IronWave Privacy Policy
Version 11 in English · effective November 5, 2026. This is the translation of version 11 in Portuguese (November 5, 2026), with section 11 for players in other South American countries, section 12 for the European Union and the United Kingdom, and section 13 for the United States. Version 10 did not cover the time zone name, the device type or the record of opened notifications; version 9 did not cover the North America and Europe servers, the GDPR, US state laws or consent for ads, and accepted players from age 12. If the versions differ, the one that protects you more applies.
This policy explains what data the game IronWave collects, why, who we share it with and what you can ask for at any time. It is written to be read, not to protect us from you: if something is not clear, write to the address at the bottom and I will answer.
The controller of your data is João Vitor Avelar, an individual based in Brazil, referred to in this text as "we". The legal basis is the performance of the contract (there is no online game without an account) and our legitimate interest in keeping the service secure, under Brazil's General Data Protection Law (Law 13,709/2018, LGPD). If you play from the European Union, the United Kingdom or the United States, see also sections 12 and 13; from another South American country, section 11.
IronWave has three servers, each with its own accounts, progress, rankings and guilds: South America (in São Paulo, Brazil), North America (in Ashburn, Virginia, USA) and Europe (in Frankfurt, Germany). Your game data stays on the server you choose when you sign in (the app suggests the nearest one, and you can switch); a DON Account also belongs to a single server, the one chosen when it is created.
1. What we collect
We do not ask for your phone number, ID or address. Your email only comes in if you create a DON Account (email and password, on the website or in the game), which keeps your captain and lets you sign in from any device, or if you sign up for Early Access, the only place where we ask for a name. We do not ask for your date of birth. If you sign in with Google, Google does not give us your email, name or photo: it confirms the sign-in and sends us only the code that identifies the account, and that code is all we keep.
| Data | What for | How long |
|---|---|---|
| A random identifier created at installation, stored in scrambled form (a cryptographic hash) | recognizing your account and device when you open the game | while the account exists |
| The Google account code, for players who sign in with Google (no email, name or photo) | recognizing your account when you sign in with Google, on any device | while the account exists |
| A random Google Play Games code, for players who have the Play Games app (it says nothing about you; we keep only a scrambled version of it) | taking you back to the same captain when you change devices or reinstall the game, with no password | while the account exists |
| DON Account email (on the server chosen when the account was created) | signing in to the game, confirming the email is yours, sending the new-password link and warning you about account changes (password or email change, deletion request, someone trying to create an account with your email). We do not send marketing. | while the account exists |
| The name and Google Account email from the Early Access sign-up (the Early Access page on the website) | inviting you to the IronWave closed test on Google Play: the email goes on the store's testers list, and the name only helps us know who is who on the list. We do not send marketing. | until the game launches, or earlier if you ask to leave the list |
| DON Account password, stored only as an encrypted hash (one-way scrambling, salted per account): we cannot see your password or give it back, only let you create a new one | confirming it is you when you sign in and when you change the account | while the account exists; when you change it, the old one is discarded |
| Captain name and game data (ship, level, gold, items, quests, achievements, arena and battleground results) | it is your progress; without it there is no game | while the account exists |
| Text you write for others to see: your captain name and, if you found or run a guild, its name, tag and notices | showing it to other players (section 5) | while the account exists; guild text, while the guild exists |
| The language chosen in the game and your device's time zone (the offset in hours from universal time and the time zone name, such as “America/Sao_Paulo”, no location) and the device type (phone or computer, through Google Play Games on PC) | writing phone notifications and game messages in your language; showing times in your local time and not sending notifications in the middle of your night; knowing whether the game works well on each device type and in each time zone (only as added-up numbers) | while the account exists; it updates by itself when you change your device's language or time zone |
| IP address and device model/version, logged on security events (sign-in, credential change, lockout) | preventing account takeover, fraud and cheating | IP for 6 months; model and version for 90 days |
| Scrambled hashes of the network and the installation (they cannot be turned back into the IP address or the device) | preventing the same person from buying from themselves at the Dockside Fair or using their own friend code | up to 7 days; the one tied to a Dockside Fair sale stays with that sale's record |
