Privacy policy
Last updated: 15 November 2026
This policy explains what RebornVale, the online game, keeps about you, why, who else sees it, and what you can ask us to do with it. It covers the game on Steam, the App Store and Google Play, and its servers.
Who we are
RebornVale is made by Adrian Feito Blazquez, trading as AFB Games, C. de San Pedro, 8, 28330 San Martin de la Vega (Madrid), Spain ("we"). We decide how your data is used. Write to us about privacy at shockp.developer@icloud.com.
What we keep, and why
| What | Why we keep it | Legal basis |
|---|---|---|
| Your sign-in identity: the account number Steam, Google or Apple gives us. With Steam, your Steam name is offered as your hero's first name; you can change it before you play. We never receive your email address, your real name or your password from them | To know it is you and give you your heroes | Contract: we need it to provide the game |
| Your heroes and progress: hero names, classes, levels, items, materials, talents, Rubies and Soul Shards, and their history | To run the game and keep your progress | Contract |
| Guilds: membership, ranks, the guild's message, emblems you build or paint, the guild log and bank | To run guilds | Contract |
| Events and leaderboards: your scores and when you reached them | To run weekly events and the leaderboards | Contract |
| Trades and the market: who traded what with whom and when, your listings and sales | To complete trades, settle disputes and stop fraud | Contract, and our legitimate interest in a fair game |
| Chat: messages pass through our server to the players they are for and are not stored. If someone reports a message, we keep that message, the lines just before it and both players' names. We also keep the players you blocked, and any mute or ban | To protect players and act on reports, as the app stores require | Our legitimate interest in a safe game |
| Bug reports, when you send one from the game: the kind of problem and what you write (up to 1,000 characters), with what the game adds to help us find it: your account, your hero and its name, the game's version, your device model and its system, the zone and its layer, and the time on your device and when we received it. Your internet address only counts how many reports you send, and is not kept. Feedback you send through Google Play or TestFlight goes to Google or Apple instead, under their privacy policies | To find and fix the problem | Our legitimate interest in a working game |
| Purchases, once buying opens: which Ruby pack, Moon Pass or Bronze, Silver or Gold Pass, when, the store's order number and, for a Pass, which hero holds or used it, so a refund can take it back. The store takes the payment; we never see your card or bank details | To deliver what you bought and keep the records tax law requires | Contract and legal obligation |
| Connection data: your device's internet (IP) address while you play. Our server's log records the address of a connection it refuses | To run the connection and protect the server from abuse | Our legitimate interest in security |
| On your device: your settings and the pass that keeps you signed in are saved on your device. Only the pass is ever sent to us, to sign you in | To remember your settings and sign-in | Contract |
We do not use your data for advertising, we do not sell it, and the game has no ads, analytics or tracking. It sends nothing to the engine's maker, Unity.
What other players see
Your hero's name, look, class and level; your guild, its emblem and message; what you say in chat, with a bronze, silver or gold badge while one of your Passes is running; and your place on the leaderboards. Leaderboards show the top 100 heroes and guilds to every player.
Who else handles your data
- Oracle hosts our servers in Frankfurt, Germany, under a data processing agreement. Your game data stays in the EU.
- Backblaze keeps an encrypted copy of our backups for 30 days. The copy is encrypted on our server before it is sent, so Backblaze cannot read it.
- Google (Gmail) carries each bug report you send from the game to our team by email, and holds that email in our team's mailbox.
- Valve (Steam), Google and Apple sign you in and take payments. They do so under their own privacy policies, as you use their accounts.
- Authorities, only when the law requires us to share it.
Valve, Google, Apple, Oracle and Backblaze are US companies. Where data leaves the EU, it moves under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
- Your account and heroes: while your account exists. When you delete it, we remove it from the game within 30 days and from our backups within 30 days after that.
- Chat reports: 90 days after we deal with them. A mute or ban is kept as long as it lasts.
- Bug reports: 90 days after you send them, or sooner when you delete that hero or your account. The emailed copy in our team's mailbox is deleted by hand within 90 days of arriving.
- Trade records: 90 days. Your market listings until they are sold, collected or taken down; past sale prices are kept without any player's name, for the market's price guide.
- Purchase records: as long as Spanish tax and commercial law requires, up to six years.
- Server logs with IP addresses: 30 days. Backups: 30 days.
- Everything from before the beta, the test heroes, guilds and leaderboards, is deleted when the beta opens, and everyone starts fresh. Heroes, items and purchases made during the beta carry into the full release.
How we protect it
Our servers are locked to our administrator. Your data is backed up and the backups are kept private.
Your rights
You can ask us to show you, correct, delete or hand you a copy of your data, or to restrict or stop using it; write to shockp.developer@icloud.com. You can ask for your account to be deleted, without the game, at rebornvale.com/delete-account. If you think we have handled your data wrongly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or to the one where you live.
Children
RebornVale is for players aged 13 and over. Below the age of digital consent where you live, which is 14 in Spain and up to 16 in other EU countries, you need a parent's or guardian's permission. If you think a child has given us data without that permission, write to us and we will delete it.
Changes
If we change this policy, we will tell you in the game before the change takes effect, and the date above will change.