Privacy policy

Travia.lt · MB SaPRO Kubilai
travialt2@gmail.com

Information we process

Registration and account information includes your player name, email and a securely hashed password. We store villages, troops, actions and game progress, messages sent in the game and support requests. Security logs may include IP addresses and the times of sign-ins and actions.

For gold purchases we process the product, amount or gold granted, payment status and order identifiers. For Google Play purchases we store an encrypted purchase token and use a pseudonymous identifier derived from the player ID. The Travia app does not receive your Google Play payment card details.

How we use information

To provide accounts and game features, save progress, verify purchases, provide support and detect abuse. Your player name and game information are visible to other players through profiles, rankings, alliances and communication features where applicable. Message visibility depends on the recipient or community section you choose.

The administration may review players' messages (private, alliance and world chat) to investigate rule violations, fraud or multiple accounts and to handle player reports. Every such review is logged.

Alliance chats (group conversations in Messages) are moderated: only current alliance members can see them, and the administration can view them and hide inappropriate messages; the history is kept until the end of the season.

Cookies and local storage

Cookies and browser storage support sign-in sessions, language choices and app operation. We do not write your password or payment card details to this storage.

If the administrator enables analytics or advertising measurement, Google Analytics, Meta Pixel and TikTok Pixel are loaded only after your consent. You can change your choice at any time on this privacy page.

Change cookie choice

Rewarded ads in the Android app

If you choose to watch an ad, it is provided by Google AdMob. Google's advertising SDK may collect your IP address and infer your approximate location, ad interactions, diagnostic data and device identifiers for advertising, analytics and fraud prevention. Privacy choices are managed in Google's consent form; where applicable, you can change them using the game's Ad privacy button.

To verify the reward, Google receives the player's numeric ID and the ad session and world identifiers. The server stores the verification event and reward granted to prevent duplicate rewards. Google Privacy Policy.

Notifications and crash reports in the Android app

If you turn on notifications in the app, the server stores this phone's Firebase Cloud Messaging token linked to your account, together with the chosen notification types, language, quiet hours, time zone and app version. This data is used only to send game notifications (messages, attacks, buildings, troops, hero, daily reward) through Google Firebase. You can turn notifications off in the app at any time; after you turn them off or uninstall the app, the token is no longer used.

If the app crashes or hits an error, Google Firebase Crashlytics receives a technical report: the error description and stack trace, device model, Android and app version, language and a random Crashlytics installation identifier. Your player name, email and player ID are not sent; email addresses, link parameters and long numbers are removed before sending. Reports are used only to fix bugs.

iPhone app (App Store)

The iPhone app uses the same Travia account and the same data described above. You sign in with your Travia username (or email) and password; Sign in with Google is not used in the iPhone app.

Purchases: in the iPhone app gold can only be bought through Apple App Store In-App Purchase. Apple processes the payment – we never receive your card or Apple ID details. The server receives the transaction information signed by Apple (product ID, transaction number, date, storefront country, price and currency, environment) and a pseudonymous identifier derived from your player ID (appAccountToken) to credit the right account; refund notices arrive through App Store Server Notifications.

Notifications: if you turn on notifications, the server stores the device's Firebase Cloud Messaging token (delivered through the Apple Push Notification service) linked to your account, together with the chosen notification types and language. Crash reports (device model, iOS and app version) are collected by Firebase Crashlytics and are not linked to your name.

Advertising and tracking: the iPhone app shows no ads, does not use the advertising identifier (IDFA) and does not track you across other companies' apps or websites.

Reporting and blocking: in the app you can report a message or a player and block a player. We store the reason, your comment, the time and a copy of the reported message so that the administration can review it; your block list is only used to hide the blocked player's messages from you.

Apple is not a sponsor of, and is not involved in, the Travia game, its seasons or contests.