| Messages between players (the game's Messages inbox) and reports | delivering the message and looking into abuse reports | 90 days; a reported message is kept while the report is open |
| Live chat (Global, Guild and private conversations): sender, recipient, text and time; if someone reports, that author's latest lines in that chat (section 6) | delivering the message to whoever is online; moderation (looking into abuse, reports and orders from authorities) | 30 days; a reported excerpt is kept while the report is open |
| Purchases (your purchase history): the order and product identifiers Google sends us, for diamonds, Premium, the Captain's Path and cosmetics | crediting what you bought and handling refunds | 5 years (Brazilian tax and consumer protection obligations) |
| The Android advertising ID, used by the ad provider | showing the ad you chose to watch and preventing reward fraud | see section 3 |
| The device's notification code (the identifier Firebase Cloud Messaging creates to deliver notifications to your phone) and the types of notifications you left on; whether you opened each notification by tapping it | telling you on your phone when your guild is attacked, an event or the world boss is about to start, an offer is ending, a friend invites you to play, a message arrives, your friend request or guild request is accepted, the daily reward is waiting in your first days or there are gifts waiting at port; knowing whether notifications help (only as added-up numbers) | while notifications are on; deleted when you turn them off, sign out or when the code expires |
| Crash reports: the point in the code where the game froze or hit a serious error, the device model and system, the game version and a random installation identifier | finding and fixing bugs | up to 90 days, in Firebase Crashlytics |
| Game opening steps: a random identifier created on first launch (not the device's or the advertising one), the game version and the time of each step (opened the game, finished loading, saw the servers, tapped Play and which way, got in or not and the general reason, created the captain, answered the tutorial question); once you sign in, these steps are linked to your captain | learning where in the opening players give up and fixing what gets in the way | 1 year |
Phone notifications and crash reports: notifications only arrive if you allow them on Android, and each type can be turned off in Options › Notifications; we never send more than three a day or at night (10 pm to 8 am, in your device's time zone). When the app crashes or hits a serious error, we send Firebase Crashlytics (Google) a technical report: the point in the code where it happened, the device model and system, the game version and a random installation identifier. The report carries no name, email, account or conversation, is used only to fix bugs and is deleted within 90 days.
What we do not collect: we do not read your calendar, photos, files or location. We do not ask for camera, microphone or contacts permission. We do not sell any data to anyone. From your time zone we keep the offset in hours and the zone name (such as “America/Sao_Paulo”), which show at most the region of the world, never where you are.
2. In-game purchases
Payment is made through Google Play, not through us: your card, billing address and tax details stay with Google, and we never see them. We only receive confirmation that a given purchase was approved, so we can credit your account with what you bought: diamonds, Premium, the Captain's Path (the paid part of the season pass) or a cosmetic.
Refunds and cancellations follow Google Play's rules. When a refund is completed, Google lets us know and the corresponding amount is removed from your game account.
3. Ads
IronWave ads are optional and rewarded: no ad ever shows up by itself. An ad only plays when you tap to watch it, and it is used for two things: opening a chest (at port) and unlocking an hour of auto mode (at sea). Each use has a daily limit.
Ads are provided by Google AdMob and are non-personalized: we do not ask Google to pick ads based on your profile or interests. Even so, AdMob uses your device's advertising ID and data about the ad itself (whether it was watched to the end, for example) to limit how often an ad repeats, measure the impression and prevent fraud. That processing follows Google's privacy policy.
When you watch to the end, Google tells our server that the ad was seen, together with a code that identifies your game account (no name, email or device data). That notice is what delivers the chest or the auto mode hour: the reward never comes without it.
Premium subscribers get the same chests and hours without watching anything.
Consent for ads. In the European Union, the European Economic Area, the United Kingdom and Switzerland, and in US states whose law requires it, the game shows Google's privacy message (Google's consent platform, called UMP) before the first ad, and never when the game opens. In it you accept, refuse or choose by purpose how data is used for ads. If you refuse, or do not answer, Google shows only non-personalized (or limited) ads, and the ad reward is delivered just the same. You can review your choice at any time in Options › General › Ad privacy. Outside those regions, ads remain non-personalized, as described above.
You can delete or reset your advertising ID at any time in Android Settings › Google › Ads. That does not stop you from watching the ad and getting the reward.
