Privacy Policy

Who is responsible

TenebraTechnologies s.r.o., Majerníkova 3039/28, 841 05 Bratislava, Slovenská republika, IČO 57363544, is responsible for this processing. Contact support@tenebratechnologies.com about privacy, accounts or your data rights.

Local gameplay and optional accounts

Play as guest does not require an online account. The game stores progress, settings, discoveries and recovery saves on the device. Android may also include app data in operating-system backups or device transfers, depending on your device and backup settings. If you sign in on a version that supports cloud saves, the game syncs a copy of that account's gameplay checkpoint to Supabase so you can continue on another device. Guest progress stays separate.

If you create or use an account, Supabase processes your email, account identifier, sign-in provider, creation/verification information and authentication records. Email/password accounts send their password to the authentication service over HTTPS for verification. The game does not save passwords or authentication tokens in its files; session tokens are held in game memory.

Optional Google sign-in supplies basic profile information to Supabase, which may include your name and profile picture URL. The game uses your account identifier to associate a display name, avatar, achievements and ranking results with your profile. Display name, avatar and eligible ranking results can be visible to other players.

Authentication/hosting services receive technical data needed to serve and protect requests, including IP addresses, request times, user-agent/network details and sign-in/security events. Support receives your email and information you choose to send. Never send support passwords, tokens or verification codes.

Purposes and service providers

Account data provides registration, sign-in, recovery, account deletion, cloud saves and online profile features. Limited technical records protect the service and help investigate failures. Correspondence helps answer support and data-rights requests. Processing relies on providing the requested account service, our legitimate interests in operating and securing it, and applicable legal obligations. We do not sell personal data or use account information for advertising profiles.

Supabase hosts accounts and the private database on our behalf. The primary database is currently in Ireland (EU). Supporting services and authorised subprocessors may process data elsewhere under Supabase's data processing terms and transfer safeguards. Google handles Google sign-in under its Privacy Policy. Our email provider processes support messages. We may disclose data where required by law.

Retention and deletion

Delete the game's local copies through Settings or Android storage controls. Any operating-system backup copies are managed separately through your device or backup provider. You can delete your online account without installing the game. The page uses an email verification link and asks you to confirm. Contact support if you cannot verify your email or need help completing deletion.

Deleting the online account removes the authentication identity, linked provider metadata, profile, associated achievements and rankings, and the cloud save. Local copies can be deleted separately on each device. Limited security and operational records and correspondence may remain where necessary for security, handling the request or legal obligations. They are not used for marketing or to restore a deleted account. Provider-managed operational logs expire under the provider's applicable retention. We maintain no separate gameplay analytics database.

Advertising and purchases

The Google Play closed beta (0.4.0-beta.1) contains no advertising SDK, purchases, subscriptions or RevenueCat integration. Optional rewarded ads are planned later; we will update this policy and the privacy controls before enabling them.

A separate app labelled Evolution Waves Ads Test is for advertising development. Choosing Load test ad contacts Google AdMob and may transmit device identifiers, IP/network data, ad requests and interactions to Google. Demo ads grant no gameplay rewards. This is separate from the Google Play beta. See Google's partner-services information.

Audience, rights and security

The intended audience is 13+, independently of the store content rating. Obtain a parent or guardian's permission for an online account where local law requires it; guest play remains available. Contact us if a child under 13 has supplied account data.

Where applicable, you can request access, correction, deletion, restriction or a copy of your data, and object to processing based on legitimate interests. Contact support; we may verify ownership. You can complain to your supervisory authority, including the Office for Personal Data Protection of the Slovak Republic.

Account requests use HTTPS. No online service can guarantee absolute security. Material changes will be dated here and new data uses described before they are enabled.