Privacy Policy

Battleship for Android · operated by Kodonic

This policy explains what information the Battleship mobile game (“the app”) collects, why, and the choices you have.

1. Playing offline (guest)

If you continue as an offline guest, your captain name, settings, saved games and statistics are stored only on your device. Nothing is sent to us.

2. Online account

To play online (private rooms, battle requests, quick battles) you create an account. We store:

Email address — to sign in and to send password-reset codes. Never shown to other players.
Password — stored only as a salted, one-way hash (scrypt). We cannot see your password.
Google account identifier — only if you choose “Continue with Google”.
Display name and public handle — visible to other players.
Game activity — rooms, invitations, matches, moves, results, statistics and leaderboard points (your points and rank are visible to other players). While you are signed in, the result of each solo game against the computer (win, loss or surrender, AI level and when it was played) is also sent to us when your phone is online, so we can see how the game is played.
Friend invites — your invite code, which player invited you (if any) and the bonus points paid for invites. The player who invited you can see your display name and whether you have played. Opening an invite web page records only the code and the time, not who opened it.
Push notification token — if you allow notifications, a device token so we can notify you about battle requests, your turn and results.

3. How we use it

Only to run the game: authentication, matchmaking, delivering moves and notifications, showing statistics, preventing abuse (rate limiting) and keeping the service secure. We do not sell your data, show ads, or use it for advertising or profiling.

4. Service providers

Notifications are delivered through Google Firebase Cloud Messaging, which receives the device token and the notification text. If you use Google sign-in, Google verifies your identity. Our servers are hosted by our infrastructure provider. Each processes data only to provide its service.

5. Technical logs

Servers keep short-lived technical logs (time, request id, IP address, error codes) for security and troubleshooting, deleted within 30 days.

6. Security

All traffic is encrypted in transit (HTTPS/WSS). Access to production systems is restricted. Sessions use short-lived tokens; refresh tokens are stored on your device in Android’s secure keystore.

7. Retention and deletion

Your account data is kept while your account exists. You can delete your account at any time in the app (Settings → Delete online account, immediate) or request deletion on the account deletion page (carried out after 90 days; you can cancel until then). Deletion removes your email, password hash, Google link, profile, push tokens and sessions. Match records already played against other players remain in anonymised form (“Deleted player”) so their history stays correct.

8. Children

The app is not directed at children under 13 and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will delete it.

9. Your rights

You may request access, correction or deletion of your data by contacting us. Most changes (display name, handle, password, deletion) are available directly in the app.

10. Changes

We may update this policy; the date below shows the latest version. Significant changes will be announced in the app.

11. Contact

Kodonic · gaurav@kodonic.com