RansomForge, LLC ("we," "our," or "us") values your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices when you use any RansomForge game or service (together, the "Services").
This Policy covers all RansomForge titles and the accounts behind them, including:
- Hero Survival, on Android and Windows PC
- Castle Defender
- Any RansomForge website or service that links to this Policy, including https://ransomforge.com
Where a section applies to only some of the Services, it says so.
1. Information We Collect
A. Information You Provide
Depending on which title you play and how you sign in, we may collect:
- Email address
- Display name
- Authentication details (for example, password credentials, where a title offers password sign-in)
- Support or account communications
If you use third-party sign-in (such as Google), we receive basic profile/account identifiers from that provider — a provider account identifier, and, subject to the permissions you grant, your name and email address. Hero Survival uses Google sign-in only; on Android this runs through Android's Credential Manager, and on Windows through your web browser. We never receive or store your Google password.
B. Security and Authentication Data
To secure accounts, we may store:
- Password hashes (not plaintext passwords)
- Multi-factor authentication data (such as TOTP secret status)
- Hashed authentication/verification/reset token records
- Email verification status
- A session token held on your device so you are not asked to sign in every launch
C. Gameplay and Service Data
We may collect data needed to operate gameplay and account features, such as:
- Match outcomes, placements, and player ratings
- Queue/party/lobby state
- In-game progression, purchases made with in-game currency, and similar match records
- Account status and region settings
D. Technical Data
We may automatically collect limited technical information, such as:
- IP address and request metadata
- The game's version and build identifier, platform, and device type
- Approximate usage logs for reliability and abuse prevention
E. What We Do Not Collect
The Services do not serve advertising and do not embed third-party advertising or analytics SDKs. We do not collect your contacts, photos, precise location, microphone, or camera data.
2. How We Use Information
We use information to:
- Provide and maintain the Services
- Authenticate users and secure accounts
- Match players together and record match results
- Send transactional emails (for example, verification and password reset links)
- Detect, prevent, and investigate abuse, fraud, and security incidents
- Enforce our Terms and legal obligations
- Improve features, stability, and performance
3. Legal Bases (Where Required)
Where applicable law requires, we process personal data based on one or more of the following:
- Performance of a contract (providing the Services)
- Legitimate interests (security, fraud prevention, product improvement)
- Compliance with legal obligations
- Consent (where specifically requested)
4. How We Share Information
We do not sell personal information.
We may share information:
- With service providers who help us operate the Services (for example, hosting, email delivery, authentication infrastructure)
- If required by law, legal process, or governmental request
- To protect rights, safety, and security of users, us, or others
- In connection with a merger, acquisition, financing, or asset transfer
Other players may see your display name and your results in matches you play with them.
5. Data Retention
We retain personal data only as long as reasonably necessary for the purposes described in this Policy, including legal, accounting, security, and operational requirements.
Retention may vary by data type. For example, certain authentication tokens are designed to expire automatically, while account records may be retained while your account remains active and for a reasonable period thereafter.
6. Security
We use reasonable technical and organizational safeguards designed to protect personal information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your Choices and Rights
Depending on your location, you may have rights to:
- Access personal data
- Correct inaccurate data
- Delete personal data
- Restrict or object to certain processing
- Request data portability
- Withdraw consent where processing is based on consent
To exercise these rights, including deletion of your account and its associated data, contact us at support@ransomforge.com. We may need to verify your identity before responding.
You can also stop the Services collecting further data at any time by signing out and uninstalling the game.
8. Children's Privacy
The Services are not directed to children under 13 (or older age where required by local law). If you believe a child provided personal information in violation of this Policy, contact us so we can take appropriate action.
9. International Transfers
If you access the Services from outside the country where our systems are located, your information may be transferred to and processed in other jurisdictions that may have different data protection laws.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If material changes are made, we will post the updated Policy with a new effective date and may provide additional notice where required.
11. Contact Us
For privacy questions or requests, contact:
RansomForge, LLC
1659 HW 46 W STE 115 PMB 239
New Braunfels Texas 78132
United States
support@ransomforge.com