Privacy Policy

Last updated: 27 October 2026

This policy explains what personal data we collect when you play Town Heroes (the “Game”) or visit townheroes.net, why we collect it, who we share it with, and what rights you have over it.

The Game is operated by TRN Games(“we”, “us”), the trade name of Hasan Turna, an independent developer based in Istanbul, Türkiye. For any privacy question or request, contact support@townheroes.net.

1. Who this policy is for

Town Heroes is intended for players aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us and we will delete the account and its data.

2. Data we collect

2.1 Data you provide or that is created by playing

2.2 Data collected automatically

• Technical and connection data — IP address, device model, operating system version, language and region, game version. Used to deliver the Game, keep sessions secure, detect cheating and abuse, and determine your country (see below).
• Country — determined on our own servers from the IP address of your connection, using an IP-to-country database stored on those servers. We store only the two-letter country code; it is shown as the flag on your profile and used for country leaderboards and region-specific in-game announcements and offers. Your IP address is not sent to any third party for this. IP Geolocation by DB-IP.
• Analytics data — anonymous usage events such as which screens and features you use and how long sessions last, collected through Google Firebase Analytics.
• Website analytics (townheroes.net)— only if you accept the cookie banner on the website: Google Analytics records which pages you visit, the site that referred you, your device type and approximate country. Nothing is collected before you choose, and you can change your choice at any time from “Cookie settings” at the bottom of every page.
• Crash and performance data — crash reports, stack traces and device state at the time of a crash, collected through Google Firebase Crashlytics.
• Push notification token — an identifier issued by Google Firebase Cloud Messaging so we can send you notifications. You can turn notifications off in your device settings at any time.
• Advertising identifier and ad interaction data — used by Google AdMob to show ads in the Game and to measure them.
• Campaign link code (townheroes.net/go/…)— when you open one of our share links, only the link’s short code is passed on (for example in the page address or, on Android, in the Google Play install referrer) so we can count how many visits and installs a post brought. We count clicks by device type only (Android, iPhone, computer); your IP address, browser details or any cookie are not stored with the count. If you accept analytics cookies, the code is also kept in a first-party cookie for 30 days; otherwise it lives only in your browser tab until you close it.

2.3 Closed test applications (townheroes.net/tester)

If you apply to test the Game on our website, we collect what you type into the form: your email address, the platforms you play on (Android, iOS, Steam), and optionally your device model and Discord username. We also store your chosen language, the time you gave consent, and the campaign link code you arrived through (if any).

• Why — to select testers for test waves, send you an invite code and download link when you are picked, and, if you give your Discord username, to give you the tester role on our Discord server. We may send one confirmation email when you apply.
• Legal basis — your explicit consent, given with the checkbox on the form (GDPR Article 6(1)(a); KVKK Article 5(1)). You can withdraw it at any time.
• How long — until the closed test programme ends, or earlier if you ask us to delete your application. An application is not linked to a Game account.
• Deletion — write to support@townheroes.net from the address you applied with and we will delete your application.

The form is protected against automated sign-ups (a hidden field, a minimum filling time and, where enabled, Cloudflare Turnstile). We use these checks only to tell people from bots.

2.4 Newsletter (townheroes.net)

If you sign up for our weekly newsletter on the website, we collect your email address, the platforms you want a launch heads-up for (Android, iOS, Steam), your chosen language, and the time you signed up and confirmed.

• Why — to send you the Town Heroes newsletter (news, updates and the best plays of the week) and to tell you when the Game launches on the platforms you picked.
• Double opt-in — nothing is sent until you confirm your address with the link in the first email. A sign-up that is never confirmed expires and is deleted automatically.
• Legal basis — your consent (GDPR Article 6(1)(a); KVKK Article 5(1)).
• Unsubscribing — every newsletter email has a one-click unsubscribe link, and unsubscribing deletes your address from our list. You can also ask us to delete it at support@townheroes.net. The newsletter is not linked to a Game account.

3. Chat, messages and moderation

Town Heroes lets you send private messages to other players and write in clan chat. These messages are stored on our servers so that they can be delivered and so that you can see your conversation history. They are not end-to-end encrypted: they are encrypted while travelling between your device and our servers (see 10. Security), but they are readable on our servers so that we can moderate them as described below.

• Who sees your messages. A private message is shown to the player you send it to; a clan chat message is shown to the members of your clan.
• Profanity masking.Our servers automatically replace words from a list of offensive terms with “***” before a message is shown. We keep the original, unmasked text on our servers so that moderators can judge a report accurately. The unmasked text is never shown to other players.
• Reports. When a player reports another player, our servers make a copy of the evidence at that moment: the reported message and the last 40 messages of the conversation or clan chat it came from, including their unmasked original text, together with the report category and any note. Moderators use this copy to review the report. The reported player is not told who reported them, and the reporting player is only told that the report has been reviewed — not what action was taken.
• Moderator access.Only authorised moderators can read stored messages, through our internal moderation tools. Outside the evidence attached to a report, a moderator can open a player’s conversations only after recording a reason, and every such access is logged so that it can be audited.
• Moderation actions. Moderators may warn a player, remove a message, temporarily mute a player (who then cannot send private messages or write in clan chat), or suspend or ban an account, as described in our Terms of Service. We also limit how many messages can be sent per minute to prevent spam.
• Your controls. You can block any player — a blocked player cannot send you messages — and you can choose whether everyone or only your friends may message you. Deleting a conversation in the Game removes it from your own view only; the other player still sees it, and our server copy is kept until the normal retention period below ends.

