Warhorn Privacy Policy

Effective Date: July 30, 2026

Last Updated: July 30, 2026

Company / Data Controller: Yeeyo Co., Ltd.

Contact Email: support@yeeyotech.com

Registered Address: Room 606, Block 3, 109 Ruanjian Avenue, Yuhuatai District

Data Protection Contact: Privacy Team, Yeeyo Co., Ltd., Email: support@yeeyotech.com

EU/UK Representative, if applicable: Not appointed. We will update this Policy if a representative is required or appointed under applicable data protection law.

Product: Warhorn

1. Overview

This Privacy Policy explains how Yeeyo Co., Ltd. ("Company," "we," "us," or "our") collects, uses, shares, stores, and protects information when you use Warhorn, a 3D hero tower-defense strategy game.

Warhorn includes guest login, account sign-in and binding, cloud saves, game progress sync, achievements, in-game shop features, in-app purchases, feedback, and analytics. These features require network access to our game backend and selected third-party services.

Warhorn is intended for a general audience aged 13 and older. It is not directed to children under 13.

2. Information We Collect

We collect information that is necessary to provide the game, operate accounts, save progress, fulfill purchases, secure the service, respond to support requests, comply with law, and improve Warhorn.

2.1 Account and Login Information

We may collect or generate:

• Guest account identifier: the game generates and stores nakama.device_id locally to create and restore a Guest Account.
• Session information: the game stores Nakama session and refresh tokens locally to keep you signed in.
• Game account identifiers: Nakama userId, public UID (publicUid), username, and related account metadata.
• Username/password login information: if you use username/password login, the username is used in the Nakama account system. The current implementation may create an internal email-format identifier such as <username>@guest.yeeyotower.local.
• Third-party login credentials: if you choose Google, Facebook, Apple, or Game Center login or account binding, we receive tokens or verification parameters from those providers and use them to authenticate or link your Account.
• Account binding status and display information, such as whether Google, Facebook, Apple, or Game Center is linked and names returned by those providers where available.

2.2 Gameplay, Progress, and Cloud Saves

To save progress, restore gameplay, and validate server-side state, we process gameplay data including:

• Cloud Saves: up to 10 save slots, currently limited to about 10 KB per slot. Save data may include nickname, gold, main castle level, region progress, tower data, battle settings, hero positions, resident house data, tutorial completion, and reward claim records.
• Server-side progress: heroes owned and hero levels, achievement completion, daily lottery state, homeland and resident house state, main castle progress, and resource progress.
• Wallet and Virtual Items: diamonds, gold, remove-ads entitlement, build entitlement, pending deliveries, shop limits, and delivery status.
• Achievement and behavior counters, such as enemy kills, stage clears, and tower construction counts.
• Time and reset states for daily rewards, weekly purchase limits, homeland production, and server-time calibration.

2.3 Purchases and Transactions

If you make in-app purchases, we may process:

• Product ID, transaction ID, purchase time, platform, order status, delivery status, refund status, and restore status.
• Apple StoreKit 2 transaction JWS, Google Play purchase token, package name, purchase time, and similar receipt or validation information.
• Account-linking identifiers used for purchase validation, such as Apple appAccountToken or Google obfuscatedExternalAccountId.
• Apple App Store Server Notifications and Google Play server notifications used for validation, delivery, restoration, refunds, and duplicate-delivery prevention.

Payments are processed by Apple App Store, Google Play, or another applicable app store. We do not collect or store full payment card numbers, bank account credentials, or app-store payment passwords.

2.4 Feedback and Support Information

If you submit feedback in the game, we collect:

• Feedback type, feedback content, and submission time.
• Email address, if you choose to provide one.
• Account identifiers such as user ID, username, or public UID.
• Context needed to investigate the issue.

Do not include government IDs, payment card information, precise address, health information, or other sensitive information in feedback unless we specifically request it for a support case.

2.5 Device, Network, Logs, and Analytics

We may collect:

• Device and app information: device model, operating system, app version, package name, language, region, screen, and performance-related information.
• Technical logs: request time, request path, error codes, backend logs, IP address, crash or exception context, and security logs.
• Firebase Analytics data: events such as login events, app launch, basic interaction events, device/app instance identifiers, and other data automatically or manually logged through Firebase Analytics.
• Facebook SDK-related information: the project includes Facebook SDK. The current Android manifest includes automatic app events and advertiser ID collection settings. The current iOS login path uses Limited Login and disables advertiser tracking preference. Final disclosure should match the actual release build and SDK settings.

