Privacy Policy

01Introduction

This Privacy Policy explains how Bei Jing Qi Wan Technology Limited (“we”, “us”, or “our”) collects, uses, shares, and protects personal information when you play Heart of Blaze (the “Game”), visit this website (the “Site”), or contact our player support team (together, the “Services”).

Heart of Blaze is a dark fantasy strategy role-playing game for mobile devices. We are the data controller responsible for the personal information described in this Policy.

This Policy applies to the Game, the Site, and our player support channels. It does not apply to third-party platforms or services that we do not control, such as Google Play, Google Sign-In, Google Play Games, Unity Ads, or Google Firebase. Those services are governed by their own privacy policies.

By creating an account, signing in with Google, or otherwise using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, please do not use the Services.

02Who We Are and How to Contact Us

The entity responsible for your personal information is:

For privacy questions, requests, or complaints, contact us at you.xiao@521qw.com with the subject line “Privacy Request – Heart of Blaze”. If you are in the European Economic Area, the United Kingdom, or Switzerland, you may also contact us at the same address regarding your rights under applicable data protection law.

03Information We Collect

We collect information in three ways: information you give us, information we collect automatically, and information we receive from third parties.

3.1 Information You Provide to Us

• Account information. We collect your display name (nickname), player ID, email address, password or authentication credential when you create an email/password account, and country or region. If you sign in with Google or Google Play Games, we receive the information described in Section 4. You can also play as a guest where available.
• Support information. When you contact player support, we collect your name, email address, player ID, the content of your message, attachments you send (such as screenshots), and the history of our communications with you.
• Transactions and purchases. When you buy virtual items or currency, we receive a transaction ID, product or order details, amount and currency, purchase history, refund and chargeback status, and a purchase receipt or token from the platform that processed the payment (for example, Google Play). We do not receive or store your full payment card number when you pay through Google Play or another platform billing system.
• In-game events and promotions. If you take part in an in-game event or promotion, we collect the information you provide, which may include your name, player ID, email address, and country. We do not currently collect mailing addresses or survey responses.
• Chat, alliance, and player reports. The Game includes chat, alliance messaging, and player reporting. We collect the messages you send, the reports you submit, and related metadata such as time, sender and recipient player IDs, and moderation records.
• Public profile and leaderboard information. Your nickname, player ID, avatar, alliance, power or score, and ranking may be visible to other players in leaderboards, alliance member lists, and player profile pages.

3.2 Information We Collect Automatically

• Device and technical information. We collect device model, device and app identifiers (such as Android Advertising ID and App Set ID), operating system and version, language, time zone, screen size and resolution, network type, IP address, and approximate location derived from your IP address.
• Game and usage information. We collect your game progress, level, heroes and items, in-game activity, gameplay statistics, session times, alliance activity, and interactions with game features.
• Purchase and entitlement information. We keep records of the virtual items and currency associated with your account so that purchases are delivered correctly and can be restored.
• Install and attribution information. We receive install referrer information from Google Play and use it to understand which campaign or source led to an install.
• Advertising and analytics information. We and our service providers (including Unity Ads and Google Firebase) collect advertising identifiers, device information, ad impressions and interactions, app events, and diagnostics to display and measure ads and improve the Game.
• Security, fraud-prevention, and diagnostic information. We collect login history, security events, crash reports, stack traces, performance data, and anti-cheat or abuse signals.
• Cookie and website information. When you visit the Site, we collect information through cookies and similar technologies as described in Section 5.

3.3 Information We Receive from Third Parties

• Google. If you choose to sign in with Google or Google Play Games, Google provides us with the information described in Section 4.
• Platform providers. Google Play and other platform providers may send us purchase confirmations, entitlement information, and fraud or refund signals.
• Service providers. Our hosting, analytics (including Google Firebase), crash-reporting, customer-support, email-delivery, and payment service providers may process information on our behalf.
• Advertising and measurement partners. We use Unity Ads to display and measure advertising in the Game. Unity Ads may receive device identifiers, advertising ID, IP address, and ad interaction data. We do not share Google user data with advertising partners.

