← Realmwright

Privacy Policy

Last updated: 10 October 2026

Realmwright is an idle kingdom game. Single-player keeps your city on your device. Multiplayer keeps only what the game needs to run your city, keep chat safe and keep the game fair and balanced. There are no ads and no third-party analytics or tracking, and we never sell your data. To improve the game it sends anonymous usage data (no name, email or account) to our own server; you can turn this off in Settings. You can download or delete your multiplayer data yourself at any time from the in-game Settings.

1. Who is responsible

The data controller is Uğur Sergin, the developer and publisher of Realmwright (Türkiye). For anything about your data, write to info@realmwrightgame.com. This policy is our privacy notice under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).

2. Single-player and anonymous usage data

Your city is saved in your browser or in the app on your device. Your single-player save is never sent to us.

Anonymous usage data (single-player and multiplayer): to see where new players get stuck and whether they come back, the game sends a few anonymous events to our own server: when a play session starts and ends and how long the game was on screen (with a signal every minute while it is open); the platform (Android, browser or desktop), game version, language and whether it is a phone or tablet; whether the intro story was watched or skipped and how far the starter guide was read; the first time you start or finish a building, get a new hero, defeat a boss, reach each Castle level or found the New Realm (with the game time and the time since installing); opening the daily rewards and which reward was claimed, and when a streak freeze or a streak restore kept your streak; which setting was changed to what; the battery saver turning on or off (by you, by low battery or by the phone's power-saving mode) and the game lowering or raising graphics quality by itself; whether the notification permission question was shown and your answer, the kind of notification you tapped, and whether the card explaining that your city keeps working while you are away was shown. These events are linked only to a random install ID created on your device and a random session ID, never to your name, email, account or save, so they are not part of “Download my data”. Your IP address is used only in memory to limit abuse and is not stored with them. Purpose: improving the game (the first minutes, difficulty, whether players come back). Legal basis: our legitimate interest (KVKK art. 5/2-f, GDPR art. 6(1)(f)).

You can turn this off at any time in Settings → Anonymous usage data. When it is off nothing is collected or sent, the install ID is removed from your device and the game asks our server to delete the data already sent from it. If the device is offline at that moment, the request is repeated the next times the game can reach our server; if it never gets through, the data is deleted after 180 days like all usage data.

3. Multiplayer: what we keep and why

We do not use your data for advertising, profiling or automated decisions. Muting after several reports is automatic, but it is temporary and a person reviews the reports.

4. Chat and community rules

Swearing, insults, harassment, threats, hate speech, spam and sharing other people's personal information are not allowed. We protect chat in four ways:

If a message suggests that someone is in danger, or the law requires it, we may share the relevant messages with the authorities.

5. Who sees your data

Other players see your username, your city on the map and its summary (level, heroes, fame), battle reports involving you, your alliance, and the messages you send in the channels where you send them. Private messages are seen only by you and the recipient (and by us if they are reported). To run the game, we (the developer) can see your account and game data, game statistics and reports in a private admin page that only we can sign in to. Nobody else sees your account data.

6. Third parties and transfers abroad

Our game server and database run on our own machine in Türkiye; we do not use outside processors for game data. If you choose Google or Steam sign-in, that company handles the sign-in under its own privacy policy (Google, Valve). To check a Google sign-in we only use Google's public keys; nothing about you is sent to Google. To check a Steam sign-in our server sends the one-time sign-in ticket to Valve's servers (USA), which is needed to provide the sign-in you asked for. If you allow push notifications in the Android app, they are delivered through Google's Firebase Cloud Messaging (its servers may be outside Türkiye): our server sends Google your phone's notification address and the text of the notification (for example “Raid incoming!”). A private message notification only names the sender; the message itself is never sent. The www address of our website passes through Cloudflare.

7. How long we keep it

8. Deleting your account

In the game: sign in to multiplayer, open Settings → Delete account, type your account name and confirm. Deletion happens immediately.

Without the game: email info@realmwrightgame.com with your username. We may ask you to prove the account is yours (for example by writing to us from inside the game). We delete it within 30 days, usually much sooner.

Deleted: your account and password hash, linked Google / Steam IDs, sign-in keys, push notification addresses, your city and its place on the map, alliance membership (if you led an alliance, leadership passes to another member), the chat messages you sent and private messages sent to you, your block list, reports you sent or received, mutes, bans, fair-play notes, game statistics and gifts sent to you. Battle reports of other players stay, without your name; so do admin log entries about your account, without your name, until they expire after a year. Otherwise we keep only an internal account number, with nothing attached to it, so it is never given to a new player.

You can also remove Realmwright's access from your Google account at myaccount.google.com/connections.

9. Your rights

Under KVKK (art. 11) and the GDPR (arts. 15–22) you can: learn whether we process your data and get a copy of it; ask what it is used for and who receives it; have it corrected or deleted; restrict or object to processing based on our legitimate interest; receive it in a portable format; object to a result that harms you if it comes from automated processing; and claim compensation for unlawful processing.

Settings → Download my data in the game gives you a copy of everything we keep about you (JSON). For anything else, email info@realmwrightgame.com; we answer within 30 days, free of charge. You can also complain to the Turkish Personal Data Protection Authority (kvkk.gov.tr) or, in the EU, to the data protection authority of your country.

10. Storage on your device

We use no cookies. The game uses your browser's or app's local storage only for things it needs to work: your single-player save, settings (language, sound, graphics), and the sign-in key; and, unless you turn anonymous usage data off, its random install ID and the few events not yet sent. None of it is used for advertising or shared with anyone, and nothing tracks you across other apps or websites.

11. Security

Passwords are stored only as salted scrypt hashes, the game at playrealmwright.com uses HTTPS, sign-in attempts are rate-limited, and only we can access the server. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

12. Children

Realmwright is not directed at children under 13, and they may not create multiplayer accounts. In the EU, if you are under 16, ask a parent before creating one. If you believe a child has created an account, contact us and we will delete it.

13. Changes and contact

If this policy changes, we update the date at the top; important changes are also announced in the game. Contact: info@realmwrightgame.com