4. Who we share with
| Who | What they receive | Why |
|---|---|---|
| Google Play | purchase data; the Early Access email, on the testers list | processing the payment; opening the closed test to people who signed up |
| Google AdMob | advertising ID and ad data | showing the rewarded ad |
| Google Play Games (only if you have the Play Games app) | the achievements you complete and a random code that links your Play Games profile to your game account (never name, email or password) | showing achievements in Play Games; taking you to the same captain on another device. You can turn it off in the Play Games settings |
| Google Firebase (Cloud Messaging and Crashlytics) | the device's notification code and the notification text; crash reports | delivering phone notifications; fixing bugs |
| Oracle Cloud (São Paulo, Brazil; Ashburn, USA; Frankfurt, Germany) | hosts the server you choose, with the data above | running the game |
| Website hosting (donroger.com.br) | your email and the message text; the Early Access name and email | sending DON Account emails (confirmation, new password and account notices); keeping the Early Access sign-up list, in a file that is not open on the internet |
| Cloudflare (Turnstile) | technical browser data and the IP address, only on the website pages for creating an account, forgotten password and resending the email | checking that whoever fills in the form is not a bot |
We do not sell any data and we do not pass data to anyone for advertising. Apart from what is in the table above (AdMob for the ads you choose to watch, section 3, Firebase for notifications and crash reports, and Play Games for achievements and returning to the same captain), nothing leaves the game for another company.
Game data stays on the server you choose: in Brazil (South America), the United States (North America) or Germany (Europe). Administration, support and moderation are done from Brazil, and the website's Contact us form goes through the South America server. Google Play, Play Games, AdMob, Firebase and Cloudflare may process data outside your country, under their own policies. If you play from the European Union or the United Kingdom, section 12 describes the safeguards for these transfers.
5. Other players
Your captain name is public inside the game: it shows to anyone in the same sea, in the rankings, in the arena and on the battleground. Pick a name you do not mind showing, and do not put any personal data in it.
Guild names, tags and notices are also public inside the game. Messages you send are read by the recipient and, if they report them, by moderation.
6. Chat and messages
The game has a live chat (Global, Guild, Team and private conversations) between players who are online. Chat messages go through our servers to be delivered, and those in Global, Guild and private conversations are kept for 30 days, only for moderation (only the team can see them, and every lookup is logged); after that they are deleted. Team messages are not kept. In the game, the conversation disappears from the screen when you leave. If someone reports a message, we keep that author's latest lines in that chat, together with the report, for moderation to review. Messages with offensive words are refused automatically. The team can suspend a player's right to talk in the chat for a while. Messages between players (the game's inbox) are kept for up to 90 days. You can block any player and choose who can send you messages in Options.
7. Your rights
You can ask at any time for: confirmation that we process your data, access to it, correction, portability, information about who we share it with and deletion. You can also object to processing and withdraw any consent you gave, such as the one for notifications.
Deletion is inside the game, in Options › Account › Delete account: the account is locked right away and the data is deleted within 7 days, a period that exists only so you can change your mind. After that there is no way to recover your progress, and purchased diamonds are not refunded because of the deletion.
If you have a DON Account, you can also delete it on the website, at Delete account, with your email and password. A DON Account that never entered the game is deleted right away; with a captain, the same 7-day period applies, and entering the game before then cancels the deletion. You can also change your password and email there.
Without the game installed, you can also ask for your account and data to be deleted by email at dev@donroger.com.br, with the subject "Delete my IronWave account", writing from the Google account email or the DON Account email linked to the game, or telling us your captain's name and server. We confirm the request and delete the account within 15 days, with the same result as deleting it in the game.
For any other request, write to the address at the bottom. Handling your requests is free. We answer within the deadlines set by the law of your country (see sections 11, 12 and 13) and, in Brazil, within 15 days.
8. Children and teenagers
IronWave is not directed to children under 13 and does not knowingly collect data from children. If you are a parent or guardian and believe a child created an account, write to the address at the bottom and we will delete it. Players aged 13 to 18 play with the permission of a parent or guardian (Terms of Use, section 2).
9. Security
Communication with the accounts, purchases and ads server is encrypted; the sea connection (positions and combat, with no personal data) is not yet, and will be in an upcoming version. Credentials are stored in scrambled form that cannot be turned back into the original value, including the DON Account password, stored only as an encrypted hash. The links we send by email work only once and expire quickly (48 hours to confirm the account, 24 hours to change the email, 1 hour to create a new password); several wrong passwords in a row lock the account for a few minutes. The website does not keep your password: when you sign in to your DON Account on the website, it only remembers your email and the server you chose, and only while the browser tab is open. Administrative access to the server is restricted and logged.
