Privacy Policy

1. Who we are

Quintessence: Elemental Duel (the “Game”) and the website playquintessence.com (the “Website”) are provided by Artificial Platforms Inc. (“we”, “us”, “our”). For the purposes of the EU and UK General Data Protection Regulation (GDPR), we are the controller of the personal data described in this policy.

This policy applies to the Game on iOS and Android and to the Website. It does not apply to the services of Apple, Google or other third parties, which have their own privacy policies.

2. At a glance

• You sign in with Google Play Games (Android), Apple Game Center (iOS) or as a Guest. We do not ask for your email address or a password.
• We store a small profile: your display name and the times you first and last signed in. That is all we keep about you in the Game today.
• Online matches are connected through Unity Gaming Services, which process your IP address and device and network data to link the two players.
• The Game has no in-app purchases and no advertising today.
• The Website uses no cookies, no analytics and no tracking pixels.
• We do not sell or share your personal information.
• You can delete your account at any time in the Game under Settings, Delete Account.

3. Information we collect

3.1 When you play the Game

Sign-in and account identifiers. You can sign in in one of three ways:

• Google Play Games (Android). Google confirms your Play Games identity to our authentication provider, and we receive a player identifier and your Play Games display name.
• Apple Game Center (iOS). Apple confirms your Game Center identity, and we receive a player identifier and your Game Center alias.
• Guest. An anonymous account is created for you. Its session token, stored on your device, is its only identifier. If you sign out, the token is lost and the Guest account can no longer be accessed. Guests are given a display name made of “Guest-” followed by six characters.

Your sign-in creates an account with our authentication provider, Unity Gaming Services, which assigns it an internal player ID.

Profile. We store a profile in Unity Cloud Save containing your display name and the date and time of your first and most recent sign-in.

Online match data. When you play an online match, one player’s device hosts the match and the two devices are connected through Unity Lobby and Unity Relay. Gameplay messages (for example, which card was played and where) pass between the two devices through these services. To connect a match, Unity’s services process your IP address and device and network information. Your opponent sees your display name. We do not store the content of your matches.

Support communications. If you email us, we receive your email address, your message and anything you choose to include.

3.2 When you visit the Website

The Website is a static site hosted by Vercel. Like any web server, Vercel records standard server logs when you load a page: your IP address, your browser’s user agent, the page requested and the date and time. These logs are used to deliver the Website and keep it secure.

The Website does not use cookies, analytics, advertising or tracking pixels, and does not embed content that tracks you. Its fonts are hosted on the Website itself, so no request is made to Google Fonts. Videos and music on the Website are served from the Website and load only when you play them, except the silent background video on the home page, which is also served from the Website.

3.3 What we do not collect

We do not collect your email address (unless you write to us), passwords, real name, precise location, contacts, photos, payment information, advertising identifiers or any sensitive personal information as defined by California law or special category data under the GDPR.

4. How we use information and our legal bases

We use personal information only for the purposes below. If you are in the EEA, the UK or Switzerland, the GDPR requires us to have a legal basis for each purpose; these are listed alongside.

Where we rely on legitimate interests, we have balanced them against your rights. You can object at any time (see section 11). We do not use your information for automated decision-making that produces legal or similarly significant effects.

5. Service providers and other recipients

We share personal information only with:

• Unity Technologies (Unity Gaming Services), which provides authentication, Cloud Save (where your profile is stored), and Lobby and Relay (which connect online matches). Unity processes this data on our behalf as our service provider and processor.
• Vercel, which hosts the Website and processes server logs on our behalf.
• The email service we use to receive and answer messages sent to our addresses.
• Your opponent in an online match, who sees your display name and the moves you make.
• Google and Apple. When you sign in with Google Play Games or Apple Game Center, or download the Game from Google Play or the App Store, Google and Apple process your data under their own privacy policies as independent controllers.
• Authorities and others where required: if the law requires it, to respond to valid legal process, or to protect the rights, safety and property of our players, the public or us.
• A successor business, if we are involved in a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.

6. Features we plan to introduce

We want to be open about two things we plan to add. Neither is active today.

• Advertising. We plan to show ads in the Game. We have not yet chosen an ad network. If we introduce ads, we will update this policy first to name the ad partners and describe the data involved. In the EEA and UK we will use a consent management tool and show personalised ads only with your consent. If the ads involve “selling” or “sharing” personal information under California law, we will provide a “Do Not Sell or Share My Personal Information” option before that starts.
• Match telemetry. We plan to collect aggregated statistics about matches, such as which cards and elements win, to balance the Game. If we introduce telemetry, we will update this policy first and ask for your consent where the law requires it.

We will not start either feature until the updated policy is published and, where required, you have given your consent.

7. International transfers

We are based in the United States, and our service providers may process data in the United States and other countries. If you are in the EEA, the UK or Switzerland, this means your personal data is transferred to countries whose laws may not offer the same level of protection as your own.

Where we or our providers transfer personal data out of the EEA, the UK or Switzerland, we rely on an appropriate safeguard: the European Commission’s Standard Contractual Clauses (with the UK Addendum or Swiss amendments where relevant), or the EU–US Data Privacy Framework and its UK and Swiss extensions where the recipient is certified. You can ask us for more information about these safeguards.

