Privacy Policy

01Who we are

Lumenfall is a free-to-play action MMORPG for iPhone, iPad, Android, Windows and Mac, made and run by Ancore (based in Israel). "We", "us" and "our" mean Ancore. This policy covers the game and this website. Privacy questions: [email protected].

02What we collect

We don't ask for your real name, phone number, address or contacts, and the game doesn't use your precise location, camera, microphone or photos.

Account and game data

• Account: an account ID, sign-in details if you link Apple or Google (the provider's ID, the email address it shares, and a display name if provided), session tokens, and an optional device label such as "iPhone" or "Windows".
• Gameplay: your characters, items, quests, currencies, season pass, guild, friends, mail, market listings and trades, and the age confirmation you gave when you joined.
• Public profile: your character name, class, level and power appear on in-game and website rankings. Your character name is also visible to other players in the game.
• Chat: messages, whispers and guild notes are sent to the players they're for. The server keeps messages, including whispers, for 30 days so moderators can review reports and abuse, and a report saves the reported player's latest lines.
• Purchases: store transaction IDs and what each purchase granted. Apple and Google handle payment on phones. In the Windows and Mac app, Xsolla handles payment and tells us the order: your account ID, the item, the price and currency, your country and an order number.
• Platform: whether you play on a phone or a computer. Other players may see this as a small icon on your profile.

Device and usage data

• Usage events: milestones such as level-ups, quests, purchases, ads watched and windows opened, session length, device model, OS version, app version, frame rate and loading times. They're tied to your account and character IDs, never to chat.
• Device performance: basic hardware details such as your graphics card, processor, memory, screen size and quality settings, so we can make the game run well on more devices.
• Where you found us: which page, ad or link you came from when you downloaded the game, so we know which channels work.
• Approximate location: your country, region and city (rounded coordinates) and time zone, worked out from your connection. We don't store your IP address with your account.
• Technical data: your IP address is used briefly for rate limiting, abuse prevention and anti-cheat. Server logs and crash or error reports from the apps (which contain no chat) help us fix bugs.
• Anti-cheat: the server checks movement and combat as you play, so everyone plays fairly. The Windows and Mac app runs Easy Anti-Cheat by Epic Games, which looks for cheating software while the game is running. The apps also check that they haven't been modified and aren't running on a tampered device (such as a jailbroken or rooted phone), using Apple's and Google's app checks where available. Signs of cheating are reviewed by our team before any action is taken.
• Notifications: a push token, your notification choices and your language, so we only send what you turned on.

On this website

The website sets no cookies of its own and uses self-hosted fonts. It counts visits with cookieless PostHog analytics (EU-hosted): the page, referring site, browser, device type, approximate country, and whether you tapped a download or Discord button. There are no session recordings, and analytics is off if your browser sends Do Not Track. If you arrive from one of our ads on Reddit, or on Facebook or Instagram, that network's measurement pixel (Reddit's or Meta's) can count your visit. In the EEA, the UK and Switzerland we ask first, and nothing is loaded unless you choose Allow. Everywhere else the pixel loads unless you opt out: choose No thanks under Ad measurement at the bottom of any page, or turn on Do Not Track or Global Privacy Control in your browser, and nothing is loaded. We tell where you are from your browser's time zone, and we ask whenever we can't tell. The pixel tells Reddit or Meta that you visited and whether you tapped an App Store or Google Play button, along with what the pixel collects itself (such as your IP address, browser and the network's cookies), so we learn which ads bring players. We never send them your name, email or game account. The website also asks Discord's public API for our online player count, so Discord sees your IP address.

03How we use it

We use your data to run and save your game, process purchases, keep chat, trading and guilds working, send the notifications you asked for, detect cheating and abuse, moderate and enforce our rules, answer support and privacy requests, understand how the game is used so we can improve it, measure which ads or store pages bring players, and keep the service secure. We don't sell your personal data.

If you're in the EU, UK or a similar region, our legal bases are: contract (running the game you asked to play), legitimate interests (security, anti-cheat, moderation, fraud prevention and improving the game), consent (personalised ads, install tracking, News & offers notifications and, in the EEA, UK and Switzerland, Reddit and Meta ad measurement on this website) and legal obligation (keeping transaction records).

04Who we share it with

We share only what each provider needs for its job. They process data under their own privacy policies.

We may also disclose data if the law requires it, to protect players or our rights, or if the business is sold or merged (we'd tell you first).

05Ads and tracking choices

• iPhone and iPad: the game asks for App Tracking Transparency permission at launch. If you decline, Tenjin sends nothing, ads are not personalised, and Meta gets no advertising ID: it only counts the events above in aggregate, through its Aggregated Event Measurement.
• EEA, UK and Switzerland: Google's consent form appears first. Personalised ads and Tenjin attribution run only if you agree. Change your answer any time in Menu › Settings › Account › Privacy choices.
• Android: ads and attribution use your device's advertising ID. Reset or delete it, or limit personalisation, in your device's Ads settings.
• Windows and Mac: the desktop app shows no ads and doesn't use an advertising ID.
• This website: Reddit's and Meta's pixels only count visitors who arrive from one of their ads. In the EEA, UK and Switzerland they load only if you choose Allow. Elsewhere they load unless you opt out. To opt out, choose No thanks under Ad measurement at the bottom of any page (this also deletes their cookies from this site), or turn on Do Not Track or Global Privacy Control in your browser.
• Notifications: News & offers is off unless you turn it on in Settings › Notifications.
• California: we don't sell personal information. The website's ad measurement pixels (above) may count as sharing for cross-context behavioural advertising; opt out with No thanks under Ad measurement, or with Global Privacy Control, which we honour.

06How long we keep it

• Account and game data: while your account exists.
• Usage events: 180 days. Chat messages: 30 days. Crash and error reports: 30 days. Server logs and backups: a short rolling period, generally 30 days or less.
• Purchase records: up to 7 years, for tax, accounting, fraud prevention and refunds.
• Moderation and anti-cheat records (bans, mutes, reports and cheat reviews): kept so a banned player can't simply start over.
• Completed market sales stay as anonymous history that no longer points to you.
• Unused guest accounts may be removed after 24 months of inactivity.

07Your rights and deleting your account

Wherever you live, you can ask to access, correct, export or delete your data, to object to or restrict certain processing, and to withdraw consent. Email [email protected]; we reply within 30 days. In the EU or UK you can also complain to your data protection authority.

To delete your account, use any of these:

1. In the game: Menu›Settings›Account›Manage›Delete account
2. On our website: https://lumenfall.gg/delete-account/
3. By email to [email protected], from an address we can use to verify you.

Your characters, currencies, linked sign-ins and sessions are erased immediately, and we revoke your Apple sign-in token. Only the records listed in §6 may remain. See Delete your account for the full list.

08Children

Lumenfall is for players 13 and older. New players confirm their age before an account is created. We don't knowingly collect data from children under 13 (or under the minimum age in their country, such as 16 in parts of the EU). If we learn we have, we'll delete it. Parents or guardians can contact [email protected].

09Security and transfers

We use encryption in transit, revocable session tokens, limited staff access and logged admin actions. No system is perfectly secure, but we work to protect your data. We and our providers may process data outside your country, including the United States. Where required, we use safeguards such as standard contractual clauses.

10Changes

If we make material changes, we'll update the date above and tell players in the game.

11Contact us