Privacy Policy

Omigacha · Version 2026-08-02 · Effective date: August 2, 2026

1. Who is responsible for your data

The data controller for Omigacha (the “Game”) is Filip Gorka trading as Nascorart, a sole trader, of Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset BH16 6FA, United Kingdom.

For any privacy question, or to exercise the rights in section 8, contact feeleap22@gmail.com. We aim to respond within 5 working days, and to formal data-rights requests within one month.

2. What we collect, why, and on what legal basis

“Legal basis” refers to Article 6 of the UK and EU GDPR. Where we rely on legitimate interests we have weighed those interests against your rights, and you may object — see section 8.

Data	Why we have it	Legal basis
Account identifiers — a Firebase user ID, and your email address if you sign in with email, Google or Apple. Guest players get a random identifier and give no personal details.	To create your account, sign you in, and let you recover access.	Performance of our contract with you (the Terms of Service).
Game progress — summoners, monsters, runes, currencies, stage and arena progress, missions, castle, settings.	To save your game and sync it across your devices.	Performance of our contract.
Public profile — your display name, level, ranking and profile customisation.	To show you on leaderboards, in guilds, in the arena and in chat. This is visible to other players.	Performance of our contract.
Chat and guild messages, and reports you file about other players.	To deliver messages, and to moderate abuse. Messages attached to a report are retained so we can investigate it.	Performance of our contract; and our legitimate interest in keeping the Game safe and lawful.
Purchase records — the store transaction identifier, the product bought, and what we credited. We never receive your card or bank details.	To deliver what you paid for, prevent duplicate or fraudulent crediting, and answer refund queries.	Performance of our contract; and compliance with tax and accounting obligations.
Consent records — which versions of these documents you accepted and when, your declared age band, and for under-16s the parental-consent confirmation.	To evidence that we obtained the agreements the law requires before letting you play or buy.	Compliance with a legal obligation; and our legitimate interest in being able to prove consent.
Technical and security data — IP address, device and app-integrity signals, timestamps, error logs, rate-limit counters.	To sign you in, block bots and cheating, and diagnose faults. We use Firebase App Check (Play Integrity on Android, App Attest on iOS) to confirm requests come from a genuine copy of the Game.	Our legitimate interest in security, fraud prevention and service integrity.

We do not collect your precise location, contacts, photos, microphone or camera data, health data, or advertising identifiers, and we do not track you across other apps or websites.

3. Where the data lives, and who processes it

The Game runs on Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, App Check). Google acts as our processor under a data-processing agreement. See Firebase privacy and Google’s privacy policy.

Apple and Google Play process your purchases as independent controllers under their own privacy policies. They confirm to us that a transaction succeeded; they do not give us your payment details.

If you sign in with Google or Apple, that provider confirms your identity and gives us an identifier and — unless you choose to hide it — an email address.

We use no advertising networks and no third-party analytics SDKs. We do not sell, rent or trade personal information, and we do not share it for cross-context behavioural advertising.

We may disclose data where the law requires it, or to establish, exercise or defend legal claims.

4. International transfers

Because the Game runs on Google’s infrastructure, your data may be processed outside the UK and the European Economic Area, including in the United States. Where that happens, transfers are covered by the European Commission’s Standard Contractual Clauses together with the UK International Data Transfer Addendum, or by an adequacy decision. Ask us if you would like details.

5. How long we keep it

• Account and game data — while your account exists. Delete the account and it goes (section 7).
• World chat messages — automatically deleted after 30 days by a nightly job.
• Abuse reports — kept 12 months so we can investigate and handle an appeal, then automatically deleted.
• Direct messages and guild chat — kept while your account exists, because they are conversations you and the other participants may want to refer back to. They are deleted with your account.
• Purchase and tax records — as long as tax law requires, currently 6 years. These survive account deletion because we are legally obliged to keep them, reduced to the transaction record alone.
• Consent records — for the life of the account and 12 months afterwards, as evidence consent was obtained.
• Security logs — typically 90 days.

6. Children

The Game is for players aged 13 and over. Players under 16 are asked to confirm that a parent or guardian agrees to them playing and to any purchases.

We do not knowingly collect personal data from children under 13. If we learn that we have, we delete the account and its data. If you are a parent or guardian and believe your child under 13 holds an account, email us and we will remove it.

The Game is not directed to children and is not designed for a child audience. It contains randomised purchasable items; parents should consider the device-level purchase controls that Apple and Google provide.

7. Deleting your account and data

• In the Game: Settings → Delete Account, which removes your account and its game data.
• Already uninstalled? Use our account deletion page, or email feeleap22@gmail.com.

Deletion removes your account identifiers, game progress, profile and chat identity. We keep only what section 5 says we must — principally purchase records required by tax law, and limited moderation records where an account was banned for serious abuse. Backups are overwritten on their normal cycle, within 90 days.

8. Your rights

If you are in the UK or the EEA you have the right to: access your data; have it corrected; have it erased; restrict or object to processing (including processing based on legitimate interests); receive your data in a portable form; and withdraw consent where we relied on it, without affecting processing already carried out.

To exercise any of these, email feeleap22@gmail.com from the address on your account, or contact us from inside the Game. We do not charge for this and we will not treat you differently for asking.

You may also complain to a data-protection authority. In the UK that is the Information Commissioner’s Office (ico.org.uk); in the EEA it is the supervisory authority where you live. We would appreciate the chance to put things right first.

Depending on where you live in the United States, you may have similar rights to know, delete, correct and opt out. We do not sell or share personal information as those laws define it.

9. Security

Access to player data is restricted by server-side security rules: every account is scoped to its own records, and currency and purchases are minted only by our server after verification. App Check blocks requests that do not come from a genuine copy of the Game. Data is encrypted in transit and at rest by Google’s infrastructure.

No system is perfectly secure. If a breach affects your rights we will notify the relevant authority within 72 hours and tell you where the law requires it.

10. Changes to this policy

If we make a material change we will update the version above and ask you to review and accept it the next time you open the Game. Minor clarifications may be made without asking again.

11. Contact

Filip Gorka trading as Nascorart
Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset BH16 6FA, United Kingdom
feeleap22@gmail.com

See also our Terms of Service.