Privacy
Last updated: October 26, 2026
The game
This policy covers the Slashin’ game for iOS and Android and this website. Slashin’ is made by Paweł Sikora, who is the controller of your data. For anything about your data, write to contact@slashingame.com.
Your game account
On first launch, the game creates an account for you through Firebase Authentication, a Google service. It does not ask for your name or email address. Under this account we store a random player ID, your characters and their saved games, your crystals, gold and items, the @name you choose, your leaderboard and arena results, your auction house offers and your purchases. We use this data to run the game, keep your progress safe, move it to a new phone and stop cheating.
Signing in with Apple or Google
Linking your account to Apple or Google is optional. We record which of them you linked. Firebase Authentication keeps the identifier that Apple or Google gives us and, if the service shares it, your email address. We do not use that address to write to you or for advertising.
What other players see
Leaderboards and the arena show your @name, or “Anon” if you have none, together with your characters’ names, appearance, equipment and scores. Other players can also see the items you put up in the auction house.
Purchases
Crystals are bought through the App Store or Google Play. The store handles the payment, and we never see your card or payment details. We receive the store’s signed receipt, check it and keep a record of the purchase, so we can credit your crystals and handle refunds and fraud.
Advertising
The game shows an ad only when you choose to watch one for a reward. Ads come from Google AdMob. AdMob may collect your IP address and the approximate location derived from it, device and advertising identifiers, how you interact with ads, and diagnostic data. In the EEA, the UK and Switzerland, the game asks for your consent with Google’s form before the first ad. You can change your choice in the game’s settings under Account, Ad privacy. On iOS, the game does not ask for permission to track you and does not use Apple’s advertising identifier. Google’s own policy is at policies.google.com/privacy.
Analytics and crash reports
The game uses Google Analytics for Firebase and Firebase Crashlytics. They collect app events such as the first launch, sessions, screens and purchases, together with your device model, system version, game version, an app instance identifier and an approximate location derived from your IP address. When the game crashes, they send a crash report. We use this to fix errors and to understand how the game is played, not to show you ads.
Notifications
If you allow notifications, we store your device’s notification token (Firebase Cloud Messaging) and the kinds of notifications you chose. You can switch them off at any time in the game’s settings or in your phone’s settings.
Security and fair play
The game uses Firebase App Check with Apple App Attest or Google Play Integrity to confirm that requests come from a genuine copy of the game. It also stores a random installation ID that keeps your cloud save tied to one phone. On Android, the game keeps a small recovery key in Google Block Store, so you can get your account back after reinstalling. If your Google backup is on, the key also moves to your next phone.
Writing to us
If you write to us, we receive your email address and your message. When you write from the game, the email also includes your player ID, your @name, the game version, your phone model, its system version and the game’s language, so we can find your account. We use this only to answer you.
Where the data is kept
Game data is processed by Google on Firebase and Google Cloud servers, including in the United States. Google processes it under its terms for Firebase and AdMob.
How long we keep it
We keep your account data for as long as your account exists. You can delete your account in the game: open the settings, go to Account and choose Delete account. Your characters, items, crystals, gold, offers and @name are then deleted. Our audit log keeps a record of your account’s economy operations and purchases, without your name, email address or device, because it is the other side of trades with other players and is needed for accounting and fraud checks. Google deletes analytics data and crash reports after a limited time.
Legal bases
We process account, game, purchase and security data because we need it to provide the game to you. We process analytics and crash data based on our legitimate interest in a game that works. Personalised ads in the EEA, the UK and Switzerland rely on your consent, which you can withdraw at any time.
Children
Slashin’ is not directed at children under 13, and we do not knowingly collect their data.
Your rights
You can ask us for a copy of your data, ask us to correct or delete it, limit its use or object to it. Write to contact@slashingame.com. You can also complain to a data protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO).
Website
The Slashin’ website does not use third-party analytics or advertising trackers. We only count clicks on store links (slashingame.com/get): the time, the source named in the link, the device type (Android, iOS or computer), the country and the domain of the page the click came from. We do not store IP addresses or use cookies or identifiers, so a click cannot be linked to you. The hosting provider processes technical request data needed to deliver and protect the site.
Release notification
At your request, we send an email confirmation through Brevo. Confirming the link adds your address to the release notification list for your selected platform. We pass your email, selected platform, language, and consent version and timestamp to Brevo. This does not subscribe you to a general newsletter.
Unsubscribing and deletion
You can withdraw consent using the unsubscribe link in an email or by contacting us to request removal. The list is used only to notify you when Slashin’ launches on your selected platform. Once that purpose is complete, we will remove the list data unless you separately agree to another purpose.
Earlier signups and playtesting
Earlier consent to a beta-opening notification keeps its original scope. We do not transfer those signups to the release list. Playtesting enquiries are separate correspondence and do not subscribe you to a notification list.
Form protection
When signups are enabled, we limit repeated attempts. We retain protected hashes of the email and IP address, rather than their plain values, together with a counter and expiry. These hashes are no longer needed after at most one hour and are deleted on subsequent attempts. This website does not maintain a second mailing list.
Contact
For data questions, write to contact@slashingame.com.