4. Advertising

Town Heroes shows advertisements supplied by Google AdMob. AdMob may use your device’s advertising identifier to select and measure ads. You can reset or delete that identifier, or opt out of personalised advertising, in your device settings (Android: Settings → Google → Ads; iOS: Settings → Privacy & Security → Tracking). We do not sell your personal data.

5. Gameplay recordings and broadcasts

We record matches and turn notable moments (for example a multi-kill or a tournament final) into short highlight clips, and we show live matches on our 24/7 broadcast.

• What is shown — the gameplay itself, your character’s appearance, your character name and your clan name. If you turn off Show my name in broadcastsin the Game under Settings → Privacy, your character is shown under an anonymous name instead (for example “Hero #1234”).
• Where it is shown — highlight clips, our 24/7 broadcast, this website (Top Plays and news) and our own social media accounts, such as YouTube, Bluesky, X, Instagram, Facebook, Threads, TikTok, Telegram and Discord. We do not post anything to your personal social accounts and we never ask you to connect them.
• What is never shown — your account details, your email address and your chat messages, or any data from outside the Game. Our team can review, hold back or remove any clip.
• How long — a published clip stays online until it is removed. The match recordings we make clips from are deleted automatically once their retention period ends; chat and recording retention periods are set on our servers and kept as short as running the service allows. You can ask us to remove a clip at any time (see below).

To upload clips and run live streams on our YouTube channel, our publishing tool uses the YouTube API Services. That tool only signs in to our own YouTube channel; it does not access the Google or YouTube account of any player. By watching our content on YouTube you are subject to the YouTube Terms of Service and the Google Privacy Policy.

If you do not want a clip that shows your character to stay online, write to support@townheroes.net with a link to it and we will remove it from our channels.

6. Who we share data with

We do not sell your personal data and we do not share it for advertising outside the Game. We share only what is needed with the following service providers:

We may also disclose data where we are legally required to, or where it is necessary to establish, exercise or defend legal claims, or to protect the safety of our players.

7. Where your data is processed

Our game servers are located in Germany (European Union). Some of our service providers process data in other countries, including the United States. Where data leaves the European Economic Area or Türkiye, we rely on the safeguards those providers offer, such as the European Commission’s Standard Contractual Clauses.

8. How long we keep data

• Account and gameplay data — kept while your account exists. If you delete your account, it is removed or irreversibly anonymised within 30 days, except where we must keep records longer by law (for example purchase records for tax purposes).
• Private messages and clan chat — kept for up to 90 days, after which they are deleted automatically. Each private conversation also keeps at most its most recent 1,000 messages; older ones are deleted. Deleting a conversation in the Game hides it from you but does not shorten this period.
• Report evidence — the copy of messages attached to a report is kept while the report is open and afterwards only for as long as needed to handle it, enforce the decision and deal with any appeal.
• Messages of deleted accounts — when an account is deleted, the messages it sent are anonymised so they are no longer linked to that account, and they are deleted when their normal retention period ends.
• Sign-in codes and session tokens — minutes to weeks; sign-in codes expire after 10 minutes.
• Closed test applications — until the closed test programme ends, or earlier on request (see section 2.3).
• Newsletter — while you are subscribed; unsubscribing deletes your address, and unconfirmed sign-ups expire automatically. Sign-up statistics are kept as counts only, without addresses.
• Campaign link counts — aggregate numbers only (no personal data), kept for up to about 13 months.
• Crash and analytics data — kept according to the retention periods of the Firebase products, typically up to 14 months.

9. Your rights

Depending on where you live, you have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw consent where we rely on it. Players in the European Economic Area and the United Kingdom have these rights under the GDPR; players in Türkiye have equivalent rights under KVKK (Law No. 6698).

To exercise any of these, write to support@townheroes.net from the address linked to your account, or contact us from inside the Game so we can identify your account. We answer within 30 days. You also have the right to complain to your local data protection authority.

10. Deleting your account

You can delete your account and its data at any time from the Game’s settings screen, or by following the instructions on our account deletion page.

11. Security

Sign-in and account traffic is encrypted in transit using TLS, and so is everything our analytics, crash-reporting and advertising providers send. Sign-in tokens are never stored in readable form — only as a one-way hash — and access to our production systems is restricted to the people who need it.

Your messages are encrypted in transit. Clan chat, private messages and everything else you type — character names, clan names, friend requests — travel over the main game connection, which is encrypted in transit with modern authenticated encryption (AES-GCM, keys agreed per session). Messages are not end-to-end encrypted: they are stored on our servers and can be read by authorised moderators as explained in 3. Chat, messages and moderation, and every moderator access outside a report is logged.

Battle traffic is encrypted in transit too. The real-time connection to the battle server uses the same kind of authenticated encryption (AES-GCM, keys agreed per session). It carries no chat and no messages — only gameplay actions, together with the character name, clan name and country flag that other players already see on your profile.

No system is perfectly secure, but we work to protect your data and will notify you and the relevant authority if a breach is likely to affect your rights.

12. Changes to this policy

We may update this policy as the Game evolves. The date at the top always reflects the current version, and we will announce significant changes inside the Game before they take effect.

13. Contact

TRN Games — Istanbul, Türkiye
support@townheroes.net