Shield Rush Privacy Policy

What information we process and why

• Online bastion duels and the Hall of Fame. We process the server-issued guest ID and access token, the nickname you choose, battle inputs and match results. We use this information to verify your account, match you with opponents, run matches, reconnect players, and calculate rankings and match records.
• Friend invites. When invite rewards are available, we process the guest ID of players who create an invite link or install through one, the invite identifier and a hash of an app-scoped Android identifier. We use the link click and install times and Google Play integrity verification information to verify invited installs, grant in-game invite rewards and prevent duplicate rewards.
• Rewarded ads. The Google advertising SDK used in the game processes IP addresses and approximate locations inferred from them, advertising and device identifiers, app launches, taps, ad views and diagnostic information. This information is used to serve ads, measure their performance and prevent ad fraud.
• Google Play purchases. For one-time diamond purchases and Gate Supply Pass subscriptions, we receive the product ID, purchase receipt and purchase status from Google Play and verify them on your device. We grant diamonds or pass benefits for verified purchases or subscriptions. Records of granted purchase rewards and daily pass benefits are stored on your device to prevent duplicate grants.
• Google Play age and parental approval check. Where applicable, we use the age range and parental approval status provided by Google Play to determine which game features are available. This check is processed on your device. We do not save your Play age range or parental approval status or send it to our servers.
• Separate billing tests. If we run a Google Play license test using server-side verification, the server may process participants’ product IDs, purchase verification tokens, purchase status, subscription periods and test guest account identifiers. This information is used to verify test purchases, grant test rewards and prevent duplicate grants.
• On-device storage. Campaign progress, in-game resources, volume, language and notification settings are stored on your device. Sortie ticket recharge notifications are scheduled on your device.

Other players and external services

Your opponent can see your nickname. Your nickname, ranking and match record are visible in the Hall of Fame. We recommend keeping your real name and contact details out of your nickname. You can share friend invite links through a method of your choice.

Google AdMob provides rewarded ads and manages ad consent. When invite rewards are available, we use Google Play Install Referrer and Play Integrity to verify invited installs and app and device integrity. Google Play processes payment details, purchases and subscriptions. To manage the Gate Supply Pass, choose Manage subscription in the in-game shop to open Google Play. If ad privacy options are available, you can change consent in the game settings under Ad privacy options. You can manage your advertising ID in Android settings. Google Privacy Policy

Retention and protection

The server uses online account, match, ranking and invite reward records to provide these features and check for duplicate grants. We determine what to retain based on what is needed to provide the service and prevent abuse. The server currently has no automatic deletion deadline for guest, ranking or invite reward records.

The server stores hashed online guest authentication tokens. The official server uses HTTPS for accounts, matchmaking, rankings, server-based invites and billing tests. Official battle entry, reconnection authentication and final result verification use TCP protected by TLS. Movement inputs and battle state updates use unencrypted UDP. New duel connections also send attacks, skills and in-match purchases over UDP and use a key valid only for that match connection to detect tampering. Older app versions use TLS for key battle commands and state recovery when UDP fails.

Request deletion of your online account and associated data

To request deletion of your online guest account and associated data, such as match records, ranking and invite reward records, email Wangbyul Support at wb_help@wangbyul.com. Use “Shield Rush online account deletion request” as the subject and include your in-game nickname and request in the message. You can use the same email address after uninstalling the app.

Support will explain how to verify your identity, which data we can delete and which records must be retained. You can use the same address to ask about accessing or correcting your personal information. Do not send access tokens, passwords or card information by email.