Privacy Policy

Last updated: 6 October 2026

Dark Tactics (“the game”) is a tactics game published by DTWebTA (“we”, “us”). This policy describes what the game does with data. The whole game can be played offline. Two features talk to servers we run — cloud save and online play — and neither asks who you are: there is no login, no name, no e-mail and no profile.

What we do not do

• We do not ask you to create an account with a password or sign in.
• We do not collect your name, e-mail address or phone number.
• We do not collect your location.
• We do not read your contacts, photos, microphone or camera.
• We do not sell data, and we do not use it for advertising.

What is stored on your device

Your progress and settings are written to your device’s own app storage: which chapters you have beaten, the experience your characters have earned, your party, the Wanderers and bosses you have recruited, gold, items and gear, the chests you have opened, and your settings (difficulty, sound, battle speed, motion, text size and screen orientation). It also records whether you have purchased the advert removal. Deleting the app deletes all of it from the device.

Cloud save

So that your progress survives a reinstall and can move to a new phone or tablet, the game keeps a copy of your save on our server. It is on by default and works without a login: the first time the game syncs, our server creates an anonymous account for your device, identified only by a random id. One account belongs to one device.

• Your save — the progress listed above (not your sound or display settings) — and its last 20 versions (the game lists the latest seven), so you can restore an earlier one.
• Your device on the account: platform (Android or iOS), device model, app version, and a hashed form of the device’s app identifier (the iOS identifier for vendor or the Android ID). The raw identifier is not stored; the hash lets us recognise a reinstall of the same device and sign it back into its account, and limit abuse. One account belongs to one device: if you move your save to a new phone with a recovery code, the old phone is signed out and starts a fresh game, so there is only ever one cloud save.
• A recovery code if you make one, stored hashed (we cannot read it back to you), which gets your save back after a reinstall or moves it to a new device, and a short log of account events (such as a save restored or a device replaced) to keep the account secure.

It is sent over an encrypted connection to servers we run on Cloudflare (Cloudflare, Inc.), which processes your IP address to deliver each request and to rate-limit abuse, and keeps short-lived request logs. The game never contacts the cloud during a battle. By default it syncs when it starts, leaves a battle, or goes to or returns from the background; in Settings › Cloud save you can choose Manual sync, so it only syncs when you tap Sync now.

Deleting it. In the game, Settings › Cloud save › Backup › Delete cloud save deletes your cloud save, its history, your recovery code and the device record for good, and turns cloud save off. Progress on your device is kept.

Proving the app is genuine. To stop scripts from abusing the server, the game may ask Apple (App Attest) or Google (Play Integrity), through Google’s Firebase App Check, to confirm that a request comes from a real copy of the game. This sends no progress and nothing that identifies you.

Crash reports

When the game crashes or hits an error, it sends a report to Sentry (Functional Software, Inc.) so we can fix it: what went wrong and where in the code, the app version, the operating system and its version, the device model, and the cloud save’s anonymous account id. Reports never include your device’s name, an e-mail address, screenshots or your progress, and we do not store your IP address with them.

Adverts

The free game shows adverts supplied by Google AdMob (Google Ireland Limited / Google LLC) via the react-native-google-mobile-ads SDK: an occasional full-screen advert between battles, and optional rewarded adverts you choose to watch for bonus experience or to bring back a fallen unit.

AdMob is an independent controller of the data it collects and may use a device advertising identifier and similar technologies to select and measure adverts. We do not receive that data and cannot see it. Its handling is described in Google’s policy for partner sites and apps.

iOS App Tracking Transparency

On iOS, the app calls ATTrackingManager.requestTrackingAuthorization the first time adverts are enabled. This triggers the system-level App Tracking Transparency (ATT) prompt required by Apple. The purpose of the request is to allow AdMob to use your device’s Identifier for Advertisers (IDFA) for personalised ad selection and measurement.

• If you tap Allow. AdMob may use your IDFA and cross-app data to show adverts relevant to your interests and to measure whether an ad led to an install or purchase. This data is handled solely by Google/AdMob under their own policy.
• If you tap Ask App Not to Track (or decline). The IDFA is not shared. You still see adverts — they are just not personalised to your interests and AdMob’s measurement is limited.
• Changing your mind. Go to Settings › Privacy & Security › Tracking at any time to update your choice for this app.

Your other controls

• Android. “Delete advertising ID” and the ads settings in your Google account.
• Removing ads entirely. The one-off in-app purchase switches adverts off permanently; once purchased, the AdMob SDK is not asked for anything.

Purchases

Gold, items and gear in the game are earned by playing. The only purchase is the optional advert removal. It is processed by Google Play or the Apple App Store, and validated through RevenueCat, Inc., which records an anonymous identifier for your device so the purchase can be restored. We never see or store your payment details — those stay with the store.

Playing with someone else

On the same Wi-Fi, multiplayer is peer-to-peer: the app announces and connects over your local network only, and the messages exchanged are game moves — units, tiles and actions.

Online, the same messages pass through our relay, which runs on Cloudflare. While a game is open, the relay lists it by its room code, the display name the host typed, and the mode (co-op or versus), so a friend can find it; the room closes when the game ends or after three hours. The relay does not keep the game messages, and it processes IP addresses only to deliver them and to rate-limit abuse. You can also run the relay yourself, in which case it is not operated by us.

Children

The game is not directed at children under 13, and we do not knowingly collect personal information from them. Where required, advert requests are marked so that non-personalised adverts are served. If you believe a child has provided personal information through the game, contact us and we will act on it.

Third parties in one table

Your rights

You can delete your cloud save yourself at any time, in the game (Settings › Cloud save › Backup › Delete cloud save). Everything else the game keeps is on your device and goes when you uninstall it. Because the account is anonymous, we cannot look it up from your name or e-mail, so deleting it in the game is the way to remove it. For data held by the parties above, use their own controls, linked in their policies. If you are in the EEA, the UK or California and want to exercise a right you believe applies, write to us and we will help.

Changes

If this policy changes we will update the date at the top and, where the change is significant, say so in the app’s release notes.

Contact

[email protected]