The Fortress

Data controller

The data controller is:

D BEST
Piastowska 1, 42-400 Zawiercie, PL
Email: hello@dbest.pl

If you are in the European Economic Area (EEA) or the United Kingdom, D BEST is responsible for your personal data under data protection law, including GDPR and UK GDPR.

What information we collect

The app does not require you to create an account and does not collect your name, email, or other contact details directly in the app.

When you use the app, we may collect:

• Usage data: basic information about how you use the app, for example which screens are opened, general interaction events, and approximate session duration.
• Device and technical data: device model, operating system version, app version, language, and similar technical details.
• Identifiers: app instance identifiers such as Firebase Installation IDs used to generate aggregate statistics and crash reports, but not advertising IDs for tracking.
• Crash and diagnostic data: crash logs, stack traces, and related technical information that help us find and fix bugs.

We do not use any additional custom tracking systems beyond Firebase Analytics and Firebase Crashlytics.

How and why we use information

We use the information described above to:

• Understand how the app is used in aggregate, so we can make better design and feature decisions.
• To improve stability, performance, and the general player experience.
• To investigate crashes and fix technical issues.

For users in the EEA or UK, we process this data based on our legitimate interest in developing, maintaining, and improving our app under Article 6(1)(f) GDPR.

Where local law requires consent for analytics, we will rely on your consent instead and will respect your choice, for example through system settings or any consent options we may provide.

We do not use this information for targeted advertising or to build marketing profiles.

Third-party services (Firebase)

The Fortress uses:

• Firebase Analytics.
• Firebase Crashlytics.

These services are provided by Google and act as our data processors under data protection law. They process data only on our instructions to provide analytics and crash reporting for the app.

More information is available at the Firebase privacy information and the Google Privacy Policy.

We do not sell your personal data and do not share it with third parties for their own marketing purposes.

International data transfers

Firebase and Google may process data on servers located in the European Union and other countries, including the United States.

When data is transferred outside the EEA or UK, this is done using appropriate safeguards such as Standard Contractual Clauses and participation in relevant data transfer frameworks, as described in Google's terms.

Data retention

We keep analytics and crash data only for as long as needed to achieve the purposes described above, following Firebase's standard retention periods and our internal rules.

When we no longer need the data, we delete it or anonymize it.

Your rights (EEA/UK users)

If you are in the EEA or UK, you have the following rights under data protection law, subject to conditions and limitations:

• Right of access - to know whether we process your personal data and to receive a copy.
• Right to rectification - to have inaccurate data corrected.
• Right to erasure - to ask us to delete your personal data.
• Right to restriction - to ask us to limit how we use your data.
• Right to object - you can object to processing based on our legitimate interests, including analytics.
• Right to data portability - to receive certain data in a structured, machine-readable format.

To exercise these rights, contact us at hello@dbest.pl. We may need to verify your request to protect your privacy.

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

Children and audience

The game is intended for players ages 16 and up and is not directed at children under 16, or the equivalent minimum age in your country.

Some content may be unsettling or inappropriate for younger audiences, and parents or guardians should decide whether the game is suitable for them.

We do not knowingly collect personal data from children under the applicable minimum age. If you believe a child has provided us with personal data, please contact us and we will delete it.

Security

We use reasonable technical and organizational measures to protect your data against accidental or unlawful destruction, loss, alteration, or unauthorized access.

However, no method of transmission or storage is completely secure.

Changes to this policy

We may update this Privacy Policy from time to time, for example if we change the app or the services we use.

We will change the "Effective date" above and, where appropriate, inform you through the app or other means.