2.6 Advertising and Tracking

As of the effective date of this Policy, Warhorn does not use an active advertising SDK. Warhorn may reserve the ability to add rewarded ads in future versions, such as optional ads that grant in-game rewards. If we add an advertising SDK, we will update this Policy and provide any required consent, opt-out, or platform disclosure mechanisms.

We do not currently state that we sell personal information. If future advertising or analytics settings constitute a "sale" or "sharing" under applicable law, we will update this Policy and provide the required "Do Not Sell or Share" choices.

3. How We Use Information

We use information to:

• Create, authenticate, restore, and manage Accounts.
• Save and sync gameplay progress, Cloud Saves, achievements, rewards, wallets, and Virtual Items.
• Validate in-app purchases, deliver purchased items, restore purchases, prevent duplicate delivery, process refunds, and prevent fraud.
• Provide third-party login and account binding.
• Respond to feedback, support requests, troubleshooting, and security incidents.
• Analyze use of the game, improve balance, improve features, and measure service quality.
• Detect cheating, unauthorized modifications, attacks, abnormal transactions, abuse, and violations of our Terms.
• Comply with legal obligations, platform rules, audits, dispute resolution, and regulatory requests.

4. Account and Data Deletion

You can request deletion of your Account and the personal data we store about you on our servers at any time by emailing us.

4.1 How to Request

How to request. Send an email to support@yeeyotech.com with the subject line "Data Deletion Request" and include the following so we can verify your identity and locate your data:

• Your in-game public UID and/or username
• The login method you use (Guest, Google, Facebook, Apple, or Game Center)
• The email address associated with your account, if any

4.2 What We Will Do

After we verify your identity and account ownership, we will delete or irreversibly de-identify the personal data associated with your Account that is stored on our servers within 30 days of your request, and we will confirm completion by reply email.

4.3 What Will Be Deleted

This includes your Account identifiers, profile information, Cloud Saves and gameplay progress, heroes and achievement data, wallet and virtual items, and feedback records.

4.4 What May Be Retained

We may retain limited information for longer only where required by law or for legitimate purposes, such as:

• Purchase and transaction records, kept as required for accounting, tax, refunds, dispute resolution, and fraud prevention
• Security and abuse-prevention logs, kept for a limited period
• Data needed to establish, exercise, or defend legal claims

Where retention applies, the data is kept only for the stated purpose and is not used for anything else.

4.5 Effect of Deletion

Deleting your Account is permanent and cannot be undone. Your gameplay progress, Cloud Saves, virtual currency, and any unused or non-consumed entitlements will be lost.

4.6 Third-Party Sign-In

If you sign in through a third-party provider (such as Google, Facebook, Apple, or Game Center), you can also request deletion of your data from that provider's own settings, where available. Requests made through those providers are processed as described in this section. You may also unlink your third-party account from Warhorn at any time; unlinking does not by itself delete the data stored on our servers, which is handled only through the deletion request described above.

5. Legal Bases for EEA and UK Users

If GDPR or UK GDPR applies, we rely on the following legal bases:

Where we rely on legitimate interests, we balance our interests against your privacy rights and use safeguards such as access controls, data minimization, and retention limits.

6. Third-Party Services and SDKs

Warhorn uses or may use the following third-party services. These providers may process data under their own privacy policies.

If we add rewarded ads, crash reporting, push notifications, or other SDKs, we will update this list.

7. Sharing and Disclosure

We do not sell personal information as that term is commonly used. We share or disclose information only as needed to:

• Provide game services through backend, analytics, login, store, IAP validation, hosting, and support providers.
• Complete purchases, refunds, purchase restoration, order disputes, or app-store review with Apple, Google, or applicable stores.
• Process feedback, customer support, security, data hosting, diagnostics, analytics, or technical operations through bound service providers.
• Comply with laws, regulations, court orders, regulatory requests, app-store rules, or lawful protection of users, the Company, and third parties.
• Transfer information in connection with a merger, acquisition, financing, reorganization, asset transfer, or similar transaction, subject to continued protection of the information.

