Applies to the Legion of Paradise app (version 1.0.6) on Android, iOS and in the browser. Last updated: 2026-10-16.
In one sentence
Legion of Paradise sends its publisher only what the online Colosseum needs, and only if you choose to enter it: an identifier drawn at random, a legion name drawn by lot (or your Game Center nickname), your team, your rating and your battles. The only other data collected is that of the optional adverts, on iPhone, iPad and Android, by Google — and only when you choose to watch one. Your game is a file, it lives on your device; when you leave the game, a copy goes to your iCloud or Google account, so that you can find it on another device — never to a server of ours.
The only server of ours is the online Colosseum's (see below): it receives nothing until you have entered it, and never your game. The app contains no analytics and no behaviour-measuring tool meant for us. In the browser, it contains no advertising.
What the app stores, and where
| What | Where it is written | Who can read it |
|---|---|---|
| Your progress: legion, buildings, gold, quests, settings | A file on your device (sauvegarde.json); browser local storage for the web version | You alone |
| The tokens for your in-app purchases | The same file | You alone |
| A randomly drawn game identifier | The same file | You alone |
| Your language and volume settings | The same file | You alone |
| Your online Colosseum account: an identifier and a secret drawn at random | The same file, and the Colosseum server (see below) | You, and the publisher for the server |
The game identifier does not identify a person or a device. It is a number drawn at random the first time you save online, and its only job is to notice that a second device has written since your last exchange, so the app can ask you which of the two games to keep instead of silently overwriting one. It is derived from no hardware, advertising or account identifier. Erasing the game erases it.
What leaves the device
Online save
It is automatic since version 1.0.1: every time you leave the game, your game is sent to your account. Two deliberate exceptions: nothing leaves until the game has started (a new device never overwrites a game already online), and nothing leaves over a game another device has written in the meantime — the game will ask you which one to keep. To get it back elsewhere: "Recover a game" on the home screen; ⚙ Settings → "Change device" sends it on demand.
- On Android, the game is stored in Google Play Games saved games, on your Google account. Google keeps it for you, and we have no access to it.
- On iPhone and iPad, it is stored in iCloud, on your Apple account. Same thing: that is your space, not ours.
- On desktop and in the browser there is no online save at all; the game says so explicitly in that window.
What leaves is the content described in the table above, and nothing else: a saved game. No name, no address, no contacts, no location.
To remove a stored game, use the Google Play Games or iCloud settings on your device; they hold it, and they alone can erase it.
The online Colosseum
At the Colosseum, your Legion fights other players' legions. Nothing is sent until you have entered it: on your first visit, the Colosseum window says what is kept and offers "Enter the online Colosseum" or "Train offline"; training sends nothing. Once you have entered, the game sends your team on each visit to the Colosseum, and once a day at launch, so that it can defend your place.
What our server keeps:
- an identifier and a secret drawn at random when you enter, which recognise you; the secret is kept only as a hash;
- a legion name drawn by lot ("Legion of Raziel No. 482"): you do not choose it; on iPhone and iPad, if you are signed in to Game Center, your Game Center nickname replaces it ("Legion of Toyger");
- the team you enter: class, choir, level and battle statistics of up to five angels;
- your rating, your battles of the day and of the season, your wins;
- each battle: both teams, its draw and its outcome;
- the game version and the date of your last request.
Nothing else: no real name, no email address, no contacts, no device or advertising identifier, no location, not your game.
What other players see: your legion name (or your Game Center nickname), your rating and your place in the ranking, and your team when they fight it. Never your identifier.
Game Center (iPhone and iPad): when you enter the online Colosseum, the game signs in to Game Center, Apple's game service — Apple shows its banner, or its sign-in window if you are not signed in. The game reads your nickname there and posts your rating to it, in a weekly ranking you can view in Game Center. What Game Center keeps falls under Apple's policy. Without Game Center (signed out in the device Settings, or on another platform), the Colosseum keeps the name drawn by lot; a nickname already sent stays displayed until the next one, or until you ask us to erase it.
Where: at Supabase (Supabase Inc.), on servers located in Ireland, in the European Union. Like any server, it sees the IP address of the connection; it is recorded in none of our tables, and only the host's technical logs keep it for a few days.
How long: a battle is erased after 90 days; an account that has made no request for 12 months is erased, with its team and its battles. The database does this by itself, every night.
Why: to provide the service you ask for by entering the online Colosseum — finding you opponents, counting your battles and keeping the ranking. None of it is sold or shared, and none of it is used for advertising.
In-app purchases
Payments are handled entirely by Google Play or the App Store. The app never sees your payment method, your name or your billing address: it receives a token from the store saying "this purchase is valid", and that is all.
