Privacy Policy

Last updated: July 24, 2026

            Quick summary: The Throne of Draxos is a multiplayer game that respects your privacy. We collect what is needed to play (display name, games, verified purchases). Guests have no persistent profile; during play, lobby/game data is processed in Firebase. Sign-in with Google or Apple (including Hide My Email). You can access, modify, or delete your account.
        

1. Data Controller

Identity: Krethz Games
Brand: Krethz Games
Address: Spain (legal address available upon request at hello@krethzgames.com)
Contact email: hello@krethzgames.com
App: The Throne of Draxos

2. What is The Throne of Draxos?

The Throne of Draxos is a mobile multiplayer social deduction game (5-10 players) for Android and iOS devices. It's a social deduction game where you participate in space missions while trying to identify alien infiltrators.

Minimum age: This game is intended for users aged 16 and older. Users between 13 and 16 must have parental supervision.

3. What Personal Data Do We Collect?

3.1. By account type

Users with social accounts (Google Sign-In / Sign in with Apple):

Email: provided by your OAuth provider when signing in. With Apple you may choose Hide My Email (we receive an Apple relay address, not your real email)
Apple name (optional): Apple may send your full name only on the first sign-in; we do not request it again
Unique identifier (UID): generated by Firebase Authentication
Display name: chosen by you (maximum 20 characters)
Visual customization: selected avatar, avatar frames, and card frames
Account creation date

Guest users (anonymous):

Firebase Authentication creates an anonymous UID for the session; a persistent profile document in users/ is not created
While you play, lobby/game data (visible nickname, room state, private role) is processed in Firebase as in section 3.2 and deleted per the stated retention periods
You receive a randomly generated automatic name (e.g., "Stellar Pilot III")
In-app purchases and local progress may be stored on the device; uninstalling or clearing app data may remove them. Account achievements require social sign-in

3.2. Game data

Category	Data collected	Duration
Game rooms (lobby)	Room code, visible nickname, status (ready/not ready), host	~2 hours of inactivity, then automatically deleted
Active game	Public game state (missions, votes, phase), your private role (only visible to you)	Until game ends
Game recap	Result, revealed roles, participants	Temporary (available briefly after the game)
Emoji reactions	Emojis or quick phrases sent during the game	Ephemeral (last only during active session)

3.3. Monetization and progress

Registered accounts (on our servers):

In-app purchases: product ID, platform (Android/iOS), date, verification status / receipt token needed to validate and restore
Virtual currency: Draxos Credits (earned by playing, ads, or achievements; not sold as IAP)
Unlocked cosmetics and expansions: including packs and premium reactions
Achievements: progress toward game objectives, granted credits
Advertising: ad removal preference (if you purchased the option)

Guests: purchases and credits may be stored only on the device until you sign in with Google/Apple.

3.4. Local technical data (your device)

Audio and visual preferences (music, sound effects, animations)
Selected language (Spanish/English)
Last visited room code (for quick reconnection)
Local entitlements/purchase state (especially as a guest)
Ad consent preferences (UMP), when applicable

This local data does not form a social profile on our servers; ad consent is also handled with Google under its policy.

4. Purpose and Legal Basis of Processing

Purpose	Legal basis (GDPR)
Manage your account and profile	Contract performance (Terms and Conditions)
Allow you to play in multiplayer rooms	Contract performance
Process in-app purchases and manage unlockable content	Contract performance
Show advertising (including personalized ads if you consent)	Consent via UMP / Google form (where required) and AdMob legitimate interest per its policy; you may revoke or limit personalization
Prevent fraud and ensure service security	Legitimate interest
Comply with legal obligations (e.g., invoice retention)	Legal obligation

5. Who Do We Share Your Data With?

We do not sell or rent your personal data to third parties. We only share it with the following service providers necessary for the app's operation:

5.1. Infrastructure providers

Google Firebase (Google LLC, USA)
- Authentication (login)
- Cloud Firestore (database for profiles, rooms, games)
- Realtime Database (real-time emoji reactions)
- Cloud Functions (game logic, purchase validation, achievements)
- Storage region: europe-west1 (Belgium)
- Firebase Privacy Policy
Expo (Expo Inc., USA)
- OTA (over-the-air) app updates
- Expo Privacy Policy

