Privacy Policy
Last updated: 21 July 2026
This policy explains what personal data we collect when you play Town Heroes (the “Game”) or visit townheroes.net, why we collect it, who we share it with, and what rights you have over it.
The Game is operated by TRN Games(“we”, “us”), Istanbul, Türkiye. For any privacy question or request, contact support@townheroes.net.
1. Who this policy is for
Town Heroes is intended for players aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us and we will delete the account and its data.
2. Data we collect
2.1 Data you provide or that is created by playing
| Data | Why we need it |
|---|---|
| A device identifier supplied by your operating system, and an account identifier we generate for you | To create and recognise your account. Town Heroes can be played without giving us a name or an email address — signing in as a guest uses only these identifiers. |
| Email address (only if you choose to sign in with email) | To send you a one-time sign-in code and to let you recover your account on a new device. |
| Platform account identifier (only if you choose to sign in with Google Play Games, Apple or Steam) | To link your Game account to that platform account. |
| Gameplay data — characters, level, progression, inventory, in-game currency, clan membership, match and leaderboard results, chosen display name | To run the Game, keep your progress safe on our servers, match you with other players and display leaderboards. |
| Purchase records for in-app purchases | To deliver what you bought and to support refunds. Payments are processed by Google, Apple or Valve — we never receive your card or bank details. |
| Support correspondence | To answer you. |
2.2 Data collected automatically
- Technical and connection data — IP address, device model, operating system version, language and region, game version. Used to deliver the Game, keep sessions secure, and detect cheating and abuse.
- Analytics data — anonymous usage events such as which screens and features you use and how long sessions last, collected through Google Firebase Analytics.
- Crash and performance data — crash reports, stack traces and device state at the time of a crash, collected through Google Firebase Crashlytics.
- Push notification token — an identifier issued by Google Firebase Cloud Messaging so we can send you notifications. You can turn notifications off in your device settings at any time.
- Advertising identifier and ad interaction data — used by Google AdMob to show ads in the Game and to measure them.
3. Advertising
Town Heroes shows advertisements supplied by Google AdMob. AdMob may use your device’s advertising identifier to select and measure ads. You can reset or delete that identifier, or opt out of personalised advertising, in your device settings (Android: Settings → Google → Ads; iOS: Settings → Privacy & Security → Tracking). We do not sell your personal data.
4. Who we share data with
We do not sell your personal data and we do not share it for advertising outside the Game. We share only what is needed with the following service providers:
| Provider | Purpose |
|---|---|
| Google (Firebase Analytics, Crashlytics, Cloud Messaging, AdMob, Google Play) | Analytics, crash reporting, push notifications, advertising, store billing |
| Apple | App Store distribution and billing on iOS |
| Valve | Steam distribution and billing on PC |
| Unity Technologies | Game engine and in-app purchase infrastructure |
| Our hosting provider | Running our game servers and databases |
We may also disclose data where we are legally required to, or where it is necessary to establish, exercise or defend legal claims, or to protect the safety of our players.
5. Where your data is processed
Our game servers are located in Germany (European Union). Some of our service providers process data in other countries, including the United States. Where data leaves the European Economic Area or Türkiye, we rely on the safeguards those providers offer, such as the European Commission’s Standard Contractual Clauses.
6. How long we keep data
- Account and gameplay data — kept while your account exists. If you delete your account, it is removed or irreversibly anonymised within 30 days, except where we must keep records longer by law (for example purchase records for tax purposes).
- Sign-in codes and session tokens — minutes to weeks; sign-in codes expire after 10 minutes.
- Crash and analytics data — kept according to the retention periods of the Firebase products, typically up to 14 months.
7. Your rights
Depending on where you live, you have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw consent where we rely on it. Players in the European Economic Area and the United Kingdom have these rights under the GDPR; players in Türkiye have equivalent rights under KVKK (Law No. 6698).
To exercise any of these, write to support@townheroes.net from the address linked to your account, or contact us from inside the Game so we can identify your account. We answer within 30 days. You also have the right to complain to your local data protection authority.
8. Deleting your account
You can delete your account and its data at any time from the Game’s settings screen, or by following the instructions on our account deletion page.
9. Security
Sign-in and account traffic is encrypted in transit using TLS, and so is everything our analytics, crash-reporting and advertising providers send. Sign-in tokens are never stored in readable form — only as a one-way hash — and access to our production systems is restricted to the people who need it.
Your messages are encrypted. Clan chat, private messages and everything else you type — character names, clan names, friend requests — travel over the main game connection, which is encrypted in transit with modern authenticated encryption (AES-GCM, keys agreed per session).
Live battle traffic is not encrypted yet. While you are in a battle, the real-time connection to the battle server is still unencrypted. It carries no chat and no messages — only gameplay actions, together with the character name, clan name and country you have already chosen to display to other players. Encryption for this connection is being rolled out. We would rather tell you this plainly than let you assume otherwise.
No system is perfectly secure, but we work to protect your data and will notify you and the relevant authority if a breach is likely to affect your rights.
10. Changes to this policy
We may update this policy as the Game evolves. The date at the top always reflects the current version, and we will announce significant changes inside the Game before they take effect.
11. Contact
TRN Games — Istanbul, Türkiye
support@townheroes.net