01Who we are

During the beta, the Game is operated by Chongqing Hongchuangda Technology Co., Ltd. (registered in Chongqing, People’s Republic of China; “we”) under the Tanghatoya brand. We are the controller of the personal information described here.

For privacy questions or requests, email [email protected].

02At a glance

03What we collect and why

3.1 Anonymous usage data (telemetry)

Contents: a random install ID generated on your device on first use (32 hex characters, not tied to your hardware), a random session ID generated at each launch, and the event name and time. There are only four events:

• Game start: platform, game version, interface language;
• Battle start: level, mode (campaign / endless / co-op), hero used, ascension levels;
• Battle end: level, mode, outcome (won / lost / quit), wave reached, battle duration;
• Purchase: product ID.

The server also records when it received the data. Telemetry does not include IP addresses, device identifiers, accounts or names; the server uses your IP address only briefly in memory for rate limiting and does not write it into telemetry data.

Purpose: measuring retention and finding where new players get stuck and which waves are hardest, so we can tune difficulty and fix problems.

Switch: Settings → “Send anonymous usage data”. We tell you about it on first launch; for players in the European Economic Area, the UK and Switzerland it is off by default and you must turn it on yourself. Turning it off stops collection immediately and deletes any unsent data on your device.

3.2 Crash and error reports

Contents: the error message and a summary of the script call stack, game version, operating system and version, device model, time of the error, and the random install ID above. No save contents or personal information.

Reports go to our own server — we do not use any third-party crash reporting service — and are controlled by the same “Send anonymous usage data” switch. Purpose: finding and fixing crashes.

3.3 Leaderboard, nickname and mail

When you play single-player Endless on a campaign map (M1–M4), the Game automatically submits your result to the leaderboard server every 10 waves and at the end of the run. Without a connection, results are queued on your device and sent later.

Identity: on your first submission (or when you first set a nickname), your device randomly generates a player ID and a secret key and stores them locally. The server stores only a SHA-256 hash of the key, used to confirm later submissions come from the same device. The player ID is unrelated to the telemetry install ID.

Each submission contains: player ID, run ID, map, rules version, Endless waves completed, battle time, remaining base HP, hero used and its level, number of wave retries, client version, and the complete action log of the run (every in-game action you took and when, used to replay and verify the score; it contains nothing from outside the Game).

The server also records: registration time, your nickname with the time it was set and its moderation result, nickname changes this season, titles earned, any enforcement status, and official mail together with whether your device has acknowledged it.

Shown publicly: nickname (or “PILOT-” plus the first 4 characters of your player ID if none is set), title, waves, time, remaining HP, hero and level, retries, per-map results and verification status. Your full player ID is not shown.

Purpose: ranking, replay verification against cheating, delivering season rewards and official notices through the in-game mailbox, and handling rule violations.

The leaderboard server uses IP addresses only in memory to limit request rates and bulk registrations; they are not written into leaderboard data.

3.4 Nickname moderation

When you set a nickname, it is first checked by local rules (format, impersonating staff, banned words) and then by a content moderation model for insults or hate. The moderation request is forwarded through our own relay service located in Hong Kong, China to a model provider offering an OpenAI-compatible API. Only the nickname text is sent — no player ID, IP address or other information. Moderation results are cached by nickname in server memory and cleared when the service restarts.

3.5 Co-op

When you create or join a room, your device exchanges game actions with your teammates through our relay server in Japan. The relay only orders and forwards actions and compares state checksums; it does not store match contents, and room data is cleared from memory when the room ends. To diagnose beta sync issues, the server keeps in memory a list of recent “desync” events (room, time and checksums — no personal information). The relay uses IP addresses in memory to limit connections per source; in unusual situations (for example a connection dropped for being too slow) it writes the IP address to the server’s operational log.

3.6 Save backup and transfer code (when released)

This feature is still in development. Once released, your encrypted save (progress, Crystal and item balances, heroes, etc.) is uploaded to our server in Japan only when you choose to create a transfer code, and is linked to your leaderboard player ID; entering the code on a new device restores it. Details will be explained in the Game when the feature launches.

3.7 Purchases

In-app purchases are processed by the Apple App Store or Google Play. We never receive your name, card or billing details. To deliver items correctly and avoid duplicate delivery, the Game records the transaction ID and product ID on your device.

