Privacy Policy
Service: HANMAL: Heroes of the Late Han
Operator: Projectteamforyou
Effective: September 4, 2026
Contact: projectteamforyou@gmail.com
Projectteamforyou ("we", "us") respects your privacy and complies with applicable data protection laws, including the GDPR and the CCPA.
1. Information We Collect
The game is playable without an account. The items below are collected only when you use the corresponding feature.
| Category | Data | When | Required |
|---|---|---|---|
| Anonymous play | Random device key | First launch | Yes |
| Account | Email address, display name | When you create or link an account | Optional |
| Social sign-in | Provider identifier (Google / Apple / Steam) | When you sign in socially | Optional |
| Game data | Save files, progress | When cloud sync is enabled | Optional |
| Leaderboard | Score, game seed, command log | When you submit a record | Optional |
| Analytics | Platform, play time, game outcome (de-identified) | Only with your opt-in consent | Optional |
| Purchases | Receipt hash, product identifier | When you buy paid content | Yes (for purchases) |
| Automatic | Hashed IP address, error logs | While using the service | Yes |
Currently in scope (web build, 2026-09): the only data actually sent to our servers are leaderboard records (scenario, seed, command list and the label you type — the label is shown publicly on the leaderboard) and balance statistics samples. The account, social login, cloud sync and payment rows apply from the moment those features ship. IP addresses appear in server logs only as hashes.
We never collect government identification numbers, payment card numbers, or bank account numbers.
2. How We Use Your Information
- To provide the game and synchronise save data
- To identify accounts and prevent abuse
- To verify leaderboard records (we re-run the submitted seed and command log on our server)
- To confirm purchases and grant entitlements
- To analyse aggregate statistics for improvement (only for users who opt in)
- To respond to support enquiries
Legal bases (GDPR): contract performance (1, 2, 4), legitimate interests (3, 6), consent (5).
3. Retention
| Data | Retention |
|---|---|
| Account information | Until account deletion; erased within 30 days thereafter |
| Save data | Until account deletion |
| Leaderboard command logs | Deleted 90 days after verification |
| Analytics | Automatically deleted after 180 days |
| Purchase records | As required by applicable commerce law (typically 5 years) |
| Access logs | 3 months |
4. Disclosure to Third Parties
We do not sell or share your personal data with third parties, except:
- With your prior consent
- When required by a lawful request from a competent authority
5. Processors and International Transfers
| Processor | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Content delivery, static hosting | United States and others |
| Railway Corp. | Application servers and database | United States |
| Valve Corporation | Steam authentication and payments (if used) | United States |
| Apple Inc. / Google LLC | App store authentication and payments (if used) | United States |
Data may be transferred outside your country of residence. Transfers rely on Standard Contractual Clauses or equivalent safeguards. You may refuse international transfer, in which case cloud sync and leaderboards will be unavailable.
6. Your Rights
You may at any time request to:
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Restrict or object to processing
- Export your data (portability)
- Withdraw consent for analytics
Use the in-game settings menu or email projectteamforyou@gmail.com. We respond within 30 days (10 days where local law requires faster).
California residents (CCPA/CPRA): we do not sell or share personal information as defined by the CCPA, and we do not discriminate against users who exercise their rights.
7. Children
This service is not directed to children under 13 (or under 16 in the EEA, where applicable), and we do not knowingly permit them to create accounts. If we learn that we have collected such data, we delete it promptly.
8. Security
- Passwords stored using one-way hashing
- TLS 1.3 encryption in transit
- IP addresses stored as hashes only
- Least-privilege access controls with audit logging
- Analytics stored under an anonymous hash separated from account data
9. Cookies and Local Storage
We use the browser's localStorage to save your game progress. This data stays on your device and is not automatically transmitted to us. You may clear it in your browser settings, which will also delete your local saves.
We do not use advertising or tracking cookies.
10. Contact
- Data Protection Contact, Projectteamforyou
- Email: projectteamforyou@gmail.com
EEA users may also lodge a complaint with their local supervisory authority.
11. Changes
We will announce changes in-service at least 7 days in advance (30 days for material changes).
Effective: September 4, 2026