Tekoworld
Privacy Policy
Last updated 14 September 2026
This explains what Gemfire, and this website, collect about you, why, and what you can do about it.
Who we are
Gemfire is published by Tekin Dabaj, trading as Tekoworld, of Famagusta, Cyprus, the same publisher named on the store listing. For the purposes of the UK and EU General Data Protection Regulation, we are the data controller for the information described here. You can reach us at arcadetkn@gmail.com.
This policy covers Gemfire on Android and iOS and this website. If we publish another game, it will have its own listing here.
What we collect, and why
We have tried to make this specific rather than exhaustive-sounding. If something is not in this table, the game does not collect it.
| What | Why | When |
|---|---|---|
| An anonymous account identifier, generated by Firebase Authentication | So your progress can be saved to our servers and restored on a new device. It is a random string. It is not linked to your name, email or phone number unless you choose to link a sign-in account. | First launch |
| Your game progress: which sieges you have finished and with how many stars, your best wave in the Endless Watch, your coins, gems, hearts and whispers, the turrets, kit and companions you own, the layout of your kingdom and the land it stands on, your daily streak, and your settings | So the game can continue where you left off, and so the same progress appears on your other devices. | As you play |
| A public kingdom card: the keeper name you chose, the companion you wear as your avatar, your keeper level, your kingdom’s score and star count, and your league | So other players can see you on the boards and visit your kingdom. This is the only information other players can see. You can switch it off from the Profile tab at any time, which takes your card down. | While the boards are enabled |
| Your chosen keeper name, held as a reservation so two players cannot claim the same one | To keep names unique. You choose this name; please do not use your real name if you would rather it were not public. | If you set a name |
| A linked sign-in: an identifier from Apple or Google, and whatever that provider passes to us, which may include your email address | Only if you choose to link an account so your progress survives losing your device. We do not receive your password. | Only if you link |
| Purchase records: the store transaction identifier and what was bought | To confirm a purchase with Apple or Google and to give you what you paid for, once. We never see your card details. The payment happens inside the store, not inside the game. | If you buy something |
| Advertising identifiers and related data, handled by our advertising partners | To show the adverts you choose to watch, and to pay for the game being free. See Advertising below. | When you watch an advert |
| Gameplay analytics: events such as a siege being started, won or lost, a turret bought, a chest opened or a purchase completed, with a device-level identifier | To see where players get stuck and which parts of the game are not working. Handled by Google Analytics for Firebase. See Analytics and attribution below. | As you play, subject to your consent where required |
| Install attribution: which advert or link, if any, led you to install the game, and confirmation of purchases you make | To know which of our advertising is worth paying for. Handled by AppsFlyer. | Once, after consent is resolved |
| A report you file about another player’s keeper name | So we can review the name and, where needed, replace it. The report records which account filed it, so that reports cannot be forged. | Only if you report a name |
| Basic technical information: device model, operating system version, language, and error diagnostics | To find out why something crashed or a screen drew wrongly on a device we do not own. | As needed |
What we deliberately do not collect
- Your name, unless you type one in as your keeper name.
- Your email address, unless you email us or link a sign-in account.
- Your contacts, photos, microphone, camera or precise location.
- Your payment card details. Those never reach us.
- Messages. There is no chat, and no way for players to contact each other.
Our legal bases (UK and EU)
- Performance of a contract: saving and restoring your progress, and honouring a purchase. Without these the game does not work.
- Consent: personalised advertising, gameplay analytics and install attribution where the law requires consent, and appearing on the public boards. All of these are optional and all can be withdrawn.
- Legitimate interests: keeping the game working, diagnosing crashes, reviewing reported names, and preventing fraud and abuse of the in-game economy.
- Legal obligation: keeping records of purchases for tax and accounting.
Advertising
The game is free, and adverts are how it is paid for. Adverts are optional in the sense that matters: there are no adverts between levels and no banners. Every advert in Gemfire is one you choose to watch in exchange for hearts, coins or a whisper, and each kind has a daily limit.
Adverts are delivered by Unity LevelPlay (ironSource) as the mediation platform, and by the advertising networks it works with, which currently include Unity Ads and Google AdMob. These partners are independent controllers of the data they collect and have their own policies:
- Unity: player and app user privacy policy
- Google: how Google uses information from sites or apps that use our services
Your choice, and how to change it
If you are in the European Economic Area or the United Kingdom, you are asked before any personalised advertising happens, through a Google-certified consent form. If you decline, you will still see adverts and still receive the rewards for watching them. They will simply not be based on a profile of you.
You can change your answer at any time: open Settings (the gear icon on the Home or Profile screen) and choose Privacy & ad choices.
On iOS, you are separately asked whether the app may use the device advertising identifier. That answer belongs to the operating system and can be changed in iOS Settings › Privacy & Security › Tracking.
Analytics and attribution
We use Google Analytics for Firebase to record gameplay events, such as a siege being started or a chest being opened, so that we can see where players struggle and what is not working. Where consent is required, these events are only recorded after you have given it.
We use AppsFlyer to learn which advert or link, if any, led to an install, and to confirm purchases. AppsFlyer is started only after your consent choice is known, and where you have not agreed to personalisation it runs in an anonymised mode. Its policy is at appsflyer.com.
Who your data is shared with
We use a small number of providers, each for one job:
- Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Analytics): the anonymous account, the saved progress and the boards. Data is stored in the European Union.
- Apple and Google: app distribution, sign-in if you choose it, payments and purchase verification.
- Unity LevelPlay and its advertising networks: advertising, as described above.
- AppsFlyer: install attribution, as described above.
We do not sell personal information, and we do not share it for cross-context behavioural advertising beyond what the advertising partners above do with your consent.
International transfers
Our save data is held in the European Union. Some of our providers are based in the United States and may process data there, relying on the European Commission’s standard contractual clauses, the EU-US Data Privacy Framework, or an equivalent safeguard.
How long we keep it
- Saved progress: for as long as the account is in use, and for up to 24 months after it goes quiet, after which it may be deleted.
- Your public kingdom card: until you hide it or delete your data, whichever comes first. Leaderboards are rebuilt nightly, so a hidden card leaves the boards within a day.
- Purchase records: for as long as tax and accounting law requires, which is generally seven years, and for as long as needed to stop a receipt being redeemed twice. These survive deletion of your game data, because we are not permitted to destroy them.
- Reports you file about other players’ names: for as long as the reported account exists, so that the review can be shown to have happened.
Your rights
If the UK or EU GDPR applies to you, you have the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict or object to how we use it, and to withdraw consent you have given. Similar rights exist under the California Consumer Privacy Act and other laws.
The quickest routes are in the game itself: the boards opt-out is on the Profile tab, the advertising choice is in Settings, and account deletion is on the Profile tab. For anything else, or to delete everything, see deleting your data or write to arcadetkn@gmail.com. We answer within 30 days.
Because accounts are anonymous by default, we may need you to prove which account is yours before we act on a request, usually by sending the request from a linked sign-in address, or by giving us the account identifier shown in the game.
If you think we have handled your data badly, you can complain to your national data protection authority.
Children
Gemfire is a general-audience game. It is not directed at children under 13, and it is not registered as a child-directed app with our advertising partners. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, write to arcadetkn@gmail.com and we will delete it.
This website
This site is static. It sets no cookies, runs no analytics, and does not track you. The only thing it knows about you is what your browser tells our host in order to send you the page.
Changes
If we change this policy we will update the date at the top, and for anything significant we will say so in the game before the change takes effect.
Contact
Tekin Dabaj, trading as Tekoworld
Famagusta, Cyprus
arcadetkn@gmail.com