Privacy policy

Who is responsible

Questions about this policy or your data: info@thursdays.ch. Account deletion is described on the delete account page.

↑ Back to top

In short

• You can play Aetherwake alone and offline without an account. Your progress then stays on your device.
• An account is optional. It is only needed for cloud save, friends, co-op, raids, PvP and rankings.
• The game contains no ads and no advertising, tracking or analytics service of ours. We do not sell personal data.
• Optional real-money purchases (in-app purchases) exist. Payment is handled entirely by Google or Apple. There are no loot boxes, no subscriptions and no ads.
• The website uses no cookies and no analytics, and loads no content from other companies.
• You can delete your account in the app. See delete account.

↑ Back to top

The website

The website thursdays.ch is hosted by Vercel Inc. When you open a page, Vercel processes technical data to deliver it and to keep the service secure: your IP address, the city and country derived from it, the requested address, the time, and system information such as browser and operating system. We do not use this data for profiling or marketing. Vercel processes data mainly in the USA.

The website sets no cookies, uses no analytics or tracking, and has no forms or accounts. Fonts and images are served from the site itself, so your browser contacts no other companies when loading a page. If you write to us by e-mail, we use your message and address only to answer you.

Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR; the corresponding principles of the Swiss revDSG).

↑ Back to top

The game: data on your device

Aetherwake stores the following on your device, in the private storage of the app:

• your save file (hero, items, quests and other progress) with automatic backup copies,
• settings and small bookkeeping values (for example display options, cosmetic choices, whether the intro was seen, the state of cloud synchronisation),
• a small technical log of multiplayer connection events (at most 256 KB, kept on the device only),
• schedules for local reminders (see below).

This data is not sent to us. It is removed when you uninstall the app. Your phone's own backup (Google backup on Android, iCloud or computer backup on iPhone and iPad) may also hold a copy of the save; that is governed by Google or Apple and your device settings. If you use an account with cloud save, a copy of your save is uploaded as described below.

Local reminders

When you leave the app, it can schedule local notifications on your device: new daily quests, weekly quests, and a reminder after a few days without playing. They are created by the app on your device and are not sent by a server. No reminders are scheduled for the hours between 22:00 and 08:00 local time. Your phone asks for permission before the first reminder, and reminders are based on that permission (consent). You can turn reminders off at any time in the system settings of your phone (notifications for Aetherwake).

↑ Back to top

Playing without an account

Without an account the game does not create an online profile. Your save is not uploaded, you do not appear in rankings, and there are no friends, co-op, raids or PvP.

Unity's software components start when the app starts, whether or not you have an account. Unity's servers may therefore receive technical data such as your IP address and technical information from the Unity software. The game stores nothing about you there. Unity acts as our processor (see "Service providers and transfers abroad"). We rely on our legitimate interest in running the game's online services (Art. 6(1)(f) GDPR; revDSG principles). If you do not want this, do not start the app.

↑ Back to top

The optional account and online features

If you create an account, the game uses the Unity Gaming Services of Unity Technologies as our processor. We process the following data to provide the account and the online features you use (Art. 6(1)(b) GDPR, performing the service you asked for) and, for security, fair rankings and preventing abuse, based on our legitimate interest (Art. 6(1)(f) GDPR; in Switzerland the corresponding principles of the revDSG). Providing the account data is voluntary, but without it the account and the online features cannot be used.

Account and sign-in

• Username and password. The game does not ask for or store an e-mail address. The password goes only to Unity Authentication; the game never stores it. Your username is public in the game (see "What other players see").
• A player ID that Unity creates for your account, and the player name, which is set to your username.
• A directory entry that links your username to your player ID so that friends can find you by exact name.
• A recovery code. The game creates it on your device and sends it once to our server, which stores only a salted hash of it, not the code. It lets you set a new password. After several wrong attempts, recovery is locked for one hour. The recovery code stops working when you delete the account.

Sign-in with Google

You can sign in or link with Google through a sign-in page of Unity Player Accounts, which opens in your browser. Google and Unity process your Google data under their own terms. Unity may hold your Google e-mail address in your Unity Player Accounts account; the game does not read or store it. You then choose a game username. You manage that Unity account at player-account.unity.com.

Cloud save

• A copy of your complete save (hero level, items, equipment, quests and similar progress).
• Meta data about the save: revision, time saved, save version, level, item count, best rounds, and the device model (for example the phone model).

Rankings, friends and progress ledgers

• Rankings: your username and your score, for the daily, weekly and all-time boards.
• Friends: friend requests, friends and blocks, and presence: online or offline, last seen, hero level, combat level, and the join code while you are in a lobby.
• PvP: your rating, league, seasons, trophies, match results and rewards. Mythic and daily login rewards, including the monthly login calendar (28 fields, claimed with the server's UTC time), are stored per account as well.