8. International Transfers

Warhorn is intended for international distribution. Your information may be processed in countries or regions other than where you live. Where required, we use appropriate safeguards for international transfers, such as contractual protections, transfer impact assessments, or other legally recognized mechanisms.

9. Retention

We keep information only for as long as reasonably necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

In general:

• Account, gameplay progress, Cloud Saves, wallet, purchase, and delivery records are kept while your Account remains active or as needed for restoration, fraud prevention, dispute resolution, and legal compliance.
• Feedback is kept for a reasonable period after it is processed.
• Technical logs and analytics data are kept for operational, security, and statistical needs.
• Local save data, session tokens, and guest device identifiers remain on your device unless you uninstall the app, clear app data, or delete them through the game or operating system.

10. Security

We use reasonable technical and organizational measures to protect information, including access controls, encrypted transport, server-side permissions, purchase validation, duplicate-delivery prevention, and log minimization or masking where appropriate.

No internet service is completely secure. You are responsible for protecting your Account, password, device, and third-party accounts. If you believe your Account or purchase history has been compromised, contact us at support@yeeyotech.com.

11. Your Privacy Rights

Depending on where you live, you may have the right to request:

• Access to your information.
• Correction or update of inaccurate information.
• Deletion of your Account, Cloud Saves, feedback, or other personal information.
• Restriction or objection to certain processing.
• Portability of certain information.
• Withdrawal of consent where processing is based on consent.
• Deregistration or unlinking of third-party accounts.
• Information about how we process your data.

To exercise rights, contact support@yeeyotech.com. We may need to verify your identity and Account ownership. Deleting an Account or Cloud Saves may permanently remove gameplay progress, Virtual Items, purchase entitlements, and cloud/local data, except information we must retain for legal, accounting, fraud prevention, security, or dispute-resolution reasons.

12. EEA and UK Rights

If you are in the EEA or UK, you may also have the right to lodge a complaint with your local data protection authority. You may contact us first at support@yeeyotech.com so we can try to resolve your concern.

EU/UK Representative: Not appointed. We will update this Policy if a representative is required or appointed under applicable data protection law.

13. California Privacy Rights

If California privacy law applies, California residents may have rights to know, access, correct, delete, and limit certain uses of personal information, and to opt out of the sale or sharing of personal information.

As of the effective date of this Policy, Warhorn does not use an active advertising SDK and we do not state that we sell or share personal information for cross-context behavioral advertising. If a future version includes data uses that qualify as sale or sharing under California law, we will provide the required "Do Not Sell or Share My Personal Information" mechanism.

We will not discriminate against you for exercising applicable privacy rights.

14. Children

Warhorn is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will delete or de-identify it within a reasonable time.

Parents or guardians may contact us at support@yeeyotech.com if they believe a child has provided information or made a purchase without appropriate permission.

15. Platform Permissions

Based on the current project configuration, Warhorn may involve:

• Network access for login, Cloud Saves, resource downloads, purchase validation, feedback, and analytics.
• iOS App Tracking Transparency capability and description text, mainly related to Facebook SDK configuration. Whether the prompt appears depends on the final release build and SDK settings.
• iOS local network usage text written by the build script. If the final build does not use local network features, this should be removed or updated before release.
• Sign in with Apple and Game Center capabilities for iOS login or binding.

As of the effective date of this Policy, Warhorn does not require camera, microphone, precise location, contacts, or photo library access for its game features.

16. Changes to This Policy

We may update this Policy for feature changes, SDK changes, legal requirements, platform rules, or business changes. If changes are material, we will provide notice through the game, store page, in-app notice, or another appropriate method. The updated Policy applies from the effective date shown above.

17. Contact Us

For privacy questions, data deletion requests, or Account-related requests, contact:

• Company / Data Controller: Yeeyo Co., Ltd.
• Contact Email: support@yeeyotech.com
• Registered Address: Room 606, Block 3, 109 Ruanjian Avenue, Yuhuatai District
• Data Protection Contact: Privacy Team, Yeeyo Co., Ltd., Email: support@yeeyotech.com
• EU/UK Representative, if applicable: Not appointed. We will update this Policy if a representative is required or appointed under applicable data protection law.