We do not intentionally collect sensitive personal information such as health data, biometric data, precise geolocation, or government identification numbers. Please do not send this information to us.

04Google Sign-In and Google User Data

Google user data

Heart of Blaze lets you create an account and sign in using Google Sign-In (Google Identity Services) or Google Play Games where available. You can also create an email/password account or play as a guest where available.

What we receive from Google. When you sign in with Google, we request only the following scopes and receive only the following information:

Google Play Games. If you sign in through Google Play Games, we may receive your Play Games player ID, display name, and profile picture to create and display your game profile. We do not access other Google services.

What we do not access. We do not request or access your Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, YouTube, or any other Google service. We do not receive your Google password. We do not receive your Google contacts or the content of your emails.

AI-generated content and NCII. Heart of Blaze does not use Google APIs for AI-generated non-consensual intimate imagery (AI NCII). We do not use Google user data to generate, create, or distribute intimate imagery of any person, and the Game does not offer features that create intimate imagery.

How we use Google user data. We use the information listed above only to:

• create, authenticate, and manage your Heart of Blaze account;
• link your Google account to your game progress and purchases;
• display your name and profile picture in the Game;
• provide customer support, account recovery, and security; and
• comply with applicable legal obligations.

Your choices. You can disconnect Google Sign-In at any time by visiting your Google Account permissions, selecting Heart of Blaze, and removing access. Disconnecting Google Sign-In stops future access to your Google account data, but it does not delete your Heart of Blaze account or game progress. To delete your account and associated data, follow the steps in Section 11.

05Cookies and Similar Technologies

We use cookies and similar technologies (such as local storage, pixels, SDKs, and log files) on the Site and in the Game to keep you signed in, remember your preferences, secure the Services, understand how the Services are used, and measure the performance of our communications.

You can control cookies through your browser settings and, on mobile devices, through your device's advertising and privacy settings. Blocking strictly necessary cookies may prevent parts of the Services from working.

06How We Use Personal Information

We use personal information to:

• provide, operate, and maintain the Game and the Site;
• create, authenticate, and secure your account, including through Google Sign-In;
• save and restore your game progress, purchases, and entitlements;
• process purchases, prevent payment fraud, and handle refunds and chargebacks;
• provide player support and respond to your requests;
• personalize your experience, including displaying your profile and suggesting in-game content;
• send service, security, and administrative messages;
• detect, investigate, and prevent cheating, abuse, fraud, and security incidents;
• analyze usage, troubleshoot crashes, and improve the Game and the Site;
• operate in-game events and promotions you choose to participate in;
• display and measure advertising through Unity Ads;
• maintain leaderboards and public player profiles;
• comply with legal obligations and respond to lawful requests; and
• create aggregated or de-identified information that cannot reasonably be used to identify you.

We do not use Google user data for advertising, and we do not sell personal information.

Google user data limitation. For Google user data, Section 4 controls. We do not use Google user data for marketing communications, surveys, promotions, advertising, profiling, database creation, or training generalized or non-personalized AI/ML models, and we do not share it with advertising partners for their own purposes.

6.1 Automated Decision-Making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Anti-cheat and fraud systems may flag accounts for review; if your account is restricted, you can contact player support to request a human review.

6.2 Artificial Intelligence and Machine Learning

We do not use Google user data to develop, improve, or train generalized or non-personalized AI or machine-learning models. We do not use Google Workspace APIs to develop, improve, or train non-personalized AI or machine-learning models. We do not use Google APIs to generate, create, or distribute AI-generated non-consensual intimate imagery (AI NCII), and we do not use Google user data to generate images, video, or audio of any person.