3.8 Data that stays on your device

Your saves, Crystal and item balances, heroes and talents, settings, leaderboard identity file, telemetry ID and local run logs (the latest 30 by default) are stored only on your device. Local run logs are never uploaded automatically; we only see them if you send them to us. Uninstalling the Game deletes this data (whether your system backups include it depends on your device settings).

3.9 When you contact us

Your email address and message, used only to reply to and handle your request.

3.10 This website

This website is a static site with no cookies, analytics or tracking. It is hosted on Cloudflare Pages; as the host, Cloudflare processes visitors’ IP addresses and similar connection data for delivery and security.

04What we do not collect

We do not collect your name, phone number, contacts, photos, precise or approximate location, advertising identifiers (IDFA / GAID), or hardware identifiers such as serial numbers. We only learn your email address if you write to us.

The Game contains no ads or advertising SDKs, does not track you across apps or websites, does not sell, rent or trade personal information, and does not use data for targeted advertising.

05Service providers

We require these providers to process data only to deliver their service. Apple and Google process your payment and account information as independent controllers under their own privacy policies.

06International transfers

Our servers are in Tokyo, Japan; nickname moderation is relayed through Hong Kong, China, and the model provider may be located elsewhere; the operator is based in China. Your data may therefore be processed outside your country or region. We transfer only the minimum listed above, always encrypted with TLS.

For data from the EEA, the UK or Switzerland: Japan is covered by an adequacy decision of the European Commission; for transfers elsewhere we use appropriate safeguards such as Standard Contractual Clauses where required.

07How long we keep data

08Your rights

You can ask to access the information we hold about you and receive a copy, correct it (you can change your nickname in the Game), delete it, withdraw consent (turn off “Send anonymous usage data” at any time), object to or restrict processing, and receive it in a portable format.

How: email [email protected] with the subject “Privacy request” and include the player ID shown in the Game (leaderboard screen). If you cannot see the full ID, give us your nickname, the maps you ranked on and roughly when, and we will match it with you. To protect you from impersonation we may ask you to help confirm your identity. We reply within 30 days.

Two things to know:

• Telemetry and crash data are linked only to a random install ID and cannot be matched to you personally, so we usually cannot look them up per person; turning the switch off stops new data, and reinstalling generates a new ID.
• After leaderboard data is deleted, your scores are removed from the boards and undelivered season rewards can no longer be sent. If your device still holds the old identity file and submits again, the server registers you as a new player under the same player ID.

You may also complain to the data protection authority where you live.

09Children and minors

The Game is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has given us information, contact us and we will delete it. Where local law sets a higher age of consent (for example 16 in some EEA countries), that age applies.

Minors must have a parent’s or guardian’s permission before making in-app purchases.

10Players in the EEA, UK and Switzerland (GDPR)

The controller is Chongqing Hongchuangda Technology Co., Ltd. Our legal bases are:

• Contract: features you choose to use — leaderboard, mail, co-op, transfer codes — and delivering in-app purchases;
• Legitimate interests: anti-cheat verification, nickname moderation and server security logs, for fair play and community safety, using only the minimum data needed;
• Consent: telemetry and crash reports (off by default in these regions; turning them on is your consent, which you can withdraw at any time);
• Legal obligation: transaction records the law requires us to keep.

You have the rights listed in section 08 and may complain to the supervisory authority of your member state. We have not appointed a representative in the EU or the UK; please contact us directly at the email above.

11Players in Japan (APPI)

Purposes of use are set out in section 03. Security measures: TLS encryption for all communication; leaderboard keys stored only as hashes; admin interfaces reachable only on the server itself and protected by certificates and tokens; least-privilege access; storage quotas and periodic clean-up.

Provision to third parties in foreign countries: nickname text is provided to our relay in Hong Kong, China and to the model provider; the operator is based in China. Personal information protection systems differ between countries and regions; you can email us to request information about them.

You can use the email above to request disclosure, correction, suspension of use or deletion of retained personal data. The operator’s address and the name of its representative are available on request.

12Changes to this policy

We may update this policy. We will change the “Last updated” date on this page and, for significant changes, notify you in advance through an in-game notice or the mailbox.

13Contact

[email protected] (Chongqing Hongchuangda Technology Co., Ltd. · Tanghatoya)