaction with appropriate safeguards. Current providers include Lovable Cloud for backend, authentication and data hosting; Despia for the native app runtime; RevenueCat for subscription management; Apple and Google for sign-in and/or store billing; Microsoft for optional sign-in; Google AdMob for advertisements; and Google Fonts for typeface delivery. We do not sell your personal data.

9. International transfers

Some providers may process data outside Denmark or the European Economic Area. Where GDPR requires it, transfers are protected by an adequacy decision, Standard Contractual Clauses or another lawful safeguard. Specific processing locations and safeguards: [PLACEHOLDER].

10. Retention

Account and gameplay data is kept while your account is active and then deleted or anonymised when no longer necessary. Specific retention periods for security logs, analytics records, support correspondence and legally required accounting records are [PLACEHOLDER]. We may retain limited information where required by law, to prevent fraud, resolve disputes or establish legal claims.

11. Security

We use appropriate technical and organisational measures designed to protect personal data, including authenticated access controls and restricted administrative access. No system can guarantee absolute security.

12. Your GDPR rights

Subject to applicable conditions, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent at any time where processing relies on consent. You may also complain to Datatilsynet, the Danish Data Protection Agency, or your local supervisory authority. Contact [PLACEHOLDER] to exercise your rights.

13. Account and data deletion

Use Account & Data to permanently delete your account and associated profile, progress, social connections, battle history and notifications. Active paid subscribers must first cancel and wait until their subscription ends. Limited records may be retained only where legally required or necessary for legal claims, security or fraud prevention.

14. Minimum age

Logomachia is intended for users aged 13 and above, or the higher age of digital consent in your country (up to 16 in some EU/EEA countries). Before an account is created we ask for your country and date of birth. The date of birth is only checked on your device and is not sent to or stored by us; we store only that the age check was passed and the selected country. If you are below the required age, no account is created (and any account just created through a sign-in provider is deleted immediately), and a device-only marker prevents immediate retries for 24 hours. Guest play does not require an account. A parent or guardian who believes an underage user has provided personal data may contact us to request deletion.

15. Changes and contact

We may update this policy as the service or law changes. Material changes will be communicated as required, and the effective date will be updated. Questions may be sent to [PLACEHOLDER] or by post to [PLACEHOLDER].