Privacy policy.

Kikar Kombat is an independent game for iPhone, iPad and Android, developed and run by Micael Illos (“we” on this form). This policy covers the game from the version that adds online play and ads onwards, and this website. Earlier versions have no network features and no ads at all. Questions: [email protected].

The game keeps a few things in the app’s own storage on your device, only so it remembers you next time:

• language, CPU level, music, sound effects and haptics;
• the name you picked for online play;
• your Arcade and Walkthrough progress (which lessons you’ve finished, whether the Voter is unlocked);
• a few ad counters (such as when the last ad was shown), so ads don’t pile up, and whether you bought Remove Ads.

None of this is sent to us or anyone else. Deleting the app deletes it. If you back up your device (iCloud or Google), the backup may include it, under your settings and Apple’s or Google’s terms.

Arcade, VS CPU, two players on one device, Training and the Walkthrough all work without a network. In these modes the game itself opens no connection and sends no data. If your device is online, the ad component may still load ads during this time (in menus, never mid-fight); see section 07.

In “Same Wi-Fi” play the devices find each other on the local network (Bonjour on iPhone, NSD on Android) and talk directly, without our servers and without the internet. What passes between them: fight inputs, sync checks, the game version, the device type (iPhone or Android) and your player name.

While you host a game, your player name is advertised on the local network, so anyone looking for games on that network can see it. On iPhone the game asks for Local Network permission and uses it only for this.

In “Over the internet” play (room code or quick match) the app opens an encrypted connection to our relay server, kombat-relay.micaelil.com. The relay pairs two players and forwards their game packets unchanged: inputs, sync checks, version, device type and name. It doesn’t look inside those packets, doesn’t store them, and writes nothing to disk.

• IP address. To stop abuse (someone guessing room codes all day, say), the relay holds your IP address in memory only: while you’re connected, and for about a minute after a failed attempt to join a room. It is never written to the logs.
• Logs. The relay records events and counts only, like “a room was opened” or “how many matches are running”. Contents and addresses are never logged, and room codes are cut to two characters.
• Room codes. Four random characters. A room is deleted when the match ends, or after ten minutes without a guest.
• Cloudflare. The connection passes through Cloudflare, which processes connection data (such as your IP address) to deliver and protect the traffic, under Cloudflare’s privacy policy.

Your name is in Settings under “Your name”, up to 16 characters. Your opponent sees it in the lobby and during the match. It starts out as your device’s name: on iPhone that’s just “iPhone”, and on some Android phones it’s the name you gave the device, which may include a first name. If you’d rather not show that, change it to a nickname before playing online.

The game is free and shows ads from Google AdMob: a banner at the bottom of some menus, a full-screen ad between fights, an ad when the app opens, and rewarded ads only when you tap a button that says so. There are no ads mid-fight, online, in the Walkthrough or in Training. Remove Ads (section 08) switches all of them off.

Google’s ad component collects and processes data under the Google Privacy Policy and How Google uses information from sites or apps that use its services. This can include:

• Device identifiers. On iPhone, the advertising identifier (IDFA) is used only if you allow tracking in Apple’s App Tracking Transparency prompt. On Android, the device’s advertising ID, which you can reset or delete in Settings.
• Approximate location inferred from your IP address (city or region, not GPS).
• Ad interactions: which ads were shown and whether you tapped them.
• Technical data: device model, OS version, language and app information.

It’s used to show ads, measure them, prevent fraud and cap how often you see them, and, if you consent, to personalise them. Where the law requires it (the European Economic Area, the UK, Switzerland and some US states) the game shows Google’s consent form before it requests any ad, and you can change your choice any time in Settings › No ads › Privacy choices. Without consent, Google shows non-personalised ads, which may still use limited data for measurement and fraud prevention.

How to limit it: on iPhone, Settings › Privacy & Security › Tracking. On Android, Settings › Privacy › Ads (on some devices Settings › Google › Ads), where you can delete your advertising ID. Your Google account’s ad settings: My Ad Center. More on Google advertising: policies.google.com/technologies/ads.

We receive no personal data about you from AdMob, only aggregate reports (how many ads were shown, what they earned).

Remove Ads is a single in-app purchase, and the payment happens entirely at Apple (App Store) or Google (Google Play). We never see your card details. The store tells the app that the purchase exists, and may share basic order details with us (such as an order number and country) under its own terms. The entitlement is kept on your device, and Settings › No ads › Restore purchases brings it back on another device signed in to the same store account. Refunds are handled by the store.

• Local Network (iPhone): only to find and join games on the same Wi-Fi.
• Tracking (iPhone, App Tracking Transparency): only for ads. You can say no and the game works exactly the same.
• Wi-Fi state and multicast (Android): only to find games on the same Wi-Fi.
• Internet and network state (Android): for online play and ads. Advertising ID (Android): for ads. Billing (Android): only to buy Remove Ads through Google Play.

The game never asks for your camera, microphone, contacts, photos, notifications or precise location.

• There are no accounts, and we never ask for an email address or a phone number.
• No analytics or tracking tools of our own in the game, and we sell data to no one.
• No chat and no user-generated content, apart from your name.
• We don’t collect crash reports ourselves. If you let Apple or Google share analytics with developers, they may send us crash reports and aggregate performance data that don’t identify you.

Kikar Kombat is meant for ages 13 and up and is not directed at children under 13. We don’t knowingly collect personal information from children. If you’re a parent and something looks wrong, write to us.

• On your device: until you delete the app.
• On the relay: game packets aren’t kept at all. Your IP address stays in memory only, as described in section 05. A room is deleted at the end of the match or after ten minutes.
• Ads: under Google’s retention policies.
• Purchases: at Apple or Google, under their terms.
• Email you send us: as long as needed to answer and deal with it, then deleted.

Depending on where you live (Israel’s Privacy Protection Law, or the GDPR in Europe and the UK, for example) you have the right to know what data is held about you, to correct it and to have it deleted. As we keep no personal data about you, there is usually nothing to show; emails you sent us we’ll delete on request. Ad data is managed through Google’s and your device’s tools (section 07). You can also complain to your local data protection authority.

This website is static. It sets no cookies and runs no analytics, and every script and font on it is served from our own server. Like any website, our server and Cloudflare in front of it process your IP address and browser details to deliver and protect the page, and keep ordinary access logs for operations and security only.

If anything changes, say a different ad provider or a new feature that sends data, we’ll update this form and the date at its head before the change ships.