No system is perfect: if there is an incident that puts you at risk, we will notify you and the competent data protection authority, as the law requires (for players in Europe, within 72 hours).
10. Changes to this policy
If something relevant changes, we announce it on the website before the change takes effect, and the date at the top of this page changes. Earlier versions are available on request.
11. If you play from another South American country
IronWave's South America server is in Brazil. If you live in another South American country and play on it, your data is transferred to Brazil so the game can work (performance of the contract you accept by playing), and Brazil has a general data protection law (the LGPD) and a supervisory authority (the ANPD). We treat your data the same way, for the same purposes and with the same periods as in this policy, and we also respect the rights your country's law gives you. To use them, just email dev@donroger.com.br; we may ask you to confirm the account is yours before answering. The Spanish version lists each country's law in detail: Argentina (Law 25,326; the Agency for Access to Public Information is the supervisory body), Chile (Law 19,628), Colombia (Law 1581 of 2012; Superintendence of Industry and Commerce), Peru (Law 29733; National Authority for Personal Data Protection), Uruguay (Law 18,331; Personal Data Regulatory and Control Unit), and Bolivia, Ecuador, Paraguay and Venezuela.
12. If you are in the European Union, the European Economic Area or the United Kingdom (GDPR)
If you live in the European Union, the European Economic Area (EEA) or the United Kingdom, in addition to the rest of this policy, the General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR") applies and, in the United Kingdom, the UK GDPR and the Data Protection Act 2018.
Controller: João Vitor Avelar, an individual, Rua Doutor Fausto Dias Ferraz, Brazil,
dev@donroger.com.br.
Representative in the EU and the United Kingdom (Article 27 GDPR): [REPRESENTANTE NA UE E NO REINO UNIDO:
a preencher]. You can contact the representative, instead of us, about any matter in this policy.
Legal bases, by purpose
| What for | Which data | Legal basis (Article 6(1) GDPR) |
|---|---|---|
| Creating and keeping the account, playing online, saving progress, delivering what you bought or earned, delivering messages and chat | identifiers, DON Account email and password, game data, purchases, messages | performance of a contract (point b) |
| DON Account emails (confirmation, new password, account security notices) | performance of a contract (b) | |
| Security: preventing account takeover, fraud, cheating and bots (Turnstile) | IP, device model and version, scrambled hashes, technical browser data | legitimate interests (f): protecting accounts, players and the service |
| Moderating chat and messages, looking into reports | chat (30 days), messages (90 days), reports | legitimate interests (f): keeping the game safe and respectful; legal obligation (c) when there is an order from an authority |
| Crash reports and game opening steps | technical report, random identifier, game version | legitimate interests (f): fixing bugs and improving the start of the game |
| Keeping purchase records for 5 years | order and product | legal obligation (c), under Brazilian tax and consumer protection law, and legitimate interests (f) in answering complaints |
| Phone notifications | device notification code, notification types turned on | consent (a): the Android notification permission, which you can withdraw at any time |
| Personalized ads | advertising ID and ad data | consent (a), through Google's privacy message (section 3); without it, only non-personalized or limited ads |
| A rewarded ad you choose to watch (delivering the reward, limiting repeats, preventing fraud) | game account code, ad confirmation | performance of a contract (b) and legitimate interests (f) |
| Early Access sign-up | name and email | consent (a): you ask to join the list and can leave whenever you want |
| Answering Contact us and your requests | email and message text | legitimate interests (f) in answering; legal obligation (c) for rights requests |
Where the basis is legitimate interests, you can object to the processing (Article 21); where it is consent, you can withdraw it at any time, without affecting what was done before.
Your rights
You can ask for access to your data and a copy of it (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), portability in a commonly used format (Article 20), and you can object to processing (Article 21). IronWave does not make decisions based solely on automated processing with legal or similarly significant effects on you (Article 22): the automatic filter only refuses a message with offensive words, and every penalty is decided by a person (Terms of Use, section 5).
To make a request, use the deletion option in the game (section 7), the DON Account pages on the website, or write to dev@donroger.com.br (or to the representative). It is free. We answer within one month; for a complex request, this can be extended by two more months, and we tell you why within the first month. We may ask you to confirm the account is yours (through the account email or your captain's name).