5.2. Payment and login providers

Google Play Billing / Apple App Store: in-app purchase processing (we don't have access to your payment details)
Google Sign-In: OAuth authentication (we receive email and, if authorized, Google profile name)
Sign in with Apple: OAuth authentication on iOS. We may receive an email (real or Hide My Email relay) and, only on first login, the name Apple provides. We do not store Apple passwords

5.3. Advertising

Google AdMob (Google LLC)
- Displays banner, interstitial, and rewarded ads
- Collects technical data (advertising ID, IP, interactions) according to its policy
- Where required by law, we use the UMP consent form before personalized ads
- You can disable or limit personalization in your device settings or the ad privacy form
- AdMob Privacy Policy

6. International Transfers

Some of our providers (Google, Expo) have servers in the United States and other countries outside the European Economic Area. These transfers are made under:

Standard Contractual Clauses (SCC) from the European Commission
Adequacy decisions where applicable
EU-US Data Privacy Framework (Google is certified)

Whenever possible, data is stored on European servers (our Firebase uses the europe-west1 region).

7. How Long Do We Keep Your Data?

Data type	Retention period
Profile and account (registered users)	Until you request deletion or prolonged inactivity (3+ years without use)
Game rooms	~2 hours of inactivity
Active game state	Until game ends
Game recaps	Temporary (hours)
Purchases and invoices	Legal minimum (generally 4-6 years per tax regulations)
Security logs (Firebase)	30-90 days (per Google policy)

8. Your Rights (GDPR)

If you reside in the European Union, you have the following rights:

Access: obtain a copy of your personal data
Rectification: correct inaccurate data (you can edit your name in Settings → Profile)
Erasure ("right to be forgotten"): delete your account and associated data
Restriction of processing: request that we pause the use of certain data
Data portability: receive your data in a structured format (JSON)
Objection: object to processing based on legitimate interest
Withdrawal of consent: withdraw consent for personalized advertising
Not to be subject to automated decisions: we do not perform profiling or significant automated decisions

How to exercise your rights?
Send an email to hello@krethzgames.com with the subject "GDPR Request - Draxos". We will respond within a maximum of 30 days.

Complaint to authority:
You have the right to lodge a complaint with your local data protection authority if you believe we have not properly addressed your rights.

9. Account and Data Deletion

You can request complete deletion of your account at any time:

Detailed instructions: Delete account

Send an email to hello@krethzgames.com from the email associated with your account with the subject "Delete account - Draxos"
We will confirm your identity and process the deletion within 7 business days
We will delete:
- Your profile (name, email, avatars)
- Achievement history and progress
- Recorded purchases (except anonymous invoice required by tax law)
We will not delete:
- Economic transaction records (legal accounting obligation)
- Anonymous security logs (retained by Firebase per its policy)

            Note for guest users: You have no persistent social profile. Room/game data is deleted per the retention periods in section 7. To remove local data (on-device purchases/credits), uninstall the app or clear the app's storage.
        

10. Minors

The Throne of Draxos is intended for users aged 16 and older. Users between 13 and 16 may use the app with parental supervision.

If you are a parent/guardian and discover that a child under 13 has provided data without your consent, contact us immediately to delete the account.

We do not intentionally collect data from children under 13. If we detect an account from a child under that age, we will delete it.

11. Data Security

We implement technical and organizational measures to protect your data:

Encryption: HTTPS/TLS connections for all communications
Firebase Security Rules: granular access controls (e.g., only you can see your private role in a game)
Secure authentication: delegated to trusted OAuth providers (Google, Apple)
Data separation: roles and teams are never exposed in public documents
Cloud Functions: critical logic (purchases, achievements) runs on the server, not the client

However, no system is 100% secure. We recommend keeping your device and apps updated.

12. Changes to This Policy

We may update this Privacy Policy occasionally to reflect changes to the app or applicable regulations.

We will notify you of significant changes through:

Prominent notice in the app when logging in
Email to your registered address (users with social accounts)

We recommend reviewing this page periodically. The "Last updated" date at the top indicates when it was last modified.

13. Links to Third-Party Policies

14. Contact

For any questions about this Privacy Policy or the processing of your personal data:

Email: hello@krethzgames.com
App: The Throne of Draxos
Developer: Krethz Games
Website: www.krethzgames.com