Barbaro Privacy Policy

Effective date: September 18, 2026 Last updated: September 18, 2026

This policy explains what data Barbaro (on Android, iOS, and the website elbarbaro.app) handles, why, who we share it with, and what rights you have. We've tried to keep it readable; if anything is unclear, get in touch.

The short version:

• You don't need an email or password to play.
• We don't show ads, we don't sell your data, and we don't track you across apps.
• Your barbarian and pet names are public.
• You can delete your account and data from the app or the website.

1. Who is responsible for your data

Ramiro Gioia, an individual based in Argentina ("we", "us").

• Privacy contact: soporte@elbarbaro.app

2. What data we handle

Account data

• An anonymous account ID, created when you open the app.
• A device identifier so you keep your account if you reinstall: on Android, the app-specific Android ID; on iOS, a token stored in the device Keychain.
• If you link your account to Google or Apple: that account's ID and your email address. With Apple, you can choose to hide your email; in that case we receive an Apple relay address.

Game data

• Your barbarians and pets, their names, stats, fights, results, trophies, rankings, titles, and seasons.
• Your school: who invited you and who you invited.
• Name reports you make or receive, and moderation actions (hidden names, required name changes, bans).

Purchases

• Your Pro subscription status (plan, dates, whether it's active, renewals, cancellations, refunds), which we receive from Apple, Google, and RevenueCat. We never receive or store card details or other payment information.

Technical and usage data

• Push notification token (Firebase Cloud Messaging), if you allow notifications.
• Language, time zone (to work out the midnight when your daily limits reset), and approximate country.
• Device model, operating system, and app version.
• IP address in our server and website logs.

What we DON'T collect

• We don't ask for your real name, phone number, photos, contacts, or precise location.
• We don't use the advertising identifier (IDFA / Android advertising ID) and don't track you across other companies' apps or websites, which is why the app doesn't show Apple's "Allow tracking" prompt.

3. What's public

Your barbarian and pet names, along with their visible stats, level, record, trophies, school, and fight results, can be seen by other players and by anyone in rankings, opponent profiles, each fight's web page, and share links. Don't use your real name or personal information in those names.

Your email, account or device IDs, IP address, and subscription status are never public.

4. Why we use data, and our legal bases

| Purpose | Data | Legal basis (GDPR and similar laws) | |---|---|---| | Create and maintain your account, restore it on reinstall, or link it | Account, device, Google/Apple | Performance of a contract (our Terms) | | Run the game: rolls, fights, defenses, rankings, seasons, daily limits | Game data, time zone | Performance of a contract | | Manage Pro and school rewards | Subscription status, school | Performance of a contract | | Send notifications (e.g. "You were attacked while you were away") | Push token | Consent (system permission; you can turn it off) | | Moderate names, prevent cheating, referral abuse, and fraud, keep things secure | Game data, device, IP, reports | Legitimate interest in a fair and safe game | | Answer support requests | Whatever you send us | Contract / legitimate interest | | Meet legal obligations (taxes, requests from authorities) | As needed | Legal obligation |

We don't make automated decisions with legal effects on you. Opponent matching and anti-cheat checks are automated but only affect gameplay; bans are reviewed by a person.

5. Who we share data with

We don't sell or rent your data. We share it only with service providers that help us run the game, under contract and for those purposes:

| Provider | Purpose | Location | |---|---|---| | Google (FCM) and Apple (APNs) | Delivering notifications to your phone | USA and other countries | | Expo | The service that sends the notifications | USA | | Railway | Servers, database and the website | USA | | RevenueCat | Subscription management | USA | | Apple and Google | App stores, Pro billing, Apple/Google sign-in | Under their own policies |

Apple and Google handle payment data as independent controllers under their own privacy policies.

We may also share data if the law requires it, to protect our rights or other players' safety, or if the game is transferred to another person or company (we'll let you know, and this policy will continue to apply).

6. International transfers

We operate from Argentina, and our providers store data mainly in the United States. This means your data is transferred outside your country, including to countries that may not offer the same level of protection.

Where required by law, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the model clauses approved by the Argentine authority, or the provider's certification under the EU-U.S. Data Privacy Framework. You can ask us for more information about these safeguards.

7. How long we keep data

• Account, barbarians, and game data: for as long as your account exists.
• Server logs (including IP): about 90 days, unless we need them to investigate abuse or a security incident.
• Moderation and ban records: as long as needed to prevent ban evasion, up to 2 years.
• Purchase records: as long as tax and accounting obligations require.

When you delete your account, we delete your account, your personal data, and your barbarians (they aren't kept as anonymous opponents or in rankings) within 30 days. Backup copies may remain until they're overwritten within 30 days, along with aggregated or anonymous data that no longer identifies you.

8. Deleting your account

• In the app: Settings > Account > Delete account.
• On the web: elbarbaro.app/borrar-cuenta, where we explain how to identify your account the account code shown at the bottom of Settings.

Deletion is permanent and does not cancel Pro: cancel it in the store. Anything you already shared publicly outside the game (fight images or links you sent or posted) may remain with third parties; we can't delete it.

9. Your rights

Depending on where you live, you can:

• Access your data and get a copy.
• Correct inaccurate data.
• Delete your data (delete your account).
• Object to or restrict processing based on legitimate interest.
• Data portability: receive your data in a commonly used format.
• Withdraw consent (for example, turn off notifications in your system settings) without affecting prior processing.

To exercise these rights, email soporte@elbarbaro.app and include the account ID shown in Settings. We may ask for information to confirm the account is yours. We'll respond within the legal deadlines (one month under the GDPR; 45 days under the CCPA).

Argentina. You have the right to access your personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown (Article 14(3), Law 25,326). The Agencia de Acceso a la Información Pública (Agency for Access to Public Information), as the supervisory authority under Law 25,326, handles complaints from anyone whose data protection rights have been infringed.

EU / UK. You can lodge a complaint with the data protection authority in your country.

California (CCPA/CPRA) and other U.S. states. You have the right to know what data we collect, to request deletion or correction, and not to be discriminated against for exercising your rights. We do not sell or share your personal information for cross-context behavioral advertising, and have not done so in the last 12 months. The categories we collect are those in section 2 (identifiers, internet/app activity, purchase information, and approximate location), and the sources are you, your device, Apple, Google, and RevenueCat.

10. Children

Barbaro is for people 13 and older. We don't knowingly collect data from children under 13 (including as required by COPPA in the U.S.). If we find out or are told that an account belongs to a child under 13, we delete it along with its data. If you're a parent or guardian and believe your child under 13 is using the game, please contact us.

If the age of digital consent in your country is higher than 13, you need a parent's or guardian's permission to use features that rely on consent.

11. Security

We take reasonable measures to protect your data: encrypted connections (HTTPS), restricted access to the database and admin tools, and providers with recognized security standards. No system is 100% secure; if an incident affects your data, we'll notify you and the authorities where the law requires.

12. Notifications

We only send notifications if you allow them on your device. You can turn them off anytime in your phone's or the app's settings.

13. Changes to this policy

If we change this policy, we'll post the new version with its date on the website and, if the change is significant, let you know in the app before it takes effect.

14. Contact

soporte@elbarbaro.app Argentina