Privacy Policy

2. Which data may be processed?

Account data

• Username and email address.
• Password hash, activation status and password-reset security records.
• Selected class, preferences, account role, VIP status and account status.

Gameplay data

• Character progress, levels, experience, resources, Farmers and buildings.
• Creatures, items, amulets, enchants, shards, gems, orbs and Mythic progression.
• Battle activity, battle reports, defenses, loot and game-system logs.
• Kingdom membership, roles, treasury activity and kingdom history.

Community and support data

• Forum posts, reactions, private messages, Tavern messages and reports.
• Information you provide in support requests, bug reports or privacy requests.
• Uploaded avatars and gameplay screenshots where applicable.

Technical and security data

• IP address or a protected/pseudonymised version of it.
• Browser information, timestamps, session identifiers and security events.
• Rate-limit records, error logs, anti-cheat records and suspicious request metadata.

Payment and donation data

• Donation status, amount, reference and administrative confirmation.
• Fallen Kingdom does not ask you to send online-banking passwords or card security credentials.

3. Why is the data used?

• To create, activate, secure and maintain your account.
• To provide the game, calculate progression and resolve gameplay actions.
• To operate forums, messages, kingdoms, rankings and community features.
• To prevent cheating, account theft, spam, fraud, abuse and technical attacks.
• To answer support, privacy, partnership and payment questions.
• To diagnose errors, maintain availability and improve the website.
• To comply with legal obligations and defend legal claims where necessary.
• To display reviewed first-party contextual advertising and, where required, to enable consent-dependent advertising technology only after consent.

4. Legal bases

Depending on the activity, processing is based on one or more of the following grounds:

• Performance of a contract: providing your account and requested game services.
• Legitimate interests: securing the game, preventing abuse, maintaining logs and improving operations.
• Consent: optional cookies, personalised advertising or other optional processing where consent is required.
• Legal obligation: retaining or disclosing information when required by applicable law.

5. Cookies, sessions and local storage

Fallen Kingdom uses strictly necessary cookies to keep you logged in, protect forms, remember security state and provide requested features. Browser storage may also be used for interface preferences or app installation behaviour.

Fallen Kingdom's own advertisement system may display reviewed contextual image banners without optional advertising cookies. It uses pseudonymous hashes for short-term frequency control, fraud prevention and aggregate measurement. Advertisers receive grouped campaign statistics only and never receive player usernames, email addresses, account identifiers or raw IP addresses.

When Google AdSense or another consent-dependent advertising service is enabled, that provider may use cookies or similar technologies for ad delivery, frequency control, fraud prevention, measurement and—where you consent—personalisation. Those tags must not be activated before the required choice has been collected.

You can manage Google advertising preferences through Google Ads Settings and review Google's information at Google Privacy & Terms.

The dedicated Cookie Policy lists the current cookies and browser-storage keys. You can also open Cookie Settings to accept, reject or withdraw optional consent.

6. Who may receive data?

Personal data is shared only when needed for the purposes described above. Recipients may include:

• Hosting, email, security and technical service providers.
• Approved advertisers receive aggregate campaign statistics only; player account data is not disclosed to them.
• Google and authorised advertising partners when consent-dependent advertising is enabled.
• Payment or banking providers involved in a donation you choose to make.
• Moderators who need limited information to investigate reports and enforce rules.
• Public authorities or legal advisers when disclosure is legally required or necessary to protect rights.

Fallen Kingdom does not sell player account data to data brokers.

7. International transfers

Some service providers may process data outside the European Economic Area. Where applicable, transfers must rely on a lawful transfer mechanism and appropriate safeguards. Provider privacy documentation may provide additional details about the locations and safeguards used by that provider.

8. How long is data kept?

• Account and gameplay data is generally retained while the account remains active.
• Security, moderation and transaction records may be retained longer where needed to prevent abuse, resolve disputes or meet legal duties.
• Expired reset and activation records are removed or invalidated through maintenance processes.
• Technical logs are kept only as long as reasonably needed for security, diagnostics and incident investigation.
• Raw first-party advertisement impressions are retained for up to 90 days, click records for up to 180 days and daily aggregate campaign statistics may be retained for historical reporting.
• Forum content may be anonymised instead of deleted when necessary to preserve the structure of a discussion.
• Data that is no longer required is deleted, anonymised or aggregated where reasonably possible.

9. Security

Fallen Kingdom uses measures such as password hashing, prepared database statements, CSRF protection, secure sessions, rate limiting, role-based access control, protected logs, upload validation and security monitoring. No online service can promise absolute security, but suspected incidents are investigated and mitigated as quickly as reasonably possible.

10. Your data-protection rights

Subject to applicable conditions and exceptions, you may have the right to:

• Receive information about how your data is used.
• Request access to your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of data that is no longer needed or unlawfully processed.
• Request restriction of processing.
• Receive eligible data in a portable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time where processing relies on consent.
• Complain to a competent data-protection authority.

Requests can be submitted through the Contact page or by email to webmaster@playfallenkingdom.com. Identity verification may be requested before account data is disclosed or changed. Requests are normally answered without undue delay and, in principle, within one month.

11. Complaints

You may contact Fallen Kingdom first so the issue can be investigated. You also have the right to contact the Belgian Data Protection Authority:

Website: dataprotectionauthority.be

12. Children

Players must meet the minimum age required by applicable law to create and manage an online account. A parent or legal guardian may contact Fallen Kingdom regarding an account believed to belong to a child who cannot lawfully provide the required information or consent.

13. Changes to this policy

This policy may be updated when the game, service providers, advertising setup or legal requirements change. The latest version is published on this page with an updated date.