8. How long we keep information

• Account and profile: until you delete your account. Deleting your account removes your Cloud Save data and then the account itself.
• Guest accounts: if you sign out of a Guest account, its session token is lost and neither you nor we can link that account to you any more, so we cannot act on requests about it. If you want a Guest account’s data removed, use Delete Account in Settings before you sign out.
• Online match data: relayed in real time to connect the match. We do not store match content. Unity may keep connection logs under its own retention practices as our processor.
• Website server logs: kept by Vercel for a limited period under its log retention settings, and used only for delivery and security.
• Emails: as long as needed to answer you and handle any follow-up, then deleted, unless we must keep them to meet a legal obligation or to establish, exercise or defend legal claims.

9. Security

We use reputable providers, encrypted connections (HTTPS and TLS) and access controls to protect personal information, and we collect as little as we can. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the authorities where the law requires.

10. Your choices and account deletion

• Delete your account in the Game: open Settings and choose Delete Account. This deletes your Cloud Save data and then your account. It cannot be undone.
• Ask us: email support@artificialplatforms.com to delete your account or to make any other request in this policy. Tell us which sign-in method you use and your display name so we can find your account.
• Platform settings: you can manage your Google Play Games or Game Center profile, and disconnect the Game from it, in your Google or Apple account settings.

11. Your rights in the EEA, UK and Switzerland

If the GDPR or similar law applies to you, you have the right to:

• Access the personal data we hold about you and receive a copy;
• Rectification: have inaccurate data corrected;
• Erasure: have your data deleted;
• Restriction: ask us to limit how we use your data;
• Portability: receive data you gave us in a structured, machine-readable format, or have it sent to another controller;
• Objection: object to processing based on our legitimate interests;
• Withdraw consent at any time where we rely on consent, without affecting processing before you withdrew it;
• Complain to a supervisory authority, in particular in the country where you live or work or where you believe an infringement occurred. In the UK this is the Information Commissioner’s Office (ICO).

To exercise a right, email support@artificialplatforms.com. We may need to confirm that the account is yours before acting. We will reply within one month, which may be extended by two further months for complex requests; if so, we will tell you why. Exercising your rights is free of charge.

12. Your rights in California and other US states

This section applies to California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and serves as our notice at collection. Residents of other US states with comparable privacy laws have similar rights, and we honour them in the same way.

Personal information we collect

We collect this information from you, from your device, and from Google or Apple when you sign in with their services. We use it for the business purposes described in section 4 and keep it for the periods in section 8.

No sale or sharing

We do not sell or share personal information, as “sell” and “share” are defined by the CCPA, and we do not knowingly sell or share the personal information of consumers under 16. Because we do not collect sensitive personal information, there is nothing to limit under the right to limit its use. If this changes (see section 6), we will update this policy and offer a “Do Not Sell or Share My Personal Information” option first. We honour Global Privacy Control (GPC) browser signals as a valid request to opt out of sale and sharing.

Your rights

• Right to know what personal information we have collected, used and disclosed about you, and to receive a copy;
• Right to delete personal information we have collected from you;
• Right to correct inaccurate personal information;
• Right to opt out of the sale or sharing of personal information;
• Right to limit the use of sensitive personal information (we collect none);
• Right to non-discrimination: we will not deny you the Game, charge a different price or provide a different quality of service because you exercised your rights.

How to make a request

Email support@artificialplatforms.com or call +1 628 225 3757. Because we do not hold names or email addresses for most players, we verify requests by asking you to confirm details only the account holder would know, such as your sign-in method and display name, and, where possible, to make the request from the account itself (for example by using Delete Account in Settings).

You may use an authorized agent. We may ask the agent for proof of your signed permission and ask you to verify your identity directly with us, unless the agent holds a valid power of attorney.

We will confirm receipt within 10 business days and respond within 45 calendar days. If we need more time (up to a further 45 days), we will tell you why. If we deny a request, we will explain why and how to appeal where your state’s law provides a right of appeal.

13. Children

The Game is intended for players aged 13 and over and is not directed to children under 13. We do not knowingly collect personal information from children under 13. In the EEA and the UK, where local law sets a higher age of digital consent (up to 16), players under that age need permission from a parent or guardian to use the Game.

If you believe a child has given us personal information without the required consent, contact us at support@artificialplatforms.com and we will delete it.

14. EU and UK representatives

Because we are established outside the EU and the UK, we will appoint representatives under Article 27 of the EU GDPR and the UK GDPR. Until their details are published here, you can contact us directly at support@artificialplatforms.com.

• EU representative: [EU representative under Art. 27 GDPR — to be appointed]
• UK representative: [UK representative under Art. 27 UK GDPR — to be appointed]

15. Changes to this policy

We will update this policy when our practices change, for example before introducing advertising or telemetry. The date at the top shows when it last changed. If a change is material, we will tell you in the Game or on the Website before it takes effect and, where the law requires, ask for your consent.

16. Contact us

For privacy questions and requests:

For questions about the Game itself, you can also write to hello@playquintessence.com.