Privacy Policy

This policy covers the District Fallen website, browser game and installed web app. “We” means the operator of District Fallen. It explains personal information used to run the service, your choices and your rights. It should be read with our Terms of Use.

Operator disclosure pending: the operator’s legal name and business address have not yet been published; the game name is not a substitute for those details. Privacy and support contact: officialdistrictfallen@gmail.com, also listed on Support.

1. Information we use

• Account information: when you choose Google sign-in, we receive your account identifier, name, email address and profile picture. We use these to identify your account and display your signed-in profile. We do not receive your Google password.
• Game information: campaign progress, stars, XP, coins, unlocks, cosmetics, season progress and Block Defense records. Progress is kept on your device and, when signed in, synchronized with your account.
• Transaction information: account and payment identifiers, products purchased, amount, currency, payment status and delivery or reversal records. Stripe processes payment details; our game does not receive or store your full card number or card security code.
• Technical information: hosting, account and payment services process connection and security information such as IP addresses, request details and errors. The game also stores a local diagnostic report that can include device/browser details, recent game events and errors. You may choose to share that report when reporting a problem.
• Communications: information you choose to provide by email to officialdistrictfallen@gmail.com, including account details, receipts or problem reports.

2. Why we use information

We use information to provide sign-in and account services, save and synchronize progress, deliver purchases, reconcile refunds, protect accounts, investigate errors and abuse, and comply with applicable legal obligations. We do not use game progress to make decisions producing legal or similarly significant effects on you.

Where data-protection law requires a lawful basis, account services and purchase delivery rely on performance of a contract; required transaction records rely on legal obligations; proportionate security, fraud prevention and service maintenance rely on legitimate interests, balanced against your rights. Where consent is required for additional processing, it must be obtained separately and can be withdrawn without affecting prior lawful processing. This policy alone is not a consent request.

3. Device storage and external requests

The game uses browser storage for progress, preferences, sign-in sessions and local diagnostics. Guest progress stays on the device unless you later sign in and synchronize it. Clearing browser data, changing browsers or uninstalling the web app can remove local progress and settings. Signing out does not itself delete your account or cloud save.

Sign-in and checkout providers may use cookies or similar technology for authentication, security and payment processing. Website artwork and fonts are delivered through external services, including Google Fonts; these services receive connection information when your browser requests their resources. Browser controls can restrict storage, but doing so may prevent sign-in, checkout or saving from working.

We have not added advertising pixels or a marketing analytics SDK to the game or website. This does not mean that hosting, authentication or payment providers process no technical information or set no cookies. If optional tracking is introduced, the required notice and consent controls must be provided before it is used.

4. Sharing and service providers

Lovable Cloud provides hosting and account-backed services; Google provides sign-in and font delivery; Stripe provides checkout and payment processing. Asset-delivery and infrastructure providers also receive information needed to serve requests. Providers process data under the terms applicable to their role, and some act as independent controllers for their own security or legal purposes.

We may disclose information where lawfully required, to investigate fraud or protect legal rights, or in a business transfer subject to applicable privacy protections. We do not sell personal information or share it for cross-context behavioral advertising.

5. International processing

Service providers may process information outside your country, where protections can differ. Where applicable law requires safeguards for international transfers, those transfers must rely on an appropriate lawful mechanism, such as adequacy arrangements or approved contractual safeguards. The operator’s provider locations and applicable transfer details still need to be confirmed and published; this policy does not promise that data stays in a particular country.

6. Retention and security

Account and save information is retained while needed to provide the service. Transaction, security and dispute records may need to be retained longer for accounting, legal obligations, fraud prevention or legal claims. Retention must be limited to those purposes; specific retention schedules have not yet been published. Backups and provider records may follow separate retention cycles.

Account access controls and verified payment processing help protect information. No online service or device storage is completely secure. Protect your Google account and device, and do not share sign-in codes, passwords or payment credentials.

7. Your choices and rights

You can play as a guest without creating a District Fallen account, decline optional purchases, sign out and clear local browser data. Clearing local data does not erase cloud records. Depending on the law that applies to you, you may have rights to access, correct, erase or receive a portable copy of personal information, restrict or object to processing, withdraw consent, and complain to your local data-protection authority.

Rights may be subject to identity verification and legal exceptions, including records required for tax, fraud prevention or legal claims. There is currently no self-service account-deletion option. To exercise a privacy request, email officialdistrictfallen@gmail.com or see Support.

8. Children and young players

The game contains fictional combat and optional purchases. It is not designed to collect personal information from children below the age at which they can lawfully use the account service without verified parental consent. Where parental consent is legally required, a child should not create an account or submit personal information unless an appropriate consent process is available. A statement in this policy does not replace required age or parental-consent checks.

9. Changes and questions

Changes will be reflected by the date above. Material changes require additional notice or consent where applicable law requires it. For purchase information, see Purchases & Refunds; for contact availability, see Support.