Privacy policy

Who is responsible

Head Kings is a game by Veltrix Studios (owner: Iván Lozano Herrero), the controller of the data described here. For anything about your data, write to us at contacto@veltrixstudios.net.

Legal notice. Owner of this website and of the game: Iván Lozano Herrero, tax ID (NIF) 77836101F, Calle Flora, 4, 30626 Fortuna (Murcia). Contact: contacto@veltrixstudios.net.

What data is stored

The first time you open the game, a guest account is created, with no sign-up. Our server stores:

• A random account identifier. It is a randomly generated key that your device keeps in order to log in to your account. The server only stores its fingerprint (a hash), never the key itself. The same goes for the codes and the recovery key used to move your account to another device.
• Your nickname and your flag, the ones you choose (at first, “Jugador” and a number).
• Your progress: level and experience, cups, in-game coins and gems, characters and accessories, packs, missions, rewards, achievements, the cup road and the tournament, and how many reward videos you have watched today.
• Statistics and history: matches, wins, goals… and your last 50 online matches (the result, and your rival’s nickname, flag, level, cups, character and kit).
• Friends: your friend code, your friends list and the requests you send or receive (requests expire after 14 days).
• Dates: when your account was created, when it last changed, and the dates of your matches, friendships and requests.

If you save your game with Google or Apple (optional, in the apps: Ajustes → Tu cuenta, Settings → Your account), that provider confirms to us who you are and we store only the identifier it gives us for your account, so we can give your game back when you sign in with that account on another device. We don’t store your email address, your name or your photo, and we don’t post anything to your account. With Apple, we also store the authorization it gives us so we can revoke it when you delete your account. You can remove that link at any time in the same place.

Your device stores your account key, your settings (sound, music, vibration, button size, notifications), some interface preferences and a copy of your profile so you can play offline. Your phone’s backup (Google or iCloud) may include that key, so you don’t lose your account when you change phones.

Your IP address and technical logs

Your connection’s IP address is used to make the connection work and to prevent abuse (for example, to limit how many accounts are created per hour). Those counters stay in the server’s memory for one hour at most and are not stored with your account.

The technical logs of the game server and of this website (IP address, time, page requested and browser type; in the game, also notices such as “account created” or “account deleted” with its identifier) are kept for 30 days at most, only to fix bugs and security problems.

Advertising (Android and iOS apps only)

The web version has no ads. The apps show ads from Google AdMob and its advertising partners: reward videos, which you only see if you ask for them (for example, to double the coins from a win or to open a pack sooner), and full-screen ads between matches (never during a match). Anyone who makes a real-money purchase stops seeing the ads between matches.

To serve the ads, limit how many times you see the same one, measure their performance and prevent fraud, Google’s ads SDK collects data from your device: the advertising ID, the IP address (from which an approximate location is inferred), the device model and operating system, and ad usage data. Google processes this data as explained in How Google uses information from sites or apps that use our services.

In the European Economic Area, the United Kingdom and Switzerland, the first time you open the app you are asked whether you accept personalized ads; if you say no, the ads are not personalized. You can change your answer at any time in Ajustes → Privacidad de los anuncios (Settings → Ad privacy). On iOS, the system may also ask whether you allow tracking across apps (you can change this in iPhone Settings → Privacy & Security → Tracking). On Android, you can reset or delete your advertising ID in the device’s Google settings. The ads are, at most, suitable for all ages with parental guidance.

When you watch a reward video, Google confirms to us that you watched it all the way through; to do that, it receives the internal number of your game account (not your name) and a single-use code. For our statistics we count how many videos are watched each day, without recording who watched them.

Purchases (apps only)

Real-money purchases (gems and the welcome pack) are made through Google Play or the App Store: Head Kings neither receives nor stores your payment details (card, account, address). With each purchase, the app sends the store a random identifier of your game account (not your name), so that only your account can receive it. For each purchase we keep the receipt the store gives us (the product, the date, the transaction ID and, depending on the store, the country and the price or the order number) so we can deliver what you bought, avoid delivering it twice and keep our accounting records.

Notifications (apps only)

If you turn them on (the game asks you the first time you win a pack that takes a while to open; afterwards, in Ajustes → Notificaciones, Settings → Notifications), your phone lets you know when a pack can be opened: your phone schedules that notice itself and nothing leaves it. To also let you know, when the game is closed, that a friend has come online, we store the code the system gives us to send notifications to that phone (the Google Firebase Cloud Messaging token on Android or the Apple Push Notification service token on iOS). Those Google and Apple services deliver them, and they only carry your friend’s nickname. With that same code, if you accept game news (when turning notifications on; you can turn them off separately in Settings → Novedades del juego), we occasionally send you notices about events, news or offers in the game; if you don’t accept them, never. If you turn them off, we delete it, and also when your account is deleted.

