Privacy Policy
Last updated: 14 November 2026
This policy explains what information DragonWar (the game at dragonwar.app and the DragonWar Android app) collects, why we collect it and what you can do about it. We collect as little as we can to run the game.
Information we store
Depending on how you play, our servers store:
- Guest accounts: a SHA-256 hash of a random device identifier created by the game, so you can get back into the same guest account. We never store the identifier itself.
- Accounts with a username and password: your username and a salted PBKDF2-SHA256 hash of your password. We never store your password in readable form.
- Sign in with Google: only the Google account subject ID (a number Google gives our app for your account). We do not receive or store your email address, name or profile picture from Google.
- Game data: your display name, rider and dragon choices, levels, dragons, eggs, village, campaign progress, match results and rankings, wallet balances and a ledger of in-game currency changes, and the age range you choose on Android, stored with your account and used to apply age-appropriate shop rules.
- Dragon Nest on Android: daily step totals from your phone’s step counter, used only to hatch eggs. The app does not use your location.
- Egg Hunt (web preview, optional): only if you turn location on. Exact coordinates stay on your device; the server receives a coarse map cell (about 70 m), keeps only your latest cell for speed checks, and keeps a coarser cell (about 1 km²) of rewarded pick-ups for 7 days to prevent cheating. We never store your route and never share location with other players or third parties.
How we use it
We use this information only to run the game: signing you in, saving your progress, matchmaking and online battles, preventing cheating and abuse, and keeping the in-game economy fair. We do not sell your data and we do not use the game data above for advertising.
Cookies, analytics and ads
This website and the web game do not use analytics, advertising cookies or third-party trackers. The game keeps your settings and sign-in token in your browser’s local storage on your own device.
The Android app may show ads from Google AdMob, for example an optional video you can watch for an in-game reward. When ads are shown, Google AdMob may collect your device’s advertising ID, IP address, approximate location derived from it, and ad interaction data to serve, limit and measure ads, under Google’s policies (https://policies.google.com/technologies/ads). Where the law requires it (for example in the EEA and the UK) the app asks for your consent first. For players under 13 ads are requested as child-directed, and for players under 18 only non-personalized, family-safe ads are requested. You can reset or delete your advertising ID or opt out of personalized ads in your Android settings (Settings → Google → Ads, or Settings → Privacy → Ads). When rewarded ads are used, Google confirms to our server that an ad was completed (with your player ID and a one-time code) so the reward can be granted; we keep that confirmation only to prevent abuse.
Service providers
DragonWar is hosted on Cloudflare, which processes network traffic (such as IP addresses) to deliver the game and protect it from attacks. We use Cloudflare Turnstile to check that sign-ups and sign-ins come from real people. If you choose Sign in with Google, Google handles that sign-in under its own privacy policy. Purchases on Android, when available, are processed by Google Play; we do not receive your payment details. Ads in the Android app are provided by Google AdMob (see above).
How long we keep data
Guest accounts are a free 3-day trial. Account and game data are kept while your account exists. Egg Hunt fraud-check cells are deleted after 7 days. Server logs do not contain passwords, tokens or location.
Children
DragonWar is rated 12+. On Android the app asks for an age range on first launch; it is stored with your account and used to apply age-appropriate shop rules and safer settings for younger players. We do not knowingly collect personal information beyond what is described here.
Your choices and data deletion
You can turn the Egg Hunt location off at any time. You can delete your account yourself: in the game open Settings → Account → Delete account, confirm with your password or by signing in with Google again, and it is done. If you cannot open the app, sign in on the web at https://dragonwar.app/play/ and do the same. Sign-in stops working immediately and all your game data is erased within 30 days; economy ledger records are kept only without any personal data. Full steps: https://dragonwar.app/delete-account/.
If you cannot sign in at all, or want a copy of your data, contact us through the developer contact on the DragonWar Google Play listing and include your in-game player ID (shown in Settings).
Changes and contact
If we change this policy we will update this page and the date above. For any privacy question, contact us through the developer contact on the DragonWar Google Play listing or through the game.