Privacy Policy

Last updated: 6 October 2026

This policy explains how personal data is processed when you play the VAELIX mobile game (the “Game”) and when you visit this website (the “Site”), in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Italian data protection law.

1. Data controller

2. Data we process

Account data

• A random account identifier created when you first open the Game (guest account). We do not ask for your name to play.
• If you choose to secure your account: the email address you register, or the identifier and email of the Google account you link.

Game data

• Your public username, avatar and profile frame.
• Progression: heroes, hero levels and variants, experience, coins, gems, cosmetics, season progress and missions.
• Matches: teams, actions, results, trophies, league and leaderboard position.
• Private-match room codes and the information needed to run online matches.

Purchase data

• When you buy in-game items, the App Store or Google Play processes your payment. We receive only a transaction identifier and purchase receipt to verify and deliver the item. We never receive or store your card or payment details.

Technical data

• App version and platform, and the technical information our servers need to respond (for example the IP address of each request, processed by our hosting provider and kept in short-lived security and error logs).
• Settings such as music volume and saved team presets are stored only on your device.

Crash reports

• If the Game crashes or hits an error, a crash report is sent with the technical details of the error (stack trace, app version, device model, operating system version) and your random account identifier, so we can find and fix the problem.

Usage statistics (only with your consent)

• If you choose Allow when asked, or turn on Share usage data in Settings, the Game sends gameplay statistics such as tutorial progress, match start and end, game mode, heroes played, number of rounds, result and league changes, together with an app-instance identifier and basic device and session information. Nothing is sent until you agree, and you can turn it off at any time in Settings.

Website waitlist

• If you join the waitlist on the Site: your email address, signup time, the form you used, your browser language and any campaign tags in the page address. To prevent abuse we use short-lived counters based on a hash of your IP address; the raw address is not stored with your signup.

We do not use advertising identifiers (such as Apple's IDFA), third-party advertising or tracking across other apps and websites.

3. Why we use your data and legal basis

4. What other players can see

Your username, avatar, profile frame, account level, league and trophies are visible to other players in matches, private rooms and the global leaderboard. Your email address is never shown to other players.

5. Service providers

We use these providers, who process data on our behalf or as independent controllers for their own services:

• Google (Firebase and Google Cloud) — authentication, database, server functions, game servers, website hosting, crash reporting (Firebase Crashlytics) and, with your consent, usage statistics (Google Analytics for Firebase).
• Apple (App Store) and Google (Google Play) — app distribution and payment processing, under their own privacy policies.
• Google Fonts — fonts loaded by the Site.

6. Where data is stored

Game data is stored in the European Union, on Google Cloud data centres in Belgium (region europe-west1), and our game servers run in the same region. Some providers — for example Google for authentication and support services, or Apple and Google for store payments — may process limited data outside the European Economic Area. In those cases transfers rely on the EU–US Data Privacy Framework, to which these providers are certified, and on the European Commission's Standard Contractual Clauses.

7. How long we keep data

• Account and game data: for as long as your account exists. If you delete your account it is erased immediately (see section 9).
• Match records: a completed match is also part of your opponent's history, so the match record may be kept after you delete your account. It then refers only to a random identifier that is no longer linked to you.
• Purchase records: for as long as required by tax and accounting law (generally 10 years).
• Server logs: short-term, according to our hosting provider's standard retention.
• Crash reports: up to 90 days.
• Usage statistics: up to 14 months, then deleted automatically.
• Waitlist: until the Game launches or until you ask us to remove you.

8. Children

The Game is not directed at children under 13. In Italy, players under 14 may use the Game only with the consent of a parent or guardian. If you believe a child has given us personal data without that consent, contact us and we will delete it.

9. Your rights and account deletion

You can ask to access, correct, delete, restrict or object to the processing of your data, and to receive it in a portable format. Where processing is based on consent, you can withdraw it at any time.

Delete your account: in the Game open Profile → Account → Delete account. All your account and game data is erased permanently. You can also request deletion without the app — see how to delete your account.

To exercise your rights write to info@gowebb.it. We reply within one month. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.

10. Security

Data is transmitted over encrypted connections. Progression, currencies and purchases can only be changed by our servers, never directly by the app, and access to each player's data is restricted to that player.

11. Changes

We may update this policy. Material changes will be announced in the Game or on this page, with the date above updated.