Privacy Policy
This policy explains what the game Command Base Assault (for iPhone and Android) and this website keep about you, why, and what you can do about it. The game is published by Yusuf Doğan (“we”, “us”). If you have a question, write to support@playcommandbase.com.
What we keep
Your account
- Callsign: the name you pick. Other players see it in rooms, in matches, on the ranked ladder and in friends lists.
- How you sign in:
- With an email: your email address and your password, which is stored only as a secure one-way hash, never in a form we can read.
- With Apple or Google: an identifier for your Apple or Google account that only says it's you. We don't ask Apple or Google for your name or email address, and they don't send it to us.
- Email confirmation and password resets: when you make an account with an email, we email you a link to confirm it (rated matches open once you have), and when you ask to reset your password, a one-time link to do that. We keep only a scrambled form of each link, until it's used or expires (three days, or an hour for a reset), and whether your email is confirmed.
- Sign-in sessions: tokens that keep you signed in. They are stored on your device and expire when you sign out, or after 30 days without playing.
Your games
- Matches and results: the matches you play, your side, wins and losses, your rating and place on the ranked ladder, and your statistics (such as units trained, kills and bases destroyed).
- Friends: the players you add, the requests you send and receive, and whether you are online, which your friends can see. Room invitations are delivered to a friend who is online at that moment and are not kept.
- Clans, teams and parties: the clan and team you belong to, your role in them, and the party you queue with. Their names and members are visible to other players.
- Watching: while you play a match, your friends can watch it 30 seconds behind.
- Boot camp: whether you have finished (or skipped) the training match.
- Orders in a match: what you command during a match is processed by our server to run the battle. We keep only the totals mentioned above, plus anonymous match-wide statistics used to balance the game.
Chat, voice and reports
- Text chat in a room or a match goes to the players in it and isn't stored. While a match runs, our server keeps its last lines in memory so that a report can include them; they are gone when the match ends.
- Clan and team chat is stored on our server so members can read earlier messages.
- Voice chat: the game asks for the microphone only when you first hold Talk in a match, and uses it only while you hold it. What you say goes live to your teammates through our server and is never recorded or stored.
- Reports: when you report a player, we keep the report (who, the reason, your note, and up to 20 of that player's last chat lines in the match) for a person to review.
Technical data
- Our server and the infrastructure in front of it keep short-lived technical logs (such as IP addresses, times and errors) to keep the service secure and working.
- When it starts, the app tells our server its version, your device model and operating system, your language and your time zone. We keep these on your account with when you last played, to support you and fix problems.
- The game engine, Unity, may send anonymous hardware and performance statistics (such as device model, operating system and graphics capabilities) to Unity Technologies. See Unity's privacy policy.
- Your settings (graphics quality, sound levels) stay on your device.
Adverts and the No Ads subscription (iPhone)
- An advert shows after some matches (never in your first ones, in practice or in boot camp). They come from Google AdMob, which receives what it needs to show and count them: your IP address, device and app information, and how you interact with the advert. See how Google uses information from apps that use its services.
- Where the law asks for it (the European Economic Area, the United Kingdom, Switzerland), Google's consent form asks you first how your data may be used for adverts.
- iOS then asks whether the app may track you. Only if you allow it does AdMob receive your device's advertising identifier, for adverts chosen for you; if you don't, you see adverts that aren't personalised. You can change this any time in Settings → Privacy & Security → Tracking.
- No Ads is a monthly subscription through the App Store that removes the adverts. Apple handles the payment; we only learn on your device whether the subscription is active.
We don't collect your location, contacts, photos or camera, the microphone is used only as described above, and apart from the adverts above the game contains no third-party advertising or analytics.
Why we keep it
- To give you an account and let you sign in on any device (to provide the service you asked for).
- To run matches, matchmaking, the ranked ladders, chat, clans, teams and the friends list.
- To keep the game secure, fix problems and balance it (our legitimate interest in a working, fair game).
Who else handles it
- Hetzner Online GmbH hosts our servers in Germany, in the European Union.
- Apple and Google handle signing in when you choose “Continue with Apple” or “Continue with Google”, under their own privacy policies.
- Amazon Web Services (Amazon SES, in Frankfurt, Germany) delivers the emails we send you, such as password reset links: it receives your email address and the email's content for that.
- Apple Game Center: on iPhone and Mac, if you are signed in to Game Center, the game links your Game Center player to your account and reports the achievements you earn to Apple, under Apple's privacy policy.
- Apple (App Store) and Google (Google Play) distribute the app and may handle data about downloads and purchases (including the No Ads subscription) under their own policies.
- Google AdMob serves the adverts in the iPhone app, as described above, under Google's privacy policy.
We don't sell, rent or trade your data, and we don't share it with anyone else unless the law requires us to.
How long we keep it
As long as you have an account. When you delete it, your account, callsign, sign-in details, rating, statistics, friends and memberships are removed from our database right away. Copies may remain in our nightly backups for up to 14 days, after which they are gone. Match-wide statistics that don't identify you are kept.
Your rights
Wherever you live, you can ask us for a copy of what we hold about you, to correct it, or to delete it. If you are in the European Union, the United Kingdom or Türkiye (KVKK), the law gives you these rights and more, including the right to complain to your data protection authority. To use any of them, write to support@playcommandbase.com from the email on your account, or tell us your callsign.
You can delete your account yourself at any time: in the game under Settings → Account → Delete account, or on our account deletion page.
Children
The game isn't directed at children under 13, and we don't knowingly keep data about them. If you believe a child under 13 has made an account, write to us and we will delete it.
Security
Everything between the game and our server travels encrypted (HTTPS and secure WebSockets). Passwords are stored only as one-way hashes, and our server secrets never leave the server.
Changes
If we change this policy, we will update it here and change the date at the top. If a change matters, we will also tell you in the game.
Contact
Yusuf Doğan · support@playcommandbase.com