07Legal Bases for Processing (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we process personal information on the following legal bases:

Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

08How We Share Personal Information

We do not sell your personal information. We share personal information only as described below:

• Service providers. We share information with companies that perform services for us, including hosting and cloud storage, payment processing, platform billing, analytics (including Google Firebase), crash reporting, advertising measurement, customer support, email delivery, security, and fraud prevention. These providers are contractually required to protect the information and to use it only for the services they provide to us.
• Google. When you use Google Sign-In, Google processes your authentication and provides us with the information described in Section 4. Google's handling of your information is governed by Google's Privacy Policy.
• Platform providers. Google Play and other platform providers process purchases and may share transaction and entitlement information with us.
• Advertising and measurement partners. We share device identifiers, advertising ID, and ad interaction data with Unity Ads to display and measure advertising. We do not share Google user data with Unity Ads for advertising.
• Legal and safety. We may disclose information if we believe in good faith that disclosure is necessary to comply with law, legal process, or a lawful government request; to protect the rights, property, or safety of us, our players, or the public; or to investigate fraud, cheating, or security incidents.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction. We will require the recipient to honor this Policy and will notify you of any material change. For Google user data, we will obtain your explicit prior consent before any transfer in connection with a merger, acquisition, or sale of assets.
• With your consent. We may share information for other purposes when you ask us or give us explicit consent.
• Aggregated or de-identified information. We may share aggregated or de-identified information that cannot reasonably be used to identify you.

We do not share Google user data with third parties for advertising, and we do not sell Google user data.

Google user data transfers. We do not transfer Google user data to third parties for targeted advertising, selling to data brokers, providing to information resellers, determining credit-worthiness, lending, user, personalized, retargeted, or interest-based advertising, or training generalized or non-personalized AI/ML models. The "With your consent" bullet above does not apply to Google user data except as permitted in Section 4.

09Data Retention

We keep personal information only for as long as necessary for the purposes described in this Policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

When information is no longer needed, we delete it or make it irreversibly de-identified. If we cannot delete information immediately because it is stored in backup archives, we will isolate it and delete it when the archive is next refreshed.

10Your Rights and Choices

Depending on where you live, you may have some or all of the following rights:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information.
• Restrict or object to certain processing.
• Port your information to another service in a structured, commonly used, machine-readable format.
• Withdraw consent where we rely on consent.
• Opt out of marketing at any time using the unsubscribe link in our emails or by contacting us.
• Not be discriminated against for exercising your privacy rights.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email you.xiao@521qw.com with the subject line “Privacy Request – Heart of Blaze”. We may ask you to verify your identity before we act on your request. We will respond within 30 days, or within the period required by applicable law. If we need more time, we will tell you why.

You can also manage your Google Sign-In connection at your Google Account permissions. Removing access does not delete your Heart of Blaze account; see Section 11.

10.1 California Residents

If you are a California resident, you have the rights described above under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know, access, correct, delete, and opt out of the sale or sharing of personal information, and the right to limit the use of sensitive personal information. We do not sell personal information for money. We do not use or disclose sensitive personal information for purposes that would require a right to limit under California law. To exercise your rights, contact us at you.xiao@521qw.com. You may designate an authorized agent to make a request on your behalf, subject to verification. We will not discriminate against you for exercising your rights.

We may collect the following categories of personal information: identifiers (such as name, email address, player ID, IP address, and device identifiers); commercial information (purchase history); internet or network activity (gameplay and website interactions); geolocation (approximate location derived from IP address); and inferences drawn from this information. We collect these categories from you, from your device, and from the third parties described in Section 3.3. We use and disclose them for the business purposes described in this Policy.

10.2 EEA and UK Residents

If you are in the EEA or the UK, you have the rights described above under the General Data Protection Regulation or UK GDPR. You also have the right to lodge a complaint with your local supervisory authority. We would appreciate the chance to address your concern before you contact an authority, so please contact us first at you.xiao@521qw.com.

10.3 Other Regions

If you are in Brazil, South Korea, Japan, Canada, Australia, or another jurisdiction with privacy laws, you may have additional rights under those laws. We will honor requests consistent with applicable law. Contact us at you.xiao@521qw.com for more information.

