1. Information we collect
Information you provide
- Account information. If you create or link an account, we may receive your name, email address, account identifier, and profile image from the sign-in provider you choose.
- Player content. We process your character name, profile settings, chat messages, support messages, and other content you submit through the Services.
- Optional connected-service data. If you choose to connect a health or activity service, we process only the data types shown in the connection flow and permitted by you. You can disconnect a service at any time.
Information collected when you play
- Gameplay and progress. This includes skills, training sessions, XP, levels, inventory, rewards, world position, interactions, and multiplayer activity.
- Device and technical data. We may collect app version, device or browser type, operating system, language, approximate location derived from network information, crash reports, performance measurements, and network diagnostics.
- Usage data. We may collect information about the features you use, session timing, and actions needed to operate, secure, and improve the Services.
2. Google account and Google Health data
Sign in with Google. If you choose Sign in with Google, Towerscape receives your Google account identifier, name, email address, and profile image. We use this information only to authenticate you, create or locate your Towerscape account, protect the Services, and display your account profile.
Optional Google Health connection. Google Health is optional and separate from Sign in with Google. If you affirmatively choose to connect it, Towerscape requests read-only access to:
- Activity and fitness data, including step totals, recorded exercises, exercise types and names, timestamps, durations, and steps associated with activity intervals; and
- Sleep data, including sleep-session start and end times, duration, and whether a session is reported as a nap.
We use Google Health data only to show your daily steps, exercise, and sleep history inside Towerscape; calculate the Fitness or Agility XP earned from your steps; and prevent an active Towerscape training session from continuing through a sleep period reported by Google Health. Google Health data is not visible to other players.
Storage and retention. OAuth access and refresh tokens, your Google Health connection identifier, and daily step totals and derived gameplay rewards are stored in our server-side Google Cloud and Firebase systems while the connection is active. Detailed imported activity and sleep records are held in memory in your current browser tab and are fetched again as needed; Towerscape does not persist those detailed records in unencrypted browser storage. Google Cloud and Firebase protect stored server data with encryption in transit and at rest.
Sharing and human access. Google Health data is processed by Google Cloud and Firebase only as necessary to provide Towerscape's visible health and gameplay features. We do not send Google Health data to advertising, analytics, data-broker, credit, lending, or AI-model-training services. We do not permit personnel to read Google Health data except with your explicit consent for a specific support request, when necessary for security or abuse investigation, when required by law, or when the data is aggregated and anonymized for lawful internal operations.
Deletion and disconnection. You can disconnect Google Health from the Dailies settings menu. Disconnecting revokes the Google OAuth token, deletes the server-side Google Health connection and its derived step ledger, and clears Google Health data cached by Towerscape in the browser. You may also request deletion of your account and related data by emailing privacy@towerscape.app.
Limited Use. Towerscape's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and to the Google Health API Developer and User Data Policy. These restrictions apply to raw Google user data and to data aggregated, anonymized, or derived from it. We do not sell Google user data; use or transfer it for advertising, retargeting, creditworthiness, or lending; or transfer it as part of a merger, acquisition, or sale of assets without first obtaining the user's explicit prior consent. Our employees, agents, contractors, and successors are required to comply with these restrictions.
3. How we use information
We use information to:
- provide, personalize, and maintain the Services;
- save progress, calculate rewards, and support multiplayer features;
- authenticate accounts and keep the Services secure;
- respond to support requests and communicate service updates;
- diagnose errors, monitor performance, and improve features;
- enforce our Terms of Service and prevent fraud or abuse; and
- comply with legal obligations.
5. Your choices and rights
You may update certain profile information in the Services, disconnect optional integrations, or stop using the Services. Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, or to object to or restrict certain processing.
To request account or data deletion, contact privacy@towerscape.app. We may need to verify your identity before completing a request. Some information may be retained when required by law or for legitimate security, fraud-prevention, dispute-resolution, or recordkeeping purposes.
6. Retention and security
We retain information for as long as reasonably necessary to provide the Services, fulfill the purposes described above, and meet legal obligations. Retention periods vary by the type of information and why it was collected.
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is completely secure, and we cannot guarantee absolute security.
7. Children’s privacy
The Services are not directed to children under 13, or the minimum age required by local law. We do not knowingly collect personal information from children below that age. If you believe a child has provided personal information, contact us so we can take appropriate action.
8. International data transfers
Towerscape and its service providers may process information in countries other than where you live. Where required, we use appropriate safeguards for international transfers.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here and revise the effective date. If changes are material, we will provide additional notice when required by law.
10. Contact us
Questions or requests about privacy can be sent to privacy@towerscape.app.