States in Conflict is a mobile strategy game made by Bitzen Labs ("we", "us"). This page explains
what information the game uses, why we use it, who else handles it, and what you can do about it.
It covers both versions of the game: the Solana dApp Store version, where you
sign in with a crypto wallet, and the Google Play version, which has no wallet
and no account.
The short version
- We never ask for your name, email, phone number or location.
- We never see or store your wallet's private key or seed phrase.
- In the wallet version, your public wallet address is your account.
- Ads come from Google AdMob, which uses your device's advertising ID.
- We don't sell your personal data.
- You can ask us to delete your data at any time.
1. What we collect
Wallet version (Solana dApp Store)
- Your public wallet address. You connect your wallet and sign a message to
prove the address is yours. Signing a message does not give us any access to your funds.
- Your .skr domain name, if you own one. We find it in public blockchain data.
It is shown as your player name, and we may use it to decide who can use some features.
- Game data: coins, XP and level, campaign progress, upgrades and items you own,
your avatar and icon choices, match results, wins and losses, and season and leaderboard stats.
- Purchase records. When you buy a coin pack or the ad-free pass, we record the
order and the public blockchain transaction signature. We use these to confirm the payment and
to make sure the same payment is never credited twice.
- Ad reward records. When you watch a rewarded ad for coins, we record it so the
daily limit works.
- Push notification token. If you allow notifications, Firebase gives your device
a token that lets us send it messages. We store that token with your wallet address. We also
record which in-game notices you have already seen, so we don't show them twice.
Google Play version
There is no wallet and no account. Your coins and progress are saved only on your device. We do
not receive your game data. If you uninstall the game, that progress is gone.
Both versions
- Advertising data. Google AdMob shows the ads. It collects your device's
advertising ID, device model, operating system, IP address and how you interact with ads. Where
the law requires it (for example in the EEA and the UK), the game asks for your consent first
using Google's consent form.
- Online matches. Photon, run by Exit Games, connects players to each other. During
a match it handles your IP address and a temporary player ID.
- Server logs. When the game talks to our server, the server records your IP
address, the time and the request. We keep these logs for about 14 days, for security and to fix
problems.
What we don't collect
Your name, email address (unless you email us), phone number, contacts, photos, precise location,
private keys or seed phrases.
2. How we use it
- To run the game and keep your progress, so it follows your wallet to any device.
- To check and deliver what you buy.
- To show leaderboards and run seasons.
- To stop cheating, fraud and abuse, such as claiming the welcome bonus many times or crediting
one payment twice.
- To send notifications and notices you agreed to receive.
- To show ads and give you rewards for the ones you choose to watch.
- To keep our servers secure and fix bugs.
If you live in the EEA or UK, the legal reasons we rely on are: running the game you asked for
(contract), keeping it safe and fair (legitimate interests), and your consent (personalised ads and
push notifications).
3. What other people can see
- Leaderboards show your player name (your .skr domain, or a shortened wallet
address), your wins and your coins to other players.
- In a match, your opponent sees your player name and avatar.
- The blockchain is public. Wallet addresses and transactions on Solana can be
seen by anyone. We don't control the blockchain and we can't delete anything from it.
4. Services we use
These companies handle some data for us. Each has its own privacy policy.
| Service | What it does | What it receives |
|---|
| Google AdMob and Google's consent form |
Ads, and asking for ad consent |
Advertising ID, device info, IP address |
| Google Firebase Cloud Messaging |
Push notifications (wallet version only) |
Push token, device info |
| Photon (Exit Games) |
Connecting players for online matches |
IP address, temporary player ID |
| Helius |
Reading the Solana blockchain |
Wallet address, transaction signatures |
| SeekerTracker |
Finding which .skr domain a wallet owns |
Wallet address |
| Your wallet app (Solana Mobile Wallet Adapter) |
Signing in and approving payments |
Handled by your wallet under its own policy |
| DigitalOcean |
Hosts our server and database |
Everything our server stores |
| Cloudflare |
Domain names and network protection |
IP address, request info |
Google explains how it uses data from apps that show its ads here:
How Google uses information from sites or apps that use its services.
5. How long we keep it
- Account and game data: for as long as your account exists.
- Server logs: about 14 days.
- Push tokens: until the token stops working or your account is deleted.
- After you delete your account, we keep a small record for fraud prevention only:
completed purchase records with their transaction signatures, and the .skr domains that have
already received the welcome bonus. This stops one payment being credited twice and the welcome
bonus being claimed again and again. We may also keep data where the law requires it.
6. Your choices and rights
- Delete your data: email [email protected]
with your wallet address and the words "delete my data". We will delete it within 30 days. To
protect you, we may ask you to prove the wallet is yours, for example by signing a message.
- Get a copy or fix something: email us and we'll help.
- Notifications: turn them off at any time in your phone's settings.
- Ads: you can reset or delete your advertising ID, or turn off ad
personalisation, in your Android settings.
- Google Play version: uninstalling the game removes your progress from your device.
Depending on where you live (for example the EEA, UK or California), you may also have the right
to object to how we use your data, to ask us to limit it, and to complain to your local data
protection authority.
7. Children
The game is not meant for children under 13, and we don't knowingly collect data from them.
Wallet features and purchases are only for adults. If you believe a child under 13 has given us
data, email us and we will delete it.
8. Security
Everything between the game and our server is encrypted (HTTPS). Access to our server is
restricted, and payments are checked on the blockchain before anything is credited. We never
handle private keys. No system is perfectly secure, but we work to protect your data.
9. Where your data is processed
Our server and the services above may be in a different country from yours. When data moves
between countries, we rely on the safeguards those providers offer.
10. Changes to this policy
If we change this policy, we'll update the date at the top. If the change is important, we'll
also tell you in the game.
11. Contact
Bitzen Labs
Email: [email protected]
Website: bitzen.fun