1.1 Information You Provide for Login & Account Use

We collect the following personal information primarily for login, account access, and account linking:

• Email address (if you use email login)
• Discord ID and/or Discord profile name (optional)
• Rise of Kingdoms Governor ID / player ID (optional)
• Account binding information (if you choose to bind a Governor ID)

We may also collect authentication-related data (e.g., password hashes or secure login tokens) needed to keep your account secure.

1.2 Information from Social Login (Google)

If you sign in with Google, Google authenticates your login. We do not collect or store your Google password — only the unique identifier Google provides to associate your sign-in with your Hero Scrolls account.

1.3 Payments & Subscription Purchases

Subscriptions and Tokens may be purchased through Google Play, Apple App Store, or PayPal. We do not collect or store payment details. We may receive limited transaction information such as:

• Confirmation that a purchase occurred
• Transaction ID and purchase amount
• Items purchased and subscription status

1.4 Private Chat Content

If you use the private chat feature, we collect and store message content and associated metadata (timestamps, participants) to deliver the chat. Messages are automatically deleted after approximately 6 weeks.

1.5 Automatically Collected Information

When you use the Service, we may automatically collect:

1.6 Cookies & Similar Technologies

We do not use advertising cookies or third-party analytics cookies. We may use strictly necessary cookies or similar technologies to operate the Service (e.g., to keep you logged in and maintain session state). You can control cookies through your browser settings, though some features may not function properly if cookies are disabled.

1.7 In-Service Announcements

We may show in-app/website announcements about Hero Scrolls products or features. These are not third-party ads.

We use information we collect to:

• Create, administer, and secure your account
• Authenticate you (including optional Discord/Governor ID/email linking)
• Provide Subscription features and Token-related add-ons
• Provide private chat and matchmaking features
• Respond to support requests
• Prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms

Where applicable law requires a legal basis, we rely on one or more of the following:

We may share information:

• Service Providers — that help operate the Service (hosting, authentication, customer support), under confidentiality obligations
• Payment Processors/Platforms — Google Play, Apple, PayPal to complete purchases and manage chargebacks (they handle your payment details, not us)
• Legal Authorities — when required by law or to protect rights, safety, and security
• Business Transfers — in connection with a merger, acquisition, or asset sale, subject to standard protections

We may process and store information in the United States and other locations where we or our service providers operate. When required, we use appropriate safeguards for cross-border transfers.

We retain personal information for as long as needed to:

• Provide the Service and maintain your account
• Maintain Subscription status and Token balances
• Prevent fraud and keep the Service secure
• Comply with legal obligations
• Resolve disputes and enforce our agreements

If you request deletion, we will delete or anonymize your personal information unless we must retain it for legal reasons.

Depending on where you live, you may have the following rights:

7.1 Deletion Requests, Subscription Cancellation & Timeline

If you submit a deletion request while a Subscription remains active, we may pause processing until your Subscription is canceled. Once canceled, we may need up to 5 business days to process your request. After deletion, you will lose access to the Service.

Even after deletion, we may retain limited information if required for legal, tax/accounting, fraud prevention, or dispute resolution purposes.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at support@heroscroll.com and we will take appropriate steps to delete it.

The Service may contain links to or integrate with third-party services (e.g., Discord, Google, Apple, PayPal). Their privacy practices are governed by their own policies. We encourage you to review those policies before sharing information with them.

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date. Continued use of the Service after changes means you accept the updated Privacy Policy, to the extent permitted by law.

For questions or requests related to this Privacy Policy, please reach out to us:

Hero Scrolls and Hero Scrolls Ultra allow users to voluntarily bind their Ultra or Discord account to their in-game governor or player profile. You may request that we remove the active link between your Discord or Ultra account and your in-game governor profile.

In discord, you can unbind your account, and you can also unlink in with Ultra.

For security, we may need to verify that you control the Discord account, game profile, or other account associated with the request before making changes. Once verified, we will process valid deletion or unbinding requests without undue delay and within the time required by applicable privacy law.

Unbinding removes the active Discord-to-game-profile connection. Deletion requests may remove or anonymize additional personal data we control, subject to legal, security, abuse-prevention, accounting, or other valid retention requirements.