Cellution Privacy Policy
Beta version — this text may be updated before launch
1. Who is responsible for your data
The controller of Cellution's data is Diego Henderson (an individual, Argentina) ("we"), based in Córdoba (postal code 5000), Argentina, with a privacy contact at idovoco@gmail.com.
2. Who the game is for
Cellution is for people aged 18 or over. When you start, the game asks you to confirm your age.
- We do not knowingly collect data from people under 18. If we find that an account belongs to a minor, we delete the account and its data as described in section 10.
- If you are a parent or guardian and believe a minor has sent data to the game, write to us at idovoco@gmail.com.
- The age confirmation is your own statement. Today we do not verify age in any other way.
3. What data we process
3.1 Your account data
| Data | What it is | Purpose | Required? |
|---|---|---|---|
| Internal account identifier | A unique code generated by our server | To identify your account and progress | Yes |
| Guest device identifier | A random code the game generates on your device. It is not the serial number or an advertising identifier | To access your guest account | Yes |
| Support ID | A code shown in Settings → Account | To handle enquiries without asking you for more data | Yes |
| Creation and acceptance dates | When you created the account and when you accepted the terms and this policy (with the version label) | To prove your acceptance and manage changes | Yes |
| Your Google account identifier | A code Google assigns to your account, only if you link it | To recover your progress on another device | No |
When you link a Google account, we do not store your password or your photo.
3.2 Your game progress data
- Display name (which you choose).
- Heroes, levels, abilities, equipment, saved formations and campaign progress.
- Energy, missions, claimed gifts and season pass progress.
- Cosmetics you own and have equipped.
- Your guild data: membership, role, contributions and gifts you took part in.
- Arena data: your ranking, your defensive formation, your battles and their replays.
- Your Summon history (up to 200 results) and the guarantee counter.
3.3 Economic data
- The balance of each in-game currency and the transaction log (every credit or debit, with its reason and date).
- For Crystals, the origin of each balance (purchased or earned), so that we can handle refunds.
3.4 Purchase data
When you buy with Google Play, we receive and store:
- the product bought, the date and the status of the purchase (pending, validated, cancelled or refunded);
- Google's order identifier;
- a derived code (hash) of the purchase token, not the token itself;
- information about a refund or cancellation of the purchase, if any.
We do not receive your card or payment method details. Google Play handles those.
3.5 Rewarded ad data
When you watch a rewarded ad, we store a derived code (hash) of the ad token, so that the same reward is not granted twice. Ads are served by Google AdMob (section 7).
3.6 Telemetry data (only if you turn it on)
Telemetry helps us improve game balance and detect errors. It is off by default. It is only sent if you turn it on in Settings → "Share usage data".
If you turn it on, we send events such as:
- tutorial steps, session start and exit;
- battle result and duration, formation used and app version;
- level-ups, ability use and game modes used;
- purchase status, such as "started", "validated" or "refunded" (without order number or token);
- error codes shown on screen (without free-text messages);
- app version, platform and a random installation identifier (
install_id).
We do not send your name, email, free text, coordinates or advertising identifiers, and the server does not store the IP address in these records.
3.7 Security, support and anti-abuse data
- Rate limits on each action, to prevent abuse.
- Suspicious-behaviour alerts, reviews, sanctions and appeals.
- Compensation approved by the support team.
- A log of support team actions, with the identifier of the affected account.
3.8 Technical data
- IP address and connection logs kept by our hosting provider (Contabo GmbH, servers in the USA), for security and operation.
- Crash and performance reports collected by Google Play according to your Android settings.
3.9 Data we do not ask for
Through the game we do not ask for or collect: your real name, email address, phone number, location, contacts, photos or microphone. The game does not use the advertising identifier on its own; AdMob ads are covered by section 7. Please do not write personal data in your display name or in guild announcements, because other players will see them.
4. Where the data comes from
- From you: what you write (name, guild announcements) and what you do in the game.
- From the game itself: identifiers, balances and records generated by the server.
- From Google: confirmation of your Google account if you link it, and the status of your purchases and refunds on Google Play.
- From Google AdMob: confirmation that you watched a rewarded ad.
5. Why we use your data and the legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Create and maintain your account and progress | Sections 3.1 and 3.2 | Performance of the contract |
| Charge purchases, apply refunds and prevent a purchase being charged twice | Sections 3.3 and 3.4 | Performance of the contract; legal obligation (accounting and tax) |
| Protect the game: cheating, abuse, fraud and security | Sections 3.7 and 3.8 | Legitimate interest |
| Improve balance and detect errors | Section 3.6 | Consent (optional, off by default) |
| Show rewarded ads | Sections 3.5 and 7 | Performance of the contract; consent where the law requires it |
| Handle enquiries, appeals and claims | Sections 3.1, 3.4 and 3.7 | Performance of the contract; legitimate interest; legal obligation |
| Comply with legal obligations | Whatever the law requires | Legal obligation |
6. Who we share your data with
We do not sell your personal data. We do not share it with advertisers.
| Recipient | What it receives | Why |
|---|---|---|
| Google (Google Play, Sign in with Google, Android crash reports) | Purchase data and data of the Google account you link; technical reports from your device | To charge purchases, link your account and keep the app stable |
| Google AdMob | Device data needed to show the ad, according to its policy and your consent | To show rewarded ads |
| Contabo GmbH (hosting of our servers, in the USA) | All account and game data, which it stores on our behalf | To operate the game. It acts as a processor: it only follows our instructions |
| Authorities, when a law or court order requires it | What is requested, nothing more | To comply with the law |
7. Rewarded ads
Cellution shows only rewarded ads (optional), through Google AdMob. There are no other ad formats.
