Quick links: Information we handle · Chat privacy · Retention · Account and data deletion · Audience and children · Contact
1. Who we are
Aeterna Invicta is a collectible card game operated by ATN DEV, referred to in this policy as “we,” “us,” or “our.” This policy explains how we handle personal information when you use the game on Android, iOS, or the web at aeternainvicta.com, and its related account, chat, and support services. The Android and iOS apps load the same game service as the website, so this policy applies equally to all of them.
For privacy questions or requests, contact aeternainvicta.ccg@gmail.com.
2. Information we handle
The following table describes the information we handle, its source, and its purpose.
| Category | Information and source | Purpose |
|---|---|---|
| Account information | For registered accounts: the username and password you choose. We store only a one-way (bcrypt) hash of your password, never the password itself. We also store account creation and last sign-in times and account type (guest or registered). For guest play, the game assigns a random guest name. Sign-in sessions use a random token; our servers store only a hashed copy. We do not ask for your email address, real name, or phone number to play, and we do not offer third-party sign-in. | Create and manage accounts, authenticate players, keep you signed in, and respond to account requests. |
| Game information | Generated as you play: card collection and foils, decks, in-game Currency and marketplace purchases made with Currency, daily tasks, achievements, win/loss/draw records (against the CPU, against players, and in Draft), Draft and Adventure progress, cosmetic choices (portrait, board, name color), settings (such as language and chat preference), your current in-game activity and last-seen time, and logs of completed matches (players, decks used, actions taken, and results). | Save progress and provide gameplay, matchmaking, rankings, profiles, replays, and other game features; investigate bugs and cheating. |
| Chat and community information | If you opt in to chat: the messages you send (up to 280 characters each), your username, your name color, and the time sent. Also your chat opt-in status, any chat mute applied to your account, the players you block, and player reports you submit or that are submitted about you (reporter, reported player, category, details, where the report was made, match ID, the reported player’s recent chat messages, and review status). | Deliver chat, apply blocks, investigate reports, and enforce community rules. |
| Support information | Information you send us in support or privacy requests, including your email address, request details, your username if you are signed in, and attachments you choose to provide. The in-game contact form records a ticket on our server and prepares an email that you send from your own email provider. | Answer questions, investigate problems, and process privacy requests. |
| Purchases | None. The game does not currently sell anything for real money, and we do not use Google Play Billing, the App Store, or any other payment provider. Currency, cards, and cosmetics are earned through play. | Not applicable. |
| Technical and security information | Collected automatically when you register, sign in, or connect: your IP address, the approximate location derived from it (city, region, and country), whether you are using the Android app, the iOS app, or a web browser (from the app or your browser’s user agent), and connection and sign-in times. We do not collect advertising IDs, device IDs, or installation IDs. | Operate the service, troubleshoot connections, detect account sharing or abuse, and protect accounts and game integrity. |
| Analytics and diagnostics | None. The game contains no analytics, crash-reporting, or advertising SDKs. Our own server logs (described above) are the only operational records we keep. | Not applicable. |
| Age or region information | We do not ask for your age or birth date. The only region information we hold is the approximate location derived from your IP address and your chosen language. | Security and abuse prevention (location) and showing the game in your language. |
Required and optional information. To play as a guest, no information is required from you; we still receive your IP address, approximate location, and platform when you connect. To create a registered account, a username and password are required. Optional information includes chat messages (only if you turn on chat in Settings), player reports, and anything you send in support requests, including your email address. If you decline optional collection, you can still play; you just won’t be able to use chat, or receive a reply to a support request without giving an email address.
Other collection. The game has no advertising, voice chat, image uploads, or push notifications, and it does not read your contacts, photos, files, or precise location. The game and our website do not use cookies or third-party trackers. On your device, the game uses browser local storage to remember your sign-in session, language, audio settings, and which server messages you have seen; clearing your browser or app data removes them. Links to external services, such as our Discord community, open those services, and their own privacy policies apply.
3. How we use information
We use information for the purposes stated above, including providing the game, managing accounts, communicating about support or service matters, maintaining security, moderating chat and player conduct, and meeting applicable legal obligations. We do not use your information for automated decisions that have legal or similarly significant effects on you.
Advertising and marketing: The game contains no advertising SDKs or advertising partners, and we do not send marketing messages. Some post-match screens offer an optional “Watch Advertisement” reward; at present, choosing it grants the reward directly, no advertisement is shown, and no information is sent to any advertising provider. If we add advertising or real-money purchases in the future, we will update this policy and our Google Play Data safety declaration before they launch, and ask for consent where required.
We do not sell personal and sensitive user data.
4. Who receives information
We disclose information to the following recipients where needed for the stated purposes:
-
Service providers:
- Cloud hosting provider (United States): runs our game server and PostgreSQL database, and therefore stores all of the information described in this policy, to operate the game.
