Wildhorde Privacy Policy

Last updated: 23 October 2026

This policy explains what information Wildhorde (the “game”) collects, why, who it is shared with, and the choices you have. The game is made by HypeHype Oy (Frogmind Games), business ID 2469442-2, Annankatu 34 B, 00100 Helsinki, Finland (“we”, “us”). We are the controller of the personal data described here.

Contact: [email protected]

What we collect

Your game account

• A random device identifier the game creates on first launch. It is how your device signs in to your account; we do not use your phone number, email or name to create an account.
• Your player ID and battle name, and the progress that makes up your account: cards, kingdom, campaign, trophies, currencies and settings that follow your account (such as your deck and match setup).
• Purchase records: the store’s transaction or order ID and the product you bought, so a purchase is credited exactly once. Payment details are handled by Apple or Google; we never see your card or billing address.
• Notification addresses: if you allow notifications, the push token or web push address of your device, the language it uses and its time zone, so notifications arrive in your own daytime. Your clan notifications choice (All, Mentions only or Off) is kept with your account.
• Your device’s language and time zone, sent when the game signs in, so we know where and when people play, bot players of your language keep similar hours, and notifications are timed to your day: clan notifications wait between 22:00 and 08:00 your time, and reminders and announcements are sent between 10:00 and 22:00 your time.

Playing

• Match data: the commands played in multiplayer matches, results and timings, used to run and referee the match and to keep it fair. Recent matches are kept as replays in your own battle log; some matches appear in the public battle log with the battle names of the players.
• Reports: when you report a battle name, a clan chat message, or a clan’s name and description, what you reported as you saw it (the name, the message, or the clan’s name and description), where it was (the match or the clan), your player ID and, for a name or a message, the other player’s. Our moderators read reports and may remove a message, close a player’s clan chat for a while, reset a name, or restrict an account.
• Restrictions: if we restrict your account for breaking the terms, when we did, until when, and why, stored with your account. While it lasts you cannot chat, send emotes in any battle, change your names, or play friendly battles or co-op missions; trophy battles, island events and the story stay open, and the game tells you until when.
• Support messages you send us, with the player ID you include.
• Feedback: when you answer the in-game feedback form, your rating, the topics you pick and anything you write, stored with your account.
• Clan chat: what you write in your clan’s chat, your card requests and donations, shown to the members of your clan.

Bot players and the clan helper

Some opponents and clan members are automated game characters: they play battles, join clans, give and ask for cards and chat, so that the game is lively while it is young. Their names appear without an identity badge. The clan helper (Herald Bramble) is automated too. They do not claim to be human and do not answer identity questions. When a language model writes their chat replies, the latest lines of your clan’s chat and the specific message being answered, with their battle names, are sent to that model’s provider. The model also receives the automated character’s own gameplay facts, such as its deck, upgrade goal, recent outcome, conversation topic and whether you recently donated a card to it. We retain a bounded game-related memory for these characters, not a personal biography of you. Recent automated opponents are remembered on your account to reduce repeated pairings. What happens between you and these characters (a greeting, a reply, a donation, a battle) is recorded in our game analytics to see whether it helps new players.

Usage data and crash reports

• Game analytics: events such as starting a session, opening a screen, reaching a step of the tutorial or finishing a battle, with how long the game was on screen, the platform, app build and a session identifier. Each time the game starts it also reports, before it has loaded, the device model, the operating system and its version, the Android WebView version, the memory size, the number of processor cores, the screen size and the language, so that we can tell which devices fail to start the game. The device identifier is stored only as a one-way digest, and is linked to your player ID when you sign in, so we can see how players progress through the early game and where they get stuck. While you play, it also reports short performance summaries: frame rate and stutters, loading times, asset downloads, match connection latency, connection drops and reconnect attempts, together with the device and game version. We use these to find and fix slow or unreliable experiences. We operate this analytics ourselves.
• Session recordings: a record of how the game was used during a visit, so that our game team can play it back and see where the game is hard to understand. It holds where on the screen you pressed and what you pressed, which screen was showing and where the map or battle view was looking, your screen size, the game’s own events, and copies of the game’s screens as they looked, with clan chat left out. It does not include anything you type, your voice, your camera or anything outside the game. Our team may have a language model read a recording (see Anthropic below), without your player ID, battle name or the screen copies. Recordings are kept 30 days.
• Crash reports: when the game crashes or hits an error, a report with the error, the app version, device model, operating system and recent in-game steps, sent to our crash reporting provider.
• Attribution: to learn which advertising brought players to the game, our measurement partner receives information about the install and early play, the IP address and, only where you allow tracking on iOS (or on Android unless you have opted out of personalised ads in your device settings), your device’s advertising identifier.

