Maiterra Privacy Policy
In short. Maiterra sends how your matches go, so the game can be balanced, with a random ID for your install and never your name. You can switch that off and delete it in the game, under Settings, About game data.
Playing online needs an account with a display name. That and your rating and match history stay on the game server until you delete the account.
Nothing is sold, and there are no ads and no third-party analytics.
Who is responsible
Maiterra is made and run by an independent developer, who decides what is collected and why. For anything about your data, write to [email protected].
What the game sends, and why
Match data, to balance the game against how it is really played. For each match: the map, the seats and difficulty, the house you played, the orders you gave each turn and how long you took, and how the match ended. The computer players' orders are not sent.
App events, to see where players get stuck: that the app was opened, which screens were visited and for how long, tutorial steps, when a match starts and when armies first meet.
Crash, error and freeze reports, to fix them: the game version, the operating system and its version, whether the device is a phone, tablet or computer, the graphics renderer, which screen and turn you were on, how long the app had been running, and the last 20 kinds of thing you did (screens opened, kinds of order). Error messages are cleaned of names, codes and file paths before they are sent. The device model is never sent.
Daily board scores, to rank the day's board: the date, your points and turns, and the game version.
All of these carry a random ID made for your install. It is not your name or your account, but it is stable, so it is personal data, and it is how a deletion finds your data.
Never sent: your name with any of the above, your location, contacts, photos, advertising ID, or anything else on the device.
Legal basis: our legitimate interest in a balanced, working game (GDPR Art. 6(1)(f)). You are told on first launch, before anything is sent, and you can object at any time with the Share match data switch.
Playing online and accounts
Playing against people over the internet uses the game server and, for most modes, an account. The server keeps:
- your display name and its tag, which other players see;
- your rating, your last 20 online matches (with your opponents' names), your friends and blocked players;
- for an account: when it was made and last used, and your recovery code stored only as a one-way hash, so nobody can read it back;
- reports you file about other players, or they file about you, with both sides' IDs and the reported name.
Moves in a match go through the server. There is no free-text chat; emotes are a fixed set.
Addresses. The server sees your internet address to connect you. For a room a guest opens, the opener's address is kept with the room until it ends. The sign-in service keeps only a keyed scramble of your address, to slow down password-guessing, never the address itself.
Legal basis: providing the online game you asked to play (Art. 6(1)(b)); reports, to keep play safe (Art. 6(1)(f)).
Wi-Fi play between devices on the same network uses no server and sends nothing to it.
How long it is kept
| What | Kept |
|---|---|
| Match details, app events, crash reports, Daily board scores | 90 days |
| Match summaries after that (the install ID is replaced by a random one, so they no longer point to anyone) | No limit |
| Sign-in security log | 90 days |
| Player reports | 180 days |
| Unfinished online rooms | 14 days |
| Account, name, rating, match history, friends | Until you delete it |
Your choices
- Stop sharing: Settings, About game data, Share match data.
- Delete match data: Delete my data, in the same place. It clears the device at once and asks the server to delete everything sent under your install ID; with no connection it asks again the next time you are online.
- Delete your account: in the game under Settings, Account, Delete account, or without the app at auth.maiterra.app/delete with your recovery code. This removes your account, name, rating, history, friends and the reports about you, and cannot be undone.
- No account? If you played online without one, email [email protected] with your display name and tag, and we will delete it.
You also have the right to see a copy of your data, to correct it, to restrict how it is used, and to complain to your data protection authority. Write to [email protected]; you will get an answer within one month.
Who else handles it
No data is sold or shared for advertising. Two providers handle it on our behalf: Hetzner Online runs the servers in the EU, and Cloudflare provides the domain's name service, forwards email sent to [email protected], and carries the game's connections to our servers through its network, which protects them from attacks; it can see that traffic as it passes. Cloudflare is a US company, so this traffic may be handled outside the EU; it is covered by the EU–US Data Privacy Framework and the EU's standard contractual clauses. The game is distributed through Google Play, which has its own privacy policy.
Security
Everything the game sends to our servers travels encrypted: match data, the Daily board and sign-in over HTTPS, and online play over a secure WebSocket (WSS). Wi-Fi play between devices on the same network does not touch our servers and is encrypted too. So that nearby phones can find it, a phone hosting a Wi-Fi game announces its display name and number of free seats to the local network.
Children
Maiterra is not made for children under 13. When it first starts, the game asks for your year of birth and keeps the answer only on your device. If it shows you are under 13, the game sends nothing at all and online play and accounts are off; the rest of the game works offline. If you think a child has used it online anyway, write to us and we will delete it.
Changes
When this policy changes, the date at the top changes too, and a change to what is collected is shown in the game before it takes effect.