- Watching an ad is voluntary; in return you receive an in-game reward (for example, Energy).
- AdMob may process data from your device (for example, an advertising identifier and the IP address) to show the ad, measure it and prevent fraud, under Google's privacy policy.
- Where the law requires it, we ask for your consent through Google's user messaging platform (Google UMP) before showing ads. You can change or withdraw your choice when the game offers it and, in addition, reset or limit ad personalization in your Android settings.
8. International transfers
Our servers are hosted by Contabo GmbH in the United States. If you live outside that country, your data is transferred outside your country. In that case we apply the safeguards required by law. Google and AdMob may also process data outside your country under their own safeguards.
9. How long we keep your data
| Data | Period |
|---|---|
| Account and progress | As long as the account exists |
| Account pending deletion | 7 days from the request. You can cancel within that period |
| Telemetry (event rows) | 90 days from when they reach the server. After that only aggregate counters remain, without any identifier |
| Arena battle replays | 7 days |
| Stage-entry operations and battle abandonments | 30 days |
| Summon history (up to 200 results) and guarantee counter | As long as the account exists |
| Purchase and Crystal transaction records, anonymized after account deletion | The period required by the applicable tax and accounting rules |
| Sanctions and fraud records | 12 months after the sanction ends |
| Log of support team actions | 12 months |
| Technical server logs (IP, errors) | 30 days |
| Database backups | 14 days |
Where a legal period is uncertain, we will apply the shortest one the law allows, and update this table.
10. What happens when you delete your account
How to request it: from the game (Settings → Account → Delete account), or by writing to idovoco@gmail.com if you no longer have the app. More details at How to delete your account. In the game you are asked to type ELIMINAR to confirm; you can then cancel the deletion from the same screen during the 7 days.
Period. Your account is put on hold for 7 days. During that period you can cancel the deletion. After that, the deletion is final.
What is deleted:
- your progress, heroes, teams, formations, currencies, cosmetics and balance;
- your Summon history, your guarantee counter and your telemetry records;
- your Arena rankings, replays and defensive formation;
- your guild membership: you leave the guild, and if you were the last member, the guild is dissolved;
- your name on guild chat messages, which is replaced with "deleted". The message text is kept;
- your sanctions record.
What is kept, and why:
- Purchase and economic transaction records, without your name or account identifier: only a derived code, the reason and the order number. They are kept for tax and accounting obligations.
- Purchase indexes that link an order or token to an account, for the same reason and period.
- Fraud and support records (for example, approved compensation) that may be needed for security or by law, for the periods in section 9.
- Google Play data that Google keeps on its own, under its policy.
If we restore a backup, we re-apply pending deletions so that a deleted account does not reappear.
11. Your rights
Depending on the country where you live, you may:
- Access your data and learn how we process it.
- Receive a copy of your data in a readable format (export). In the game: Settings → Account → Export my data (needs a connection to the server); you can also request it by email.
- Correct inaccurate data. You change your display name in the game.
- Delete your account and data (section 10).
- Object to or request restriction of processing based on legitimate interest.
- Withdraw your consent to telemetry at any time: Settings → "Share usage data". When you turn it off we stop sending data. Data already sent follows section 9.
- Complain to the data protection authority of your country.
How to exercise them: write to idovoco@gmail.com and include your support ID (Settings → Account). We will reply within the period set by the applicable law. We may ask for information to confirm that the account is yours, but no more than necessary.
California users (CCPA/CPRA). We do not sell or share personal data for behavioural advertising. You have the right to know what data we collect, to request its deletion and correction, and not to be discriminated against for exercising these rights.
Brazil users (LGPD). You have the rights of article 18 of Lei 13.709/2018, including confirming the processing and obtaining information about the sharing of your data. You can file a complaint with the ANPD.
12. Cookies, identifiers and on-device storage
- The game stores on your device your local progress, the session, the guest device identifier, your preferences and your telemetry consent.
- We do not use advertising or tracking cookies across apps or sites.
- This website uses no cookies, no scripts, and no external fonts or trackers.
13. Security
- Communication between the game and our servers is encrypted (HTTPS/TLS).
- The server decides results, rewards and the economy. The client cannot write directly to your progress.
- We do not use our own passwords: accounts are guest or Google accounts.
- Administrative access is restricted, logged and requires a reason.
- No system is completely secure. If a security breach affects your data, we will notify you and the authorities as required by the applicable law.
14. Minors
See section 2. Cellution is not directed at people under 18. If we find that someone under 18 has used the game, we delete their account and data as described in section 10.
15. Changes to this policy
We may change this policy. We will publish the new version on this page with its "last updated" date and, if the change is important, notify you in the game. The version label you accepted is stored on your account.
16. Contact
- Privacy, support and exercising your rights: idovoco@gmail.com.
- Controller: Diego Henderson (an individual), Córdoba (postal code 5000), Argentina.