AURUM · The Great Work
Privacy
What we keep, and what we never touch.
The short truth
- No advertising, ever. There is no advertising code in the game and no ad SDK in the build. No ad identifiers, no tracking across apps or sites, no profiling.
- Nothing is sold or shared with anyone for their own purposes.
- The game asks for nothing about you. No name, no address, no password, no sign-in. What it does keep is listed below, in full.
- This website keeps one thing: the language you chose to read it in, in your own browser, on your own device. Clear this site’s data and it is gone.
Who is responsible
AURUM and this website are made and published by STUDIO KIRILOV EOOD, entered in the Bulgarian commercial register under company number (UIC) 208911968. On this page, we means the studio, which is the controller of everything described below, and the address for every question and every request in this policy is aurum@kirilov.studio.
No data protection officer is appointed, because the scale of the processing here does not call for one.
What the game holds, why, and on what legal basis
The game has no sign-in of any kind. At first launch it makes an anonymous account bound to the device and keeps a copy of the progress, so the work is not held on the phone alone. The account is made and the first copy is sent without asking you first. The lawful basis for that is our legitimate interest under Article 6(1)(f), and the interest is stated plainly: a player should not lose a month of nights to a phone that breaks. You may object at any time, and how to do that is at the end of this section.
- An account identifier. A random value made on the device so the save can be held and returned. It is not derived from you or from anything about you. Legitimate interest.
- A device identifier. A second random value kept on the device for as long as the game is installed, and what the account answers to. Removing the game removes it, and the cipher described on the support page is how the work travels to another phone. Legitimate interest.
- A notification token, only if you let the game whisper. A value the platform mints for this one install, so a notice can find it. Nothing asks before the third night, the permission is yours to withdraw, and the token goes when the account does. Your choice.
- The save itself: progress, the rites you own and settings. Legitimate interest.
- The version of the game each save comes from, so a notice about a new version is sent only to players who do not have it yet, and so we can count how many players each version still has. Legitimate interest.
- When the game is opened: the first and the latest day it was played, when it was last opened, how many times it has been opened and the hour of the day it is usually played. It lets a notice, if you allow them, arrive at the hour you usually play, and it lets us count how many players come back. Legitimate interest.
- A night you submit, with the record of the moves that produced it, so a score can be verified move by move. Nothing in it is about you. Legitimate interest in a game nobody can cheat.
- Crash reports and diagnostics, so defects can be found and repaired. Legitimate interest in a game that works.
- Letters you send us, and our answers. Legitimate interest in answering you.
- A record of a purchase, where one is made. Legal obligation under Article 6(1)(c): tax and accounting law requires it.
Objecting. Everything above that rests on legitimate interest carries a right to object under Article 21. Write to us, or end the account yourself from inside the game, which is described under leaving. You do not have to say why.
What this website holds
The language you chose, remembered by your own browser. It is not sent anywhere, there are no cookies, and the site runs no analytics of its own. Our host keeps ordinary server logs for a short period to keep the site standing and to stop abuse, which is a legitimate interest and nothing more.
Who else touches it
Nobody processes any of this for their own purposes. Each of the following acts on our instructions under a written data-processing agreement, and each is named rather than hidden behind a category:
- Hetzner Online GmbH (Gunzenhausen, Germany) holds the game server and this website. Its agreement fixes processing inside the European Economic Area, so nothing held there leaves it.
- Cloudflare, Inc. (San Francisco, United States) sits in front of both domains and carries the traffic.
- Fastmail Pty Ltd (Australia, with mail servers in the United States) carries the email, which means any letter you send us passes through it.
- Apple and Google handle every purchase in their own systems, under their own terms. We never see a card number or a billing address.
- Google again, and separately, if you let the game whisper: Firebase Cloud Messaging is the only road to a notification on an Android phone, and it holds the token for this install so a notice can be delivered to it.
- Google a third time, on Android only: when the game asks the server to honour something of value, such as a purchase, Google Play Integrity reads the check the phone sends with it and tells the server whether the game is the genuine one. The server keeps that answer, never the check itself.
- Apple, separately from the store, if you let the game whisper on an iPhone. The Apple Push Notification service is the only road to a notification there, and it holds the token for this install so a notice can be delivered to it.
- Microsoft keeps the studio’s backup in OneDrive, and that backup holds copies of the game’s database. It is encrypted before it leaves the studio and the key never does, so Microsoft holds nothing it can read.
Leaving Europe. Cloudflare, Fastmail, Google and Apple process outside the European Economic Area, and Microsoft may, depending on where the studio’s account is held. All of them are covered by the European Commission’s Standard Contractual Clauses, which is the safeguard we rely on under Article 46. Ask us and we will point you to the relevant terms.
How long it is kept
- The account and its save: while the account exists. A device that has not connected for 24 months has its account and save deleted, without anyone having to ask.
- Crash reports: what reaches us is folded into a single line for that one defect and counted there, with no account attached to it. That line carries no expiry, because it says something about the game and nothing about whoever met the fault.
- Letters and their answers: 24 months after the exchange ends.
- A note that a purchase was released: kept for as long as the store honours the purchase. Where one had been made and the account holding it was ended, a single line stays under the store’s own transaction number to say so. It names no account and no person, and it is what lets you restore that purchase if you ever come back.
- Purchase records: for the period tax and accounting law requires, then removed.
What we never do
- No selling of data, and no sharing with anyone for their own purposes.
- No advertising identifiers, no tracking across apps or sites, no profiling.
- No reading of anything on your device beyond what the game itself creates.
- No decision about you is made automatically, so Article 22 does not arise.
Leaving, cleanly
The account and its data end whenever you decide, from inside the game, in about three seconds. The steps are at account and data deletion. What happens is a deletion on the server and not a hiding: the record goes, the device forgets which account it was, and the next launch begins a new one.
Your rights
Wherever you live, and in full under Regulation (EU) 2016/679, you may ask what is held about you, ask for a copy, ask for it to be corrected, ask for it to be erased, ask for it to be restricted, ask for it in a portable form, and object to it being held at all. One letter to aurum@kirilov.studio is enough. Nothing has to be justified and nothing is charged. The answer comes within one month, which is the law’s own deadline.
The first of those you can do yourself, without asking anyone. The game holds a room called The Record: open the settings, tap Studio Kirilov at the foot of the plate, then Record. It asks the server and tells you what is held about the account, in about three seconds. No request is filed, and there is nobody to wait for.
For anything the game cannot do itself, write to us. The address reaches the people who wrote the game and who can change what it does, and that is a thing nobody else can do for you. Where the game has already left the device, tell us what still identifies the account, because Article 11 does not oblige us to act on a request we cannot match to a record, and we would rather say so than guess at which one you mean. What still works is set out under leaving.
If you are still not satisfied, the regulation also gives you the right to complain to a supervisory authority. In Bulgaria that is the Комисия за защита на личните данни, the Commission for Personal Data Protection, at София 1592, бул. ‚Проф. Цветан Лазаров‘ № 2, +359 2 915 3519, kzld@cpdp.bg, www.cpdp.bg. A complaint sent electronically goes through the Bulgarian secure electronic delivery system rather than by ordinary email.
Children
The game is not directed at children under 13, and we do not knowingly hold data from them. Where the law makes a child’s own consent the basis for a service, Bulgaria sets that age at 14. If you believe a child’s device has an account here, write to us and it will be removed.
Changes
If what the game holds ever changes, this page changes first, with a new effective date at the top, and a meaningful change is announced in the game as well.