- ip-api.com (IP geolocation): receives your IP address only, never your username or other account details, and returns an approximate city, region, and country, used for security.
- Google (Gmail): hosts our support mailbox. It receives the emails you send us, and our server’s hourly operational summaries, which list new accounts and sign-ins (username, platform, and IP address), chat messages, and player reports, used for moderation and security monitoring.
- Other players: Your username and ranking records (including guest accounts) are visible to all players, and your name color and portrait appear in chat and matches. Your profile, which any player can open, shows your win/loss/draw records, your saved decks, and your Draft record. Your online status, current activity (for example “In CPU Game” or “Deck Editing”), and last-seen time are shown to players who are online. Other players can spectate your live matches (except tutorials and workshop matches), and your opponents see your match actions and emotes. If you opt in to chat, your messages are visible to all players who have chat turned on.
- Other partners: None. We do not share information with anyone who uses it for their own purposes.
- Legal and safety recipients: Where necessary to comply with applicable law or valid legal requests, investigate fraud or abuse, or protect users and our services.
Relevant provider privacy policies: ip-api.com and Google.
5. Chat privacy and moderation
This section is our Chat Privacy Policy. It applies together with the rest of this policy, the Community Guidelines, and the Terms of Use available in the game’s Support view.
- Who can chat: Chat is off by default. It is available only to registered accounts that are at least 24 hours old or have completed 5 games, and only after you turn it on in Settings and accept the chat rules. Guests cannot use chat.
- Who sees messages: There is one global channel. Messages are visible to all players who have chat turned on; there are no private messages. Players who block you don’t see your messages.
- Moderation: We do not use automated moderation or third-party chat or moderation services. The developer’s administrator account can read chat messages and player reports, and messages appear in the operational summaries emailed to our Gmail mailbox (see section 4). When an account is muted, its messages are removed from the chat log. Chat is not end-to-end encrypted.
- Reporting and blocking: You can report a player from their profile or the in-match player preview, and block them. Reports are visible only to us and are not shown to the reported player. You can manage your block list in Settings.
Chat keeps at most the 1,000 most recent messages, and messages are automatically deleted after 90 days at the latest. Copies of messages in our server activity log are also deleted after 90 days. When an account is deleted, its chat messages are deleted from the chat log and the activity log. The only chat content retained for a legitimate safety reason is the recent messages quoted in a player report about that account, kept for the period described in section 8.
Avoid putting passwords, payment details, or other sensitive personal information into chat. Privacy concerns about chat can be sent to aeternainvicta.ccg@gmail.com.
6. Permissions and player choices
The Android app requests only the Internet permission, which is needed to connect to the game service. The game does not request sensitive runtime permissions such as location, camera, microphone, contacts, or storage on Android or iOS. You can manage app permissions through your device settings.
Privacy controls in the game:
- Chat: off until you opt in. Turn it on or off at any time in Settings > Chat. Turning it back on requires accepting the chat rules again.
- Blocked players: block from a player’s profile; review or unblock in Settings.
- Account: change your password or delete your account in Settings > Account.
- Guest play: play without creating an account. Signing out of a guest session deletes its progress.
Before chat can be used, the game explains the chat rules and links to this policy, and you must agree before chat is enabled. You can withdraw that consent at any time by turning chat off in Settings.
7. Security
We protect information using these safeguards: passwords are stored only as salted bcrypt hashes; session tokens are stored only as hashes and expire (30 days for accounts, 24 hours for guests); changing your password signs out your other sessions; administrative access is restricted to a single developer account that requires a signed-in session; the database connection is configured to use SSL; and player-facing endpoints apply rate limits where abuse is likely, such as player reports.
Connections between the game (web, Android, and iOS) and our servers use HTTPS/TLS, including the game’s real-time WebSocket connection. The server-to-server IP geolocation lookup described in section 4 contains only an IP address. Chat is not end-to-end encrypted.
No method of transmission or storage is completely secure. Report suspected account misuse or privacy incidents to aeternainvicta.ccg@gmail.com.
8. Retention
We retain information for the following periods or criteria:
| Information | Retention period or criteria |
|---|---|
| Account and game records | Registered accounts: kept while the account exists. Inactive registered accounts are not deleted automatically. Guest accounts and their progress are deleted automatically 24 hours after creation, or immediately when you sign out of the guest session, unless you convert to a registered account. The IP address, approximate location, and platform stored on your account are replaced at each sign-in. |
| Chat and moderation records | Chat messages: the 1,000 most recent messages, deleted after 90 days at the latest. Player reports, including quoted messages: 12 months from the report date. Chat mutes and block lists: kept while the account exists. |
| Support and privacy requests | Support tickets on our server: 12 months from submission. Support emails: up to 12 months after the request is resolved, to handle follow-ups and keep a record of privacy requests. |
| Purchase records | Not applicable; there are no real-money purchases. |
| Technical, security, analytics, and crash records | Server activity log (sign-ins with IP address, chat copies, and report notices): 90 days. Completed match logs: 30 days. Hourly operational summary emails: 90 days. Analytics and crash records: not collected. |
| Backups | Backups maintained by our hosting provider expire within 30 days, are used only for disaster recovery, and are not used to restore deleted accounts. |
After the applicable retention period, we delete information or irreversibly anonymize it so it can no longer identify a player. We retain limited information after account deletion only for the specific legitimate reasons and periods stated in this policy.