Purchases

Buying in-app products requires a signed-in account. Payment is processed entirely by Google (Google Play Billing) or Apple (App Store); the game and Thursdays Games never receive your card or bank data. To deliver your purchase and to prevent it from being redeemed twice, the purchase receipt is sent from your device to the game's server module (Unity Cloud Code). The module verifies the store's signature itself and calls no Google or Apple server interface. It stores, in Unity Cloud Save, in a private data document:

• per account: which once-only packs were bought and which rewards were delivered,
• per purchase: the platform (Google or Apple), the store environment (production or test), the store's transaction identifier (Google purchase token or Apple transaction ID), the product, the account ID and the time.

Legal basis: performing the purchase you made (Art. 6(1)(b) GDPR) and our legitimate interest in preventing double redemption and fraud (Art. 6(1)(f) GDPR; revDSG principles). Without an account the whole game still works offline, but nothing can be bought.

Time and version checks

While you are signed in, the game asks our server for the current time (to reset daily and weekly quests) and sends the platform name ("android" or "ios") to check whether your app version is still supported. This repeats at most once a minute.

What other players see

• Everyone: your username, and on rankings your score. Season rankings can include your player ID.
• In a team or duel: your hero, hero level, item level, equipped ability, PvP ratings, player ID and display name.
• Your friends: whether you are online, last seen, your levels, and the join code while you are in a lobby.
• There is no text chat, voice chat or free text. The only text other players see is your username.

↑ Back to top

Co-op, raids and PvP

Online sessions use Unity Relay and the Unity Multiplayer services. The players of a session are connected through Unity's relay; the game does not hand players each other's IP addresses. Unity operates the relay and sees the connection data. One phone, the host, runs the simulation and sends the game state to the others. Between players the game exchanges inputs, game state and the profile summary described above. For matchmaking the game sends your PvP rating or, for the raid finder, the raid and measured latencies to relay regions (ping, packet loss). The host reports rated PvP results to our server.

↑ Back to top

Diagnostics, advertising and purchases

• The game contains no advertising, no attribution or tracking SDK, no analytics SDK and no crash-reporting SDK of ours. It does not use the advertising ID or app tracking.
• The Unity engine has a diagnostics option that is switched on for this game. It can send technical diagnostic information (for example error reports, device and app information and an installation ID) to Unity, which keeps it for a limited time (by default 90 days). You cannot switch this off in the app. We rely on our legitimate interest in finding and fixing errors (Art. 6(1)(f) GDPR; revDSG principles). We do not use it to identify you.
• The game offers optional in-app purchases (see "Purchases" above): six consumable products sold through Google Play Billing and the Apple App Store, each showing its exact contents before payment. There are no random items or loot boxes for money, no subscriptions and no ads. Items and currencies can also be earned by playing.
• The interface is available in English, German, French, Italian, Spanish and Portuguese. The device language is used by default and you can change it in the options. The choice is stored only on your device.
• The Android app requests only internet access, network state and the notification permission. It uses no location, camera, microphone, contacts or storage access.

↑ Back to top

Service providers and transfers abroad

• Unity Technologies (Unity Gaming Services), as processor for authentication, cloud save, cloud code, leaderboards, friends, multiplayer and matchmaking. Sub-processors are listed at unity.com/legal/subprocessors.
• Vercel Inc., as host of the website.
• Google Play Billing (Google) and the App Store (Apple), as independent payment processors, only if you buy something.
• Google, also if you choose to sign in with Google.

These providers can process data outside Switzerland and the EU/EEA, including in the USA and other countries that may have no Swiss or EU adequacy decision. Google acts under its own privacy policy. For Unity we rely on the Standard Contractual Clauses of the European Commission (2021), with the Swiss adaptations, in its data processing agreement. For Vercel we rely on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

↑ Back to top

How long we keep data

• Device data: until you uninstall the app.
• Account data and cloud save: until you delete your account. Deletion removes it as described on the delete account page.
• Purchase records: as long as the account exists. When you delete the account, its store row is deleted and the account ID on its purchase records is replaced by "deleted". The transaction identifier stays so that a purchase cannot be redeemed twice. Refunds granted by Google or Apple are not taken back in the game.
• Daily and weekly rankings are cleared at every reset. Closed PvP seasons keep anonymised rows, in which your player ID is replaced by "deleted".
• Website logs: determined by Vercel. We do not keep our own copy.
• E-mails to us: as long as needed to answer you and to meet legal duties.
• Copies in provider backups can take longer to disappear.

↑ Back to top

Deleting your account

You can delete your account inside the game (account button, DELETE ACCOUNT) or, if you cannot open the app, by e-mail. The steps, and what is deleted and what is kept, are on the delete account page.

↑ Back to top

Your rights

You have the right to access, correction, deletion, restriction, data portability and objection, and you can withdraw consents you gave (for example the notification permission in your system settings, or the Google link) at any time. Write to info@thursdays.ch. We may ask you to prove that an account is yours.

You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB, edoeb.admin.ch) or to the data protection authority of your EU/EEA country.

↑ Back to top

Children

Aetherwake is not directed at children under 13, and we do not knowingly collect personal data from them. The game has no age check. If you believe a child under 13 created an account, write to us and we will delete it.

↑ Back to top

Changes

We update this policy when the game or the law changes. The date at the top shows the current version.

↑ Back to top

Contact

info@thursdays.ch

↑ Back to top