Complaining to an authority
You have the right to lodge a complaint with the data protection authority of the EEA country where you live, work or where the issue happened (the list is at edpb.europa.eu) and, in the United Kingdom, with the Information Commissioner's Office (ico.org.uk). We would like you to talk to us first, but you do not have to.
Where the data is kept, and international transfers
- Europe server: if you play on it, your game data is stored in Frankfurt, Germany (European Union), on Oracle Cloud, which processes the data on our behalf under a data processing agreement.
- Another server: if you choose to play on North America (USA) or South America (Brazil), your data goes to that country because you asked to play there (Article 49(1)(b), necessary for the contract), with the same protections as in this policy.
- Access from Brazil: the controller is in Brazil, and administration, support and moderation are done from there; the website's Contact us form goes through the South America server, and DON Account emails are sent through the website hosting. For these transfers we rely on the European Commission's adequacy decision for Brazil, once it is in force, and, until then, on the Commission's standard contractual clauses (with the UK addendum) and on Article 49(1)(b) for what is necessary for the contract you ask for.
- Google, Cloudflare and Oracle are US companies: transfers to them follow the EU-U.S. Data Privacy Framework (and its UK Extension) or standard contractual clauses, under each company's policies and contracts.
You can ask for a copy of the safeguards used by writing to the address at the bottom.
How long we keep data
The period for each piece of data is in the table in section 1. In short: account data, while the account exists (and deleted 7 days after a deletion request); live chat, 30 days; Messages, 90 days; the IP of security events, 6 months; device model and crash reports, 90 days; game opening steps, 1 year; purchase records, 5 years; the Early Access sign-up, until launch.
Age
IronWave is for people 13 or older. In EEA countries where the age to give consent on your own to online services is higher than 13 (up to 16), players below that age need a parent's or guardian's authorization for the consents in this policy (phone notifications and personalized ads).
13. If you are in the United States
This section addresses the California Consumer Privacy Act (CCPA, as amended by the CPRA) and the general privacy laws of other states (such as Virginia, Colorado, Connecticut, Utah, Texas and Oregon), to the extent they apply to us.
What we collect, by category
| Category | In IronWave | Collected? |
|---|---|---|
| Identifiers | random installation identifier, Google account code, Play Games code, DON Account email, captain name, IP address, advertising ID | yes |
| Customer records | DON Account email; Early Access name and email | yes |
| Commercial information | purchase history (order and product) | yes |
| Internet or other electronic network activity | game data, chat and messages, crash reports, game opening steps, technical browser data on the account pages | yes |
| Sensitive personal information | the DON Account email together with its password (account log-in), used only so you can sign in | yes, only to provide the service |
| Precise geolocation, biometric data, audio and video, professional or education data, inferences and profiles | — | no |
Sources: you, your device and Google (purchase confirmations, the Google sign-in code and ad confirmations). Purposes: those in section 1 (providing the game, security, debugging, support and legal obligations). Who receives it: only the service providers in section 4, for those purposes. How long: the periods in the table in section 1.
We do not sell personal information and we do not share it for cross-context behavioral advertising, and we have not done so in the last 12 months. We do not use or disclose sensitive personal information beyond what is needed to provide the service. We do not sell or share the personal information of anyone under 16. The game's ads are not personalized; in the states that require it, Google's privacy message (section 3) records your choice, and you can review it in Options › General › Ad privacy. The website has no ads or third-party trackers.
Your rights
Depending on your state's law, you can ask to know what data we have and get a copy of it (portability), to correct it, to delete it, to opt out of sale, sharing, targeted advertising and profiling with significant effects (which we do not do), and to limit the use of sensitive personal information (which we already use only for the service). You will not be treated differently, with a different price or service, for using these rights.
To make a request, use the deletion option in the game (section 7), the DON Account pages on the website, or write to dev@donroger.com.br. We confirm the request is yours through the account email or your captain's name, without asking for more data than needed. An authorized agent can make a request for you, with your written permission; we may confirm directly with you. We answer within 45 days, which can become 90 with notice. If we deny the request, you can appeal by replying to our email with the subject "Appeal"; we answer appeals within 60 days and, if you still disagree, you can contact your state's Attorney General.
The game is not directed to children under 13 and we do not knowingly collect their data (COPPA); if we learn of such an account, we delete it.