Achievements in Game Center and Google Play Games (apps only)

If you have a Game Center (iOS) or Google Play Games (Android) account on your device, the app records in it the medals you earn in the game. We only tell those services which achievements you have earned; what Apple or Google does with your gaming account is explained in their own policies.

What we don’t do

• We don’t ask for or store your real name, email, phone number, photos, contacts or location (not even those of your Google or Apple account).
• We don’t use third-party analytics or tracking cookies, neither in the game nor on this website (the ads in the apps work as explained above).
• There is no chat: players can only send each other the game’s emotes and invitations to play.
• We don’t sell, rent or share your data.

What it is used for

• Saving your game so you can carry on where you left off (also on another device, with a one-time code, with your recovery key or with your Google or Apple account).
• Finding you rivals, playing online matches, rooms with friends, tournaments and events.
• The leaderboard, your history, achievements and friends list.
• Delivering what you buy and the rewards of the videos you watch, and sending you notifications if you turn them on.
• Showing ads in the apps, which pay for the free game.

We do this to provide the service you ask for when you play (Article 6(1)(b) GDPR). Personalized ads only with your consent (Article 6(1)(a)), which you can withdraw in Settings; non-personalized ads, the IP limits and technical logs are based on our legitimate interest in offering the game for free and keeping it working and secure (Article 6(1)(f)). Purchase receipts are also kept to meet accounting and tax obligations (Article 6(1)(c)).

Who can see what

• Other players see your nickname, flag, level, cups and character in matches and on the leaderboard, and your public profile (statistics, best cup score, league, best streak, your kit and your best characters).
• Only your friends can see whether you are online and invite you to play.
• Choose a nickname that doesn’t identify you: don’t use your full name or contact details.

Where it is stored

On our server, hosted by IONOS SE, en Alemania (Unión Europea). Apart from what is explained in Advertising, Purchases, Notifications, Achievements and when you save your game with Google or Apple (Google and Apple services), no other service receives your data. Connections are encrypted (HTTPS and WSS).

How long we keep it

• Your data is kept for as long as your account exists. Accounts don’t expire on their own: if you stop playing, delete it from the game.
• Only your last 50 matches are kept in your history.
• Purchase receipts are kept, no longer linked to your account, for as long as tax regulations require.
• Server backups are deleted after 30 days.

How to delete your account

1. In the game, open Ajustes (Settings: the cog in the top right corner).
2. Under Privacidad (Privacy), tap Borrar mi cuenta (Delete my account).
3. Confirm by typing BORRAR.

Your profile, progress, friends and requests, history, leaderboard position, notification codes and the link to your Google or Apple account, if there was one, are deleted immediately (the “Sign in with Apple” authorization is revoked), and the game starts again from scratch with a new account. Only these remain, briefly: your rivals’ history still shows your nickname, flag, level, cups and character from the matches you played together, until those matches drop out of their last 50, and the server backups, which are deleted automatically after 30 days; and the purchase receipts, no longer linked to your account, for as long as tax regulations require.

To also delete what is stored on your device, uninstall the app or clear the site data in your browser. If you no longer have the game installed, see how to delete your account without the app.

Children

Head Kings doesn’t ask anyone for their age or any personal data. If you are under 14, play with your parents’ or guardians’ permission, ask them before buying anything and don’t put personal details in your nickname. The game’s coins and gems have no value outside the game and cannot be exchanged for money. If you are a parent or guardian and believe a minor has given us data, write to us at contacto@veltrixstudios.net and we will delete it.

Your rights

You can change your nickname and flag at any time in your Perfil (Profile), remove the link to Google or Apple and turn off notifications in Ajustes (Settings), change your answer about ads in Ajustes → Privacidad de los anuncios (Settings → Ad privacy) and delete your account from Ajustes. You can also ask us to access, correct, delete or export your data, or object to how we use it, by writing to contacto@veltrixstudios.net. Since we don’t keep anything that identifies you, we will ask for your friend code to know which account you mean. We will never ask for your recovery key: anyone who has it can log in to your account.

If you think we haven’t handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the data protection authority where you live.

If we change this policy, we will say so here with the date of the new version. The Spanish version is the original.