Privacy Policy
What data we collect, why we process it and how we protect it.
This policy explains how personal data is collected, processed and protected in Antik Çağ, operated by XSunucu İnternet Teknolojileri. See also the Data Protection Notice for your statutory rights and the legal bases we rely on.
1. Data we collect
Account data: username, e-mail address, password hash, registration date, account status.
Game data: cities, resources, armies, clan membership, messages, reports, ranking points.
Technical data: IP address, browser and device information, app version, session records, error logs.
Mobile app data: installation identifier, notification (FCM) token, device model, Android version.
Payment data: order number, amount, payment method, payment status and bank transfer reference.
Support data: support tickets and their message content.
2. Data we do not collect
Card number, expiry date and CVC never reach our servers. Card payments are completed on the PCI-DSS compliant payment provider's own secure page. For bank transfers we store only the sender name, bank name and the receipt you optionally upload.
3. Purposes of processing
Creating your account and maintaining your session.
Running game mechanics: construction, production, combat, trade and ranking calculations.
Detecting multi-accounting, bots and cheating to keep competition fair.
Verifying purchases, issuing invoices and handling refunds.
Sending notifications and answering support requests.
Meeting legal obligations.
4. Cookies and local storage
Essential cookies: session cookie and CSRF token. Login is impossible without them.
"Keep me signed in" cookie: a long-lived remember cookie created when you choose it; deleted when you log out.
Interface preferences: your language, compact layout and reduced-motion choices.
Advertising cookies: only where ads are shown and according to your choice in the consent screen.
5. Third parties
Google AdMob — ad delivery and reward verification.
Google Play Billing — in-app purchases on mobile.
Google Play Integrity — app integrity verification.
Firebase Cloud Messaging — push notification delivery.
Stripe — card payment processing.
Hosting provider — server and database hosting.
Only the minimum data required for the service is shared with these providers. Your data is not sold for marketing purposes.
6. Retention
Active account data is kept while the account is open.
When an account is deleted, game data is anonymised or erased within 30 days at the latest.
Payment and invoice records are kept for 10 years under tax legislation.
Security and access logs are kept for 12 months.
Hall of Fame archives of closed worlds are retained permanently with username and ranking information.
7. Security
All traffic is encrypted with HTTPS. Passwords are stored as irreversible hashes. Admin panel access is limited to authorised accounts and actions are written to an audit log. Payment confirmations are verified through signed provider notifications.
8. Your rights
You have the right to access, correct, erase and object to the processing of your data. Write to [email protected]. The full list of rights and the application procedure are set out in the Data Protection Notice.
9. Children's privacy
We do not knowingly collect data from anyone under 13. If we learn of such an account we close it and delete the data.
10. Changes
This policy may be updated; material changes are announced in-game.
Contact: [email protected] · +90 850 532 1732
XSunucu İnternet Teknolojileri · Cumhuriyet Mah. Alpt. Küme Evleri Toki D Blok No: 1DM Beşikdüzü Trabzon Türkiye