As a publisher we receive aggregated sales reports from Google and Apple — amounts and countries, never a buyer's identity. How Google and Apple handle your payment data is governed by their own privacy policies, not by this one.
Signing in to Google Play Games (Android)
If you use the online save on Android, Google Play Games asks you to sign in to your Google account. That sign-in happens between you and Google: the app receives what it needs to read and write your saved game, and asks for neither your e-mail address, nor your friends list, nor your profile.
Advertising
All advertising in Legion of Paradise is optional. The game features a character, Virgil, from whom you may ask a favour each time he appears — some gold or soul shards —, and the Gate offers one free invitation a day; each for an advert you chose to watch. There is no advert that opens by itself — not between screens, not at launch, not as a banner. Never touching those two buttons means never seeing a single advert.
On iPhone, iPad and Android, these adverts are supplied by Google AdMob, the ad network of Google Ireland Limited. In the browser, this version integrates no ad network: neither Virgil nor the free invitation appears there.
Your consent, where the law requires it
If you are in the European Economic Area, the United Kingdom, Switzerland or a US state that requires it, Google shows you its own consent window the first time you ask Virgil for a favour or claim the Gate's free invitation, never before. There you choose what its advertising partners may do. That window decides whether an advert may be requested; a refusal is recorded and respected.
Adverts are never personalised. The app does not track you, and every advert request is sent marked "non-personalised". On iPhone and iPad, it does not ask for permission to track your activity ("App Tracking Transparency"), so Google does not receive the device's advertising identifier (IDFA). On Android, the Google kit reads the device's advertising ID, to cap how often adverts are shown and to fight fraud, not to target you; you can reset or delete it in Android's settings (Google → Ads).
What Google collects to show an advert
To choose, show and measure an advert, the Google kit built into the app processes, according to the choices made above:
- an approximate location, derived from the IP address;
- on Android, the device's advertising ID (see above);
- advertising data: the adverts seen, tapped, watched to the end;
- interactions with the app related to adverts;
- diagnostic data: crashes and performance of the kit.
The publisher receives none of this data. It receives aggregate reports from Google — number of adverts shown, revenue, countries —, never a player's identity or identifier. What Google does with it falls under its own policy: How Google uses information from sites or apps that use its services.
Changing your choices
At any time, from Virgil's window, "My privacy choices (Google)", where the law of your country requires it, reopens Google's window. And asking for no favour means sending no advert request.
If you bought the Monthly Blessing, Virgil grants his favours without an advert: no request is sent to Google for them.
Children
The app is not specifically directed at children and asks them for no information. Data is collected by Google, for Virgil's optional adverts on iPhone, iPad and Android, and only when one chooses to watch one; and by us, for the online Colosseum, only if one enters it (see above: no name, no contacts). It also contains in-app purchases: the Google Play and App Store parental controls can restrict both.
Your rights
The European General Data Protection Regulation (GDPR) gives you rights of access, rectification, erasure, restriction, objection and portability over your personal data.
We hold only one thing that may concern you: your online Colosseum account, if you have entered it — pseudonymous data, with no name or contacts (see "The online Colosseum"). Your game data is on your device and on your Google or Apple account, where you control it directly; advertising data is held by Google, which is responsible for it:
- Your online Colosseum account: to get a copy of it or have it erased, with your team and your battles, write to us at legionduparadis@gmail.com giving your legion name (it is shown at the top of the Colosseum). It also erases itself after 12 months without a battle.
- Erase the local game: uninstall the app, or ⚙ Settings → "Start over".
- Erase the online game: through the Google Play Games settings ("Delete game data") or iCloud settings on your device.
- Advertising data: change your choices in Google's window (see "Changing your choices"); exercise your rights with Google, at myaccount.google.com.
You may nevertheless write to us at any time at legionduparadis@gmail.com; we answer within 5 working days. If you are in the European Union you also have the right to lodge a complaint with your national data protection authority.
Security and retention
Our only database is the online Colosseum's. It is not open to the public: only the Colosseum function reads and writes it, and each account's secret is kept there only as a hash. A battle is kept for 90 days, an inactive account for 12 months (see "The online Colosseum"). Advertising data is retained by Google under its own policy. The local game lives as long as the app is installed; the online game lives as long as your Google or Apple account keeps it.
Changes
Any change to this policy will be published on this page, with its date. A change affecting what the app transmits — a new ad network, or adverts on another platform, for instance — would be announced inside the app before taking effect.
Contact
David Scalisi, individual publisher (natural person)
legionduparadis@gmail.com
See also the legal notice.