Privacy policy

Last updated 19 September 2026

Warlords of the Three Kingdoms (the game) is made by Gitkonek Studio (we, us). This policy covers the game on iOS and Android and the website at warlord3k.com. Questions: support@warlord3k.com.

The short version

• We collect what the game needs to run: a random player ID, your warlord's progress, and your purchases. You play without an account; linking Apple or Google is optional.
• No ads, no advertising identifiers, no selling or sharing of data for advertising, no location.
• You can delete your warlord at any time in the game: Settings, Delete account.

What we collect

• Player ID. A random ID created the first time you open the game (anonymous sign in with Firebase).
• Game data. Your warlord's name, level, progress, Generals, artifacts, territories, currencies, raids, bounties, Kingdom War record, messages, and a record of every change to your currencies (it lets us fix mistakes and stop cheating).
• A linked account, if you choose one. Linking Apple or Google shares that account's ID and email address with us (Apple may give a private relay address instead). We use it to restore your warlord on a new device and to match a founder offer to the email you joined the waitlist with.
• Purchases. Which products you bought, when, their price, and the store's transaction IDs, recorded through RevenueCat. Apple and Google handle the payment: we never see your card or bank details.
• Notifications, if you allow them. A device token so the game can tell you when your Energy is full, your territories are ready, or you were raided.
• Usage analytics. Game events such as opening the game, finishing a campaign, or buying Jade, with your player ID, your level and Kingdom, the app version, and the device model and operating system, sent to PostHog. We do not record screens or sessions, and we ask PostHog not to keep your IP address or work out a location from it.
• Crash reports. When the game crashes, Firebase Crashlytics records what the device was doing, the device model and operating system, your player ID, and a crash reporting installation ID.
• The website waitlist. If you join the waitlist, your email address, when you joined, and which link or campaign brought you. Cloudflare Turnstile checks that the form is sent by a person, not a bot.

We do not collect your contacts, photos, precise or coarse location, or advertising identifiers.

What other players see

Your warlord's name, level, Kingdom, portrait frame, and power appear to other players on leaderboards, raid lists, bounties, and battle logs. Nothing else about you is shown to them.

How we use it

• To run the game and deliver what you buy.
• To keep the game fair: rate limits, and spotting cheating and unusual activity.
• To fix bugs and crashes.
• To understand, in aggregate, which parts of the game work and which do not.
• To send the notifications you allowed, and the waitlist emails you asked for: a welcome, the launch email, and one reminder. No newsletter.

Where the law asks for a legal basis (for example in the EEA and the UK): running the game and your purchases is necessary for our contract with you; fairness, security, and analytics are our legitimate interests; notifications and waitlist emails rest on your consent, which you can withdraw at any time.

Who processes it for us

• Google Firebase: sign in, the game's database and server, notifications, and crash reports (Crashlytics). Game data is stored in Google Cloud's Singapore region.
• RevenueCat: purchase and subscription records.
• PostHog: usage analytics.
• Resend: waitlist emails.
• Cloudflare: website hosting and the waitlist form's bot check.
• Apple and Google: the app stores, payments, and the optional sign in.

They process data only to provide their service to us. Some are based in the United States; where the law requires it, transfers rely on safeguards such as standard contractual clauses.

How long we keep it

• Game data: for as long as your warlord exists.
• When you delete your warlord it leaves the game at once, and the rest is erased from our servers within 30 days. The deletion page lists what is erased and what stays.
• Analytics events and crash reports carry the random player ID, never your name or email, and expire under PostHog's and Crashlytics' retention settings.
• Waitlist entries: until the founder offer ends, or sooner if you ask us to remove yours.

Your choices and rights

• Delete your warlord in the game: Settings, Delete account.
• Turn notifications off in Settings, or in your phone's settings.
• Ask us for a copy of your data, a correction, or its deletion, or object to how we use it: email support@warlord3k.com. We answer within 30 days. For a warlord that was never linked we may ask you to act from inside the game, because we have no other way to confirm it is yours.
• You can complain to your data protection authority.

Children

The game is not directed at children under 13 (or the higher age your country sets), and we do not knowingly collect their data. If you believe a child has given us data, email us and we will delete it.

Security

Data travels encrypted. Only the game's server can change game data: the app reads, the server writes, and every change to a currency is recorded. Access to the systems is limited to Gitkonek Studio.

Changes

When this policy changes we update it here with a new date, and we announce significant changes in the game before they apply.