Crossbow KingdomPrivacy policy
Last updated: November 4, 2026
This policy explains what data Crossbow Kingdom processes, why, and what your rights are.
1. Data controller
Mathéo Jorigné, 48 avenue de Comte, 33510 Andernos-les-Bains, France. Contact: support@crossbowkingdom.com.
2. An account without email
The game automatically creates an anonymous account. It doesn't ask for your name, email or a password, and doesn't access your location, contacts or photos.
3. Data we process
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Random player ID, hashed device key, login session | Run and protect your account | Performance of a contract | As long as the account exists |
| Progress: coins, upgrades, waves, runs, login dates, consent choice | Save and verify your game | Performance of a contract | As long as the account exists |
| Nickname, best wave | Public leaderboard visible to other players | Performance of a contract | As long as the account exists |
| Transfer code (hashed) | Transfer your save to another device | Performance of a contract | 15 minutes at most |
| IP address | Security and abuse limits, by our host | Legitimate interest | Not stored in the game database |
| Statistics, only if you agree: game version, platform, device model, operating system, screen size, memory, gameplay events, purchases, smoothness | Improve the game | Consent | Until you withdraw consent or delete your data |
| Messages sent to support | Reply to you | Legitimate interest | While handling your request, then 1 year at most |
Your language, sound, outfit and shot choices stay on your phone.
4. Ads and the "No Ads" purchase
This section applies once ads and the purchase are enabled in the game.
Ads are served by Unity LevelPlay (Unity Technologies) and its partners. They may process your advertising ID, IP address, device information and interactions with ads. Personalized ads are only used with your consent, collected in the game or by your operating system. You can also reset or limit your advertising ID in your phone's settings.
The "No Ads" purchase is handled by Apple or Google. We never receive your payment details, only the status of the purchase.
5. Recipients and transfers
We don't sell your data. It is accessible to the publisher and its service providers: Cloudflare, Inc. (hosting and security) and, once those features are enabled, Unity Technologies, Apple and Google. Some are based outside the European Union; these transfers rely on GDPR safeguards such as standard contractual clauses or an adequacy decision.
6. Your rights
You can request access, correction, erasure, restriction or portability of your data, object to certain processing, and withdraw consent at any time without affecting prior processing. Write to support@crossbowkingdom.com with your player ID. You can also delete your data and complain to the CNIL, the French data protection authority.
7. Children
The game is not intended for children under 13. In France, players under 15 need a parent's agreement to accept statistics or personalized ads. A parent can write to us to have their child's data erased.
8. Security
Traffic is encrypted (HTTPS), device keys and transfer codes are hashed, and access to data is restricted. Time-limited technical backups may temporarily retain deleted data.
9. Changes
We will publish any change on this page and let you know in the game if it is significant.