You can turn off usage data, crash reports and session recordings at any time in Settings → This device → Usage data. On iOS the game reads the advertising identifier only if you allow tracking when asked.

Why we use it, and on what legal basis

• To provide the game (performance of our contract with you): your account, progress, purchases, matches, notifications you asked for, and support.
• To keep the game fair and safe (our legitimate interests): preventing cheating, fraud and abuse, enforcing the terms, moderating names and clan chat, and restricting accounts that break the terms.
• To improve the game (our legitimate interests, which you can object to with the Usage data switch): analytics, session recordings, crash reports and measuring which campaigns bring players.
• Tracking across other companies’ apps (your consent, given through the iOS tracking prompt or your device’s ad settings).
• To meet legal obligations: keeping purchase records as accounting law requires.

Who we share it with

We do not sell your personal data. We share it only with service providers who process it for us under contract:

• Fly.io — the servers and the database that run the game, in the United States (Virginia), and storage for archived matches and database backups.
• Cloudflare, Inc. — delivers the game’s files and protects the site; it handles your IP address in transit.
• Functional Software, Inc. (Sentry) — crash and error reports.
• Kochava Inc. — install attribution and campaign measurement.
• Anthropic, PBC — when enabled, writes chat replies for bot players and the clan helper from the latest lines of a clan’s chat, and, when our game team asks, reads session recordings, without your player ID or battle name, to suggest improvements to the game.
• Apple and Google — app distribution, in-app purchases, sign-in, push notifications and (on Android) checking that the app is a genuine copy, under their own privacy policies. A clan notification passes through their push service (or your browser’s, on the web) with what it shows: the clan’s name, the clanmate’s battle name and their message or the card asked for.

Some of these providers are in the United States. Where data leaves the EU/EEA it is protected by the European Commission’s Standard Contractual Clauses or an adequacy decision such as the EU–US Data Privacy Framework.

Other players see your battle name, trophies, deck in a match, and your matches in the public battle log.

How long we keep it

• Your account and its progress: until you delete it.
• Analytics events: 90 days. They are deleted a whole calendar month at a time, so a month’s events are kept until all of that month is 90 days old, at most four months. Each day’s totals, which name no one, are kept 400 days.
• Session recordings: 30 days, and only your most recent 60 visits.
• Database backups: 30 days, so a deleted account leaves the last backup within 30 days of its deletion.
• Crash reports: as long as our provider’s retention, at most 90 days.
• Purchase records: as long as accounting law requires, even after an account is deleted, so a purchase cannot be credited twice.
• Your own battle log: your most recent matches only; older ones are replaced.

Your choices and rights

• Delete your account in the game: Settings → Delete account. It removes your account, its progress, your battle log, your session recordings and your analytics history, and if you saved it to Sign in with Apple, we ask Apple to end the game’s access to your Apple Account. You can also ask by email; see how to delete your account.
• Turn off usage data: Settings → This device → Usage data.
• Tracking: change it at any time in your device’s privacy settings.
• Notifications: turn them off in your device settings. For clan notifications you can also choose All, Mentions only or Off in Settings → Clan notifications.

Under the GDPR and similar laws you have the right to access, correct, delete and receive a copy of your personal data, and to object to or restrict its use. In the game, Settings → Your account → Download my data gives you a copy of everything we keep about your account, and Delete account erases it. For anything else, email [email protected] with your player ID (Settings shows it). You may also complain to your data protection authority; in Finland this is the Data Protection Ombudsman (tietosuoja.fi).

California residents: we do not sell or share personal information for cross-context behavioural advertising except through the attribution described above, which you can stop with your device’s tracking or ad settings.

Children

Wildhorde is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child under 13 has given us personal data, contact us at the address above and we will delete it.

Changes

If we change this policy we will update the date above, and tell you in the game when the change matters.