Effective date: 5 July 2026
Aetherium Clash (the "App") is operated by kgw software ab ("we", "us", "our"), a company registered in Sweden. We are the data controller for the personal data described here. This policy explains what personal data we process, why, the legal bases we rely on, and your rights under the EU General Data Protection Regulation (GDPR). Questions or requests: info@kgwsoftware.se.
| Category | What it includes | Legal basis (GDPR Art. 6) |
|---|---|---|
| Account & sign-in | A provider account identifier from Sign in with Apple or Google and, where you choose to share it, your email address. Before you sign in, a randomly generated device identifier lets you play and later link that progress to an account. | Performance of a contract (6(1)(b)); legitimate interests in operating accounts (6(1)(f)). |
| Gameplay & account data | Your card collection, decks, match results and skill rating, marketplace listings and trades, quests, cosmetic ownership, and your chosen public display name ("playname"). | Performance of a contract (6(1)(b)). |
| Purchases | Records of in-app purchases (product, amount, timestamp), processed through our payments provider RevenueCat and the Apple App Store / Google Play. We do not receive or store your card or bank details. | Performance of a contract (6(1)(b)); legal obligation for accounting records (6(1)(c)). |
| Advertising | Optional rewarded video ads via Google AdMob. Ads are requested as non-personalized: we do not track you across apps or use advertising identifiers to build a profile of you. AdMob may still process limited data (such as coarse, non-identifying signals and anti-fraud data) to serve and measure ads. | Legitimate interests in supporting the App (6(1)(f)); consent (6(1)(a)) where required by applicable law. |
| Security & abuse prevention | Technical data needed to keep matches fair and the service secure (e.g. authentication tokens, server-side move validation, rate limits). | Legitimate interests in security and fair play (6(1)(f)). |
| Camera | You can scan a friend's QR code to connect for a match. The camera image is processed on your device only and is not stored or transmitted to us. | Consent via the operating-system camera permission (6(1)(a)); you can decline. |
We do not use analytics or crash-reporting SDKs, and we do not sell your personal data or use it for cross-context behavioural advertising.
Your account data is stored on Microsoft Azure servers in the European Union (North Europe region). Some processors we rely on — Apple, Google (including AdMob), and RevenueCat — may process data on servers outside the European Economic Area. Where that happens, the transfer is protected by an EU adequacy decision or the European Commission's Standard Contractual Clauses.
We share data only with processors that help us run the App, each under a data-processing agreement:
We may also disclose data if required by law or to protect our rights, our users, or the security of the service.
The App stores your sign-in tokens and a local copy of your game data on your device so it works between sessions. We do not use tracking cookies.
We keep your account data for as long as your account exists. When you delete your account (see below) we remove your personal gameplay data promptly. Purchase records are retained in anonymized form for as long as required by accounting and tax law (in Sweden, generally seven years under the Bokförings- lagen). Backups are cycled on a rolling basis.
You can permanently delete your account at any time from within the App (Profile → Delete Account). Deletion removes your personal gameplay data; anonymized purchase records are retained only where the law requires. You can also email us to request deletion.
Under the GDPR you have the right to access your data, to have it corrected or erased, to receive a copy in a portable format, to object to or restrict certain processing, and to withdraw any consent you have given (without affecting processing already carried out). To exercise these rights, email info@kgwsoftware.se or use in-app account deletion; we will respond within one month. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY, imy.se) or your local supervisory authority.
The App is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal data from children under 13; if we learn that we have, we will delete it. If you believe a child has provided us data, please contact us.
We may update this policy from time to time. The effective date above shows the latest version, and material changes will be reflected here.
Contact: info@kgwsoftware.se — kgw software ab, Sweden.