Privacy Policy

What this policy covers

This policy covers the Hisar app for iPhone, the game server at hisar-api.sayfa.app that the app talks to, and this website, hisar.sayfa.app. “We” means the developer of Hisar.

Playing as a guest

The first time you open Hisar, the server makes an account for you with a random ruler name such as “Lord 12345” and 30 gold, and gives the app a session key. The app keeps the key in your iPhone's Keychain; the server keeps only a one-way hash of it. You never give us a name, an e-mail address or a phone number.

Sign in with Apple

Saving your kingdom with your Apple Account is optional (Kingdom → Account). Hisar asks Apple for neither your name nor your e-mail address. Apple gives the server only an identifier that stands for your Apple Account in Hisar, which the server keeps so that you can sign in on a new iPhone.

The server may also keep a token from Apple, encrypted, so that deleting your account can tell Apple to end Hisar's access to your Apple Account.

Your location and where your village stands

If you allow it, the founding map opens where you are. Your iPhone works out your location and shows it on the map; Hisar never sends it to us or to anyone else.

When you found your village, the app sends the point at the middle of the map. If you did not move the map, that point is close to where you are. The server turns it into a map tile (0.02° of latitude and longitude, about 2 km), picks a free tile on land 2 to 5 tiles away (further when the area is full) and never the one you picked, and keeps only your village's tile. The point you picked is not stored or logged.

What the game keeps

• Your kingdom: its ruler name, when it was made and last seen, its gold, Plus and Prosperity times, its alliance and role, and its quests, daily tasks and achievements.
• Your villages: their names, map tiles, fields, buildings, resources, troops, research and what is being built or trained.
• Armies and merchants on the way, and the reports of battles, scouting and trade.
• Every change of your gold, with its reason.
• The names you type: your ruler's and your villages' names, and an alliance's name, tag and description.

What other players see

Hisar is played with other people. Every player in your world can see your ruler name, your villages' names and places on the world map, your population and rank, and your alliance. A battle, scouting or trade report shows both sides' names and the troops or goods involved, and it stays with the other player until it expires.

Notifications

If you allow notifications, the app sends the server your iPhone's push token, the app's language, your time zone, your quiet hours and whether battle alerts ring in them. The server uses them, through Apple's push service, only to tell you about incoming attacks and the results of battles. Reminders for finished construction, training and returning armies are scheduled on your iPhone and do not go through us.

The server also keeps a one-way hash of the push token with your account. Kingdoms played on the same iPhone cannot trade with, reinforce or attack each other; when one tries, the server records the two kingdoms, the action and the time for a fair-play check.

Weather

Your village shows the real weather of its area. The server asks MET Norway for the forecast at the middle of each 1° by 1° area where villages stand. Nothing about you or your village is sent.

Maps and art

The founding map and the world map are Apple Maps. Apple receives the map areas your iPhone shows, under Apple's own privacy policy. Some of the game's pictures are downloaded from Apple as asset packs after you install the app.

Purchases

Gold is bought through the App Store. Apple handles the payment; your card details never reach us. To confirm a purchase, Hisar uses RevenueCat. The app identifies itself to RevenueCat with your kingdom's random ID, and RevenueCat receives the App Store's purchase information and, as with any network request, your IP address and device details such as the iOS version.

RevenueCat then tells the server about the purchase. The server adds the gold once per purchase event and keeps the event's ID, its type and your kingdom's ID, so that no purchase is ever counted twice.

App Attest and DeviceCheck

The server is ready to use Apple's App Attest, to check that a request comes from the real Hisar app, and DeviceCheck, which lets Apple keep two bits per iPhone for us so that one iPhone founds one guest kingdom per world. This version of the app uses neither. When an update does, this policy will say what it keeps.

IP addresses and logs

Every request from the app reaches the server through Cloudflare, so Cloudflare and the server see your IP address. The server uses it to limit how many guest accounts one address can make: it keeps the address, cut to its network block for IPv6, and deletes it within about two hours. Requests from a kingdom are limited by its account, not its address.

The web server in front of the game writes a log line for each request with the time, the address asked for, the IP address and the device's user agent. The server's own logs name kingdoms by their ID. Logs are kept for 30 days.

Who helps us run Hisar

We never sell your data or use it for advertising. These services receive it only to do their part:

• Hetzner

  What for

  The game server and its database

  Where

  Finland, European Union

  Privacy policy

• Cloudflare

  What for

  Secure connections to the game server, this website, and encrypted database backups (R2)

  Where

  Global network

  Privacy policy

• Apple

  What for

  Sign in with Apple, push notifications, App Store payments, Apple Maps and asset packs

  Where

  United States

  Privacy policy

• RevenueCat

  What for

  Confirming gold purchases

  Where

  United States

  Privacy policy

• MET Norway

  What for

  Weather forecasts for areas of the map; receives nothing about you

  Where

  Norway

  Privacy policy

How long we keep it

• Reports are deleted after 30 days, unless you star them (up to 50).
• A kingdom nobody has opened for 14 days is deleted if its population is under 200; any other kingdom after 60 days. Its account stays, with its gold and its Apple link, so that you can found again when you come back.
• IP addresses for the guest limit: within about two hours. Logs: 30 days.
• The server's database is backed up, encrypted, to Cloudflare R2; backups are kept for 30 days.
• The records of purchase events and fair-play checks hold only random IDs and stay after a kingdom is deleted, so that a purchase is never paid twice and a check can be finished.
• Everything else is kept while your kingdom exists.

Deleting your kingdom

In the app, open Kingdom → Account → Delete account and confirm. The server takes your kingdom out of its alliance, sends your troops home, and deletes your account and every kingdom in it: villages, troops, reports, gold and its history, quests, sessions, push tokens and their hashes. If you saved your kingdom with Apple, it also tells Apple to end Hisar's access, when that is set up.

Reports in other players' hands that name your kingdom stay until they expire. Deleted data leaves the backups within 30 days. Deleting the app from your iPhone does not delete your kingdom; delete it in the app first.

On your iPhone

The app keeps your session key in the Keychain and your settings (sound, haptics, quiet hours) and downloaded pictures on your iPhone. Deleting the app removes the settings and pictures. iOS can keep Keychain items after an app is deleted, so a reinstalled Hisar may find your guest kingdom again.

This website

hisar.sayfa.app uses no cookies and no analytics, and loads nothing from other sites. It is served by Cloudflare; as with any website, your IP address and browser details pass through Cloudflare's network to deliver the page.

Your rights

You can ask us what we keep about you, ask us to correct it, or to delete it. Under Turkey's KVKK and, where it applies, the EU's GDPR, you can also object to processing and complain to the data protection authority. Write to us at hisar@sayfa.app.

There are no ads in Hisar and no tracking across apps or websites.

Changes

When the app or the server changes what it keeps, we update this page and the date at the top.