Providers and data transfers

Google Play handles in-app payments; the website may use Stripe. The operator-confirmed providers, processing locations and any applicable transfer safeguards are listed below:

Žaidimo svetainės, duomenų bazės talpinimui ir automatinių registracijos bei slaptažodžio atkūrimo laiškų siuntimui naudojamos UAB „Universalūs sprendimai“ (us.lt) paslaugos. Mokėjimus už auksą svetainėje apdoroja „Stripe“. Pagalbos ir privatumo užklausos priimamos adresu travialt2@gmail.com, naudojant „Google Gmail“. Šia paslauga tvarkomas susirašinėjimas ir jame pateikti duomenys. „Google“ ir „Stripe“ duomenis gali tvarkyti už Europos ekonominės erdvės ribų. Pagal konkrečiam perdavimui taikomas sąlygas šie teikėjai remiasi sprendimais dėl tinkamumo arba standartinėmis sutarčių sąlygomis.

Data retention and deletion

Paskyros duomenys, žaidimo pažanga ir su paskyra susietos žinutės saugomi tiek, kiek būtina paskyrai ir žaidimo paslaugoms teikti. Vykdant paskyros ištrynimo prašymą, paskyra ir su ja susiję asmens duomenys ištrinami, išskyrus toliau nurodytas pagrįstas saugojimo išimtis. Žaidimo saugumo įvykių įrašai, senesni nei 30 dienų, šalinami vykdant periodinį sistemos valymą. Hostingo paslaugų teikėjo lankomumo istorija saugoma 5 dienas. Paskyros ir asmens duomenų ištrynimo galima paprašyti svetainės skiltyje „Prašymas ištrinti paskyrą“ arba el. paštu travialt2@gmail.com. Prašymą tvarko administratorius; pateikus prašymą duomenys nėra ištrinami iš karto. Prireikus paprašoma papildomos informacijos, būtinos paskyros savininko tapatybei patvirtinti. Prašymai nagrinėjami nepagrįstai nedelsiant. Apie atliktus veiksmus arba pagrįstą atsisakymą informuojame ne vėliau kaip per vieną mėnesį nuo prašymo gavimo. Atsižvelgiant į prašymų sudėtingumą ir skaičių, terminas gali būti pratęstas dar iki dviejų mėnesių, apie pratęsimą ir jo priežastis pranešant per pirmąjį mėnesį. Pirkimų, mokėjimų ir su ginčais susijusių įrašų dalis gali būti saugoma ilgiau, kai tai būtina teisės aktuose nustatytoms apskaitos prievolėms vykdyti arba teisiniams reikalavimams pareikšti, vykdyti ar apginti. Tokiais atvejais paliekami tik būtini duomenys. Apie taikomą išimtį, jos pagrindą ir saugojimo laikotarpį arba jo nustatymo kriterijus informuojame atsakyme į prašymą. Pasibaigus pagrindui duomenis saugoti, jie ištrinami. Svetainės serveriai ir hostingo paslaugų teikėjo atsarginės kopijos laikomi Lietuvos duomenų centruose. Paslaugų teikėjas įprastai saugo praėjusios nakties ir praėjusios savaitės atsargines kopijas. Senosios kopijos paprastai pakeičiamos per maždaug dvi savaites; konkretus ciklas gali šiek tiek skirtis priklausomai nuo duomenų centro. Iš veikiančios sistemos ištrinti duomenys atsarginėse kopijose gali išlikti iki atitinkamos kopijos pakeitimo. Atkuriant sistemą iš atsarginės kopijos, administratorius pakartotinai pritaiko anksčiau įvykdytus asmens duomenų ištrynimus.

You can request deletion of your account and associated personal data on this website. An administrator handles the request; submitting it does not delete data instantly. Request account deletion →

Your rights and contact details

For data access, correction, deletion or other rights under applicable law, contact the email address above. Where GDPR applies, you may contact a supervisory authority. The operator may ask you to verify your identity to protect the account.