Privacy policy

Last updated: 20 October 2026

SkyBellum is a tower-building game. This policy explains what data the game uses, why, for how long and how to delete it.

Data controller: Federico Ferrari — [email protected]

Without an account

Playing against the bot or locally (two players on one phone) needs no account. In that case no personal data leaves your phone.

With an account (to play online)

Playing online requires a light account. We do not ask for an email, phone number, real name or any other personal data. Our server stores:

• the nickname you choose, visible to other players in matches and on the leaderboard;
• an account number;
• the account key and the recovery code, only as one-way hashes: we cannot read or rebuild them;
• the results of random-opponent matches: Elo rating, matches played, won and lost, and for each match both players' accounts, the winner, the rating change and the date.

Your phone keeps the account key and your game settings.

Technical data

• IP address: used only to limit repeated attempts (for example too many accounts created in a short time). It stays in the server's memory for at most two hours and is never saved.
• Technical match logs: moves, timings and game version, used to fix bugs. They contain neither your nickname nor your account.
• Server log: technical events, with the account number and never the nickname. Deleted after at most 30 days.

Why

We use this data only to run online play: recognising you when you join a match, showing your nickname to your opponent, computing the leaderboard and fixing bugs. The legal basis is providing the service you asked for by creating the account.

What we don't do

• No advertising.
• No analytics or tracking tools.
• No selling or sharing of data with third parties.

Who processes data on our behalf

The server is in Italy. Traffic goes through Cloudflare, which provides the encrypted connection (HTTPS) and protects the site; Cloudflare sees the data to deliver it and handles it under its own policy (cloudflare.com/privacypolicy).

Testing phase: while the game is open to testers only, access to play.skybellum.com goes through Cloudflare Access, which asks for an email address to send a one-time code. Only Cloudflare sees that email, not our server. Creating an account needs an invite code: we keep the code and the name we assigned it to, linked to your account. If you delete the account the link is removed and the code stays marked as used. This phase ends when the game opens to the public.

How long

Account data is kept for as long as the account exists. Database backups delete themselves after 14 days.

Deleting your account

You can delete your account at any time:

• in the game: Home → account → Delete account;
• on the website: skybellum.com/en/delete-account, with your nickname and recovery code.

Deletion is immediate and permanent: we remove the account, the rating and every recorded match. Backups that still contain it are gone within 14 days.

Your rights

You can ask us at any time to access, correct or delete your data by writing to [email protected]. You also have the right to lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali, garanteprivacy.it).

Age

SkyBellum is meant for players aged 13 and over and is not part of Google Play's Families programme. The game asks for no personal data other than a nickname; we still suggest choosing one that does not contain your real name.

Changes

If we change this policy we update the date above and, if the change is about the data we collect, we say so in the game.