11Account Deletion and Data Deletion

You can request deletion of your Heart of Blaze account and personal information in any of the following ways:

1. In the Game, if available in your version: open Settings → Account → Delete Account and follow the prompts.
2. On our support page: visit support.html#delete-account for step-by-step instructions and a pre-filled email request.
3. By email: send a message from the email address linked to your account (or include your player ID) to you.xiao@521qw.com with the subject line “Account Deletion Request – Heart of Blaze”.

We will verify your request and delete your account and associated personal information within 30 days, unless we are required to retain certain information for legal, tax, accounting, fraud-prevention, or dispute-resolution purposes. We will tell you if we cannot fully comply and why. Some information may remain in backup archives for a limited period and will be deleted when the archive is refreshed.

Deleting your account is permanent. You will lose access to your game progress, virtual items, and purchases, and we may not be able to restore them. Deleting your account does not automatically cancel subscriptions purchased through Google Play or another platform; cancel those through the platform where you purchased them.

Disconnecting Google Sign-In or removing Heart of Blaze from your Google Account permissions does not delete your Heart of Blaze account. To delete your account, follow the steps above.

12Security

We use administrative, technical, and physical safeguards designed to protect personal information against loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include encryption in transit, access controls, least-privilege permissions, monitoring, secure development practices, and incident-response procedures.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect your information and to comply with applicable breach-notification laws. If we become aware of a breach that affects your personal information, we will notify you and the relevant authorities as required by law.

13International Transfers

We may process and store personal information in countries other than the country where you live, including in China, the United States, Singapore, and the European Union, where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer personal information from the EEA, the UK, or Switzerland, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and additional technical and organizational measures where required.

14Children's Privacy

The Services are not directed to children under 13 (or under 16 in the EEA and the UK, or under 14 in South Korea). We do not knowingly collect personal information from children below these ages. If you are under 18, you must have your parent or legal guardian's permission to use the Services. If we learn that we have collected personal information from a child below the applicable age without the required consent, we will delete it promptly. If you believe a child has provided us with personal information, contact us at you.xiao@521qw.com.

15Third-Party Links and Services

The Site and the Game may link to or integrate with third-party services, including Google Sign-In, Google Play Games, Google Play, Unity Ads, Google Firebase, and social sharing features. If you choose to share content through a social platform, that platform may receive the content you share. We do not control those services, and their privacy practices are governed by their own policies. We encourage you to review the privacy policy of any third-party service before using it. This Policy does not apply to third-party services.

16Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will notify you by email (using the address associated with your account) or by posting a prominent notice on the Site or in the Game before the change takes effect. The “Last Updated” date at the top of this page shows when the Policy was last revised. Your continued use of the Services after the effective date means you accept the updated Policy. If you do not agree, you should stop using the Services and may request deletion of your account. If we change how we use Google user data, we will notify you and, where required by the Google API Services User Data Policy, ask for your consent before the new use begins.

17Contact and Complaints

If you have questions, comments, or requests about this Policy or our handling of personal information, contact us:

We aim to respond to privacy requests within 30 days. If you are not satisfied with our response, you may lodge a complaint with the data protection authority in your country or region. If you are in the EEA or the UK, you can find your local authority through the European Data Protection Board or the UK Information Commissioner's Office.

18Governing Law

This Policy and any dispute arising out of or in connection with it are governed by the laws of the People's Republic of China, without regard to conflict-of-law rules. Subject to any mandatory consumer-protection laws that apply in your country of residence, the courts located in Beijing, China, have jurisdiction over disputes relating to this Policy. Nothing in this Policy limits any right you may have under mandatory local law.

AAppendix: Google and Platform Privacy Resources

• Google Privacy Policy
• Google API Services User Data Policy (including Limited Use requirements)
• Manage your Google Account permissions
• Google Play Privacy Policy

Heart of Blaze and the Heart of Blaze logo are trademarks of Bei Jing Qi Wan Technology Limited. Google Sign-In and Google Play are trademarks of Google LLC. This website is operated by Bei Jing Qi Wan Technology Limited and is not endorsed by or affiliated with Google LLC.