Privacy Policy

Last updated: 24 October 2026

This policy explains what personal data the mobile game Five Element Heroes (the "game") and its servers collect, why, how long it is kept, who it is shared with, and the rights you have. It applies to the game on Android and to this website.

1. Who we are

The game is published by the Five Element Heroes Team ("we", "us"), which is the controller of your personal data. Contact us about anything in this policy at support@fiveelementheroes.com.

2. What we collect

Data	Where it comes from	Why we use it
Account identifiers: your player ID, a random secret created on your device, the server (world) you play on	Created when you first open the game	To keep your progress and sign you in
Google account: your Google account ID and email address (only if you sign in with Google)	Google, when you choose "Sign in with Google"	To sign you in on any device and recover your account
Profile and game data: your character name, avatar choice, heroes, items, progress, battles, rankings, guild, friends and referral codes	Your play	To run the game, the boards and the social features
Messages: world, guild and private chat messages, and anything you write to us (for example an appeal or a support request) with the contact you give	You	To deliver messages, keep the chat safe and answer you
Purchases: the product, price and currency, Google Play order ID and purchase token, the date, and whether a purchase was refunded	Google Play and the game	To deliver what you bought, handle refunds and prevent fraud. We never receive your card or bank details.
Technical data: IP address, device model, operating system and app version, recorded when you sign in, buy something, redeem a gift code or when the server detects a possible cheat	Your device	To secure accounts, stop cheating and abuse, and fix problems

The game does not show advertising, does not use advertising or analytics SDKs, does not track you across other apps or websites, and does not ask for your location, contacts, camera, microphone or photos. We do not sell your personal data.

On your device, the game stores your sign-in keys, your settings and downloaded game content. This website sets no cookies.

3. Legal bases (EU, EEA and UK players)

Contract: to provide the game, your account, your purchases and the features you use.
Legitimate interests: to keep the game secure and fair, prevent cheating, fraud and abuse, and moderate chat.
Legal obligation: to keep purchase records required by tax and accounting laws.

4. Who we share data with

Google: Google Sign-In and Google Play billing. Google handles your Google account and payments under its own privacy policy.
Cloudflare: our network and security provider (domain, protection against attacks and delivery of game content). Your connection to our servers passes through Cloudflare.
Server hosting: during the current test phase the game server runs on a computer operated by the Five Element Heroes Team in Vietnam. For the public release we plan to move it to a data centre in the European Union (Germany); this policy will be updated when we do.
Other players see your character name, avatar, level, power, guild, rankings and the chat messages you send.
Authorities, when the law requires it.

When personal data leaves your country (for example to Cloudflare or Google), we rely on the safeguards required by the applicable law, such as the European Commission's standard contractual clauses.

5. How long we keep it

Account, profile, game data and messages: while your account exists. When you ask us to delete your account, we delete them within 30 days.
Purchase records: as long as tax and accounting laws require, even after your account is deleted.
Security records about refunded purchases, fraud or cheating: up to 12 months after your account is deleted, to stop the same abuse again.

6. Your rights

Depending on where you live (for example under the EU and UK GDPR, the UAE Personal Data Protection Law or the Saudi Personal Data Protection Law), you can ask us to access, correct, delete or export your personal data, to restrict or object to its use, and withdraw any consent you gave. To do so, write to support@fiveelementheroes.com with your player ID (shown in the game on the Profile screen). We answer within one month. You can also complain to your local data protection authority.

To delete your account, follow the steps on Delete your account.

7. Children

The game is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has an account, contact us and we will delete it.

8. Security

Connections to our servers are encrypted (HTTPS). Every game command is signed with a key only your device and our server know, and the server checks the results of battles itself. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

9. Changes

We will post any change to this policy on this page and update the date at the top. If a change is important, we will also tell you in the game.

10. Contact

Five Element Heroes Team · support@fiveelementheroes.com