Village Atlas privacy policy

Publisher: Serhat Studio. Effective date: 27 October 2026.

Village and account data

We store your chosen village name, historical heritage, random account identifier, game progression, resources, construction deadlines, alliances and military actions to operate the game. Guest authentication and recovery keys are stored as hashes on the server. Keep your recovery key private.

Google sign-in

When you choose Google linking or recovery, Google provides a signed identity credential. We verify it and store its stable Google subject identifier linked to your village. The credential can contain a verified email address; we process it for sign-in and do not store your email address as a village profile field. Linking is optional.

Location and world maps

Location permission is optional and used in the foreground to help choose your village position. Exact home coordinates stay in the local save on your device and are not sent to our game server. Online regional features use a coarse one-degree map cell. Your public village name, heritage and coarse area may be visible when you opt into regional listing or warfare. Exact coordinates must be selected again after restoring on another device. Map tile providers receive network requests for viewed map areas and your network address.

Purchases

Optional consumable coin packs are sold through Google Play. Google handles payment details. Our server verifies purchase tokens, account binding, product and payment state before crediting coins. We retain hashed receipt identifiers, coin credits and refund flags to prevent duplicate fulfillment and handle refunds. We do not receive payment card numbers.

Service providers and security

Game services use Cloudflare Workers and D1. Google provides sign-in, billing and payment verification. Network requests use HTTPS. Rate limits use hashed network-address buckets. Infrastructure providers may process technical network and diagnostic information to deliver and protect their services. We do not sell personal data or use advertising SDKs in this build.

Controls, retention and deletion

You can rename the village, hide its regional listing and withdraw from warfare. Account data remains while your account is active. Delete the account in More → Account & coins → Account → Delete account, or request deletion through the contact below. Account credentials, links and progression are removed; battle history is anonymized. Minimal purchase records may remain for up to two years for fraud prevention and financial records.

Public village profiles

Your chosen village name, optional player display name, profile portrait selection and village description are visible to other players who open your profile. You can edit these fields from the village name badge. Account email, login credentials and exact GPS coordinates are not included in this public profile.

World standings and report bookmarks

World standings display public village names, heritage, era and development score. Your rank is calculated from completed server-confirmed progression; coins, saved resources and unfinished orders do not directly add points. Registered villages are ranked even when they do not publish a location. Exact home coordinates and account credentials are excluded. Report bookmarks are stored privately with your account; saving a report does not override its access permissions.

Chat, alliance notices and shared battle reports

When you send a message, we store its text, village identifier, channel and timestamp. World chat is visible to connected players; alliance chat and leader notices are restricted to current members of that alliance. Chat is not end-to-end encrypted. The latest 40 messages are shown; messages older than seven days are hidden and removed by scheduled cleanup. Leader notices remain until replaced or the alliance or author account is removed. You may remove your own messages; leaders can remove messages in their alliance channel. Removal replaces the text while retaining its timestamp to enforce posting limits. If a message is reported, its text and author identifier are copied to a private support report retained for up to 90 days. Blocking hides messages from blocked players.

Alliance members can view summaries of attacks involving current members. Detailed reports remain restricted to battle participants and supporting players unless a participant shares them with an alliance or publicly. Publicly shared reports may appear in the world battle chronicle and great-battle list; the participant can stop sharing them. These features do not reveal exact home coordinates or account credentials.

Optional Facebook recovery

When Facebook sign-in is enabled and you choose it, Meta authenticates you in its official browser flow. We request only public profile access, verify the app-scoped account identifier on the server and show the returned profile name for confirmation. We do not request friends, posts, contacts or email. The game does not receive your Facebook password or access token. The app-scoped identifier is stored only to link and restore your game account. Temporary sign-in state and display name expire after ten minutes and are removed by scheduled cleanup. Cancelling before confirmation leaves your village unchanged. Anonymous replay-prevention receipts for signed data-removal requests expire after one day. A Meta data-removal request removes the Facebook link and temporary sign-in information; it does not delete game progress linked through another recovery method. Full account deletion in the game removes all login links and the village.

Community controls

Before publishing public text, players accept the community rules. We store the accepted policy version and your blocked-player list with your account. Blocking hides public text from blocked players; it does not prevent game battles. Use Report player / text on a public village profile to flag users or content for private review. Moderators may remove violating text or restrict accounts. Community-control records are removed when the account is deleted. Read the community rules.

Problem reports

If you choose to send an in-game problem report, we store its text, category, game version, random report identifier and account identifier privately for support review. Reports do not automatically attach screenshots, logs, Google email, login credentials or GPS coordinates. Do not enter passwords, recovery keys or personal location in report text. Reports are retained for up to 90 days and removed when the account is deleted. You can also contact support by email.

Contact

For support, privacy questions and deletion requests, email tubesup9@gmail.com. Never send passwords, authentication tokens or recovery keys by email.

Account deletion information