9. Account and data deletion
You can request deletion of your Aeterna Invicta account and its associated personal information through any of these routes:
- Website: Visit https://aeternainvicta.com/delete-account. You can submit a request without installing or accessing the game.
- In the game: Open Settings > Account and select Delete Account.
- Email: Contact aeternainvicta.ccg@gmail.com with the subject “Aeterna Invicta Account Deletion.”
On the website and in the game, provide your username and current password, and type your username again to confirm. For email requests, provide your username. We may verify account ownership before completing a request to prevent unauthorized deletion. Do not send us your password by email.
Website and in-game requests are completed immediately, and a confirmation is shown on screen. We complete verified email requests within 30 days, subject to any shorter deadline required by applicable law, and confirm by email reply.
Deletion removes the account and its associated personal information, including your username and password hash, sign-in sessions, stored IP address, approximate location, and platform, card collection, decks, Currency, progress, records, achievements, settings and cosmetics, your chat messages, your support tickets, completed match logs you played in, server activity log entries about you, and your name on other players’ block lists. Reports you filed are kept for the reported player’s record, but your username is removed from them. Deletion permanently removes all progress, cards, and Currency, and they cannot be restored. Your username becomes available for others to register. Account deletion is not temporary suspension or deactivation.
Where our service providers hold information on our behalf, we also request deletion from those providers. The following limited information is retained after deletion:
- player reports about your account, including any quoted chat messages, for up to 12 months from the report date, for safety and enforcement;
- hourly operational summary emails already delivered to our mailbox, until they expire after 90 days; and
- support emails you sent us, for up to 12 months after the request is resolved.
Backup copies expire within 30 days. Backups are used only for disaster recovery, and if a backup is ever restored, accounts deleted after it was made are deleted again before the service returns to normal use.
Uninstalling the game does not by itself delete server-side account information. Guest accounts do not have passwords and cannot be deleted by request; they are deleted automatically after 24 hours or when you sign out of the guest session. For requests to delete specific information without deleting your account, contact the same email address; we will explain what can be removed and any resulting effect on game functionality.
10. Audience and children
Aeterna Invicta is intended for players 13 years of age and older. It contains fantasy violence and depictions of blood, and it is not directed to children under 13. This section is our Target Audience Policy.
The game does not ask for age, so we do not knowingly collect personal information from children under 13. The game collects no real names, email addresses (except in support requests), photos, or precise location; it shows no advertising; and chat is limited to opted-in registered accounts that meet the account-age or games-played requirement, with reporting, blocking, and muting available. Where local law sets a higher age for consent to data processing, players under that age should use the game only with the consent of a parent or legal guardian.
If you believe a child has provided personal information in violation of the applicable eligibility or consent requirements, contact aeternainvicta.ccg@gmail.com so we can investigate and take appropriate action, including deleting the account.
11. International processing and privacy rights
Information is stored and processed in the United States, where our hosting provider operates. Our email provider (Google) may process support emails in other countries where it operates. Where applicable, we rely on our providers’ standard contractual clauses or equivalent safeguards for international transfers.
Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of your information, restrict or object to certain processing, withdraw consent, or complain to a data protection authority. Send requests to aeternainvicta.ccg@gmail.com. We may verify your identity and will respond within the applicable legal timeframe, and in any case within 30 days.
Legal bases (EEA, UK, and similar laws): we process account, game, technical, and support information to provide the game you request (performance of a contract); security, abuse prevention, moderation, and server logs on the basis of our legitimate interests in keeping the game safe and working; chat on the basis of your consent, which you can withdraw by turning chat off; and information we must keep to comply with the law on the basis of legal obligation. The data controller is ATN DEV, reachable at the email address above.
12. Policy changes and contact
We update this policy when our data practices change and revise the effective date. Where required, we provide notice in the game or request new consent before applying a material change.
For questions about this policy, chat privacy, account deletion, or other personal information requests, contact:
Developer: ATN DEV
Game: Aeterna Invicta
Email:
aeternainvicta.ccg@gmail.com
Website:
aeternainvicta.com
Account deletion:
aeternainvicta.com/delete-account
Support:
aeternainvicta.com/support