Last updated: 30 October 2026
Epoch Siege is made by HBK Software Ltd (company no. 13320244, England and Wales), the data controller. Contact: [email protected].
Playing offline
The campaign, skirmish and survival modes work without an account. Your progress and settings are stored only on your device (and, on Steam, in Steam Cloud if you have it on). Nothing is sent to us.
Playing online
When you open Online for the first time, the game creates an account for this install on our server. We then store:
- a random install identifier made by the game (not your phone's hardware ID) and an account ID;
- your player name (shown publicly on leaderboards and to opponents);
- your email address and a hashed password, only if you choose to link them to move your account to another device;
- your game progress (campaign stars, statistics, achievements) as a cloud save;
- your scores, 1v1 results and rating;
- your friends list, friend requests and battle invites;
- on iPhone and iPad, if you allow notifications: your device's push token and language, so that friend requests and battle invites can reach your lock screen (sent through Apple's push service);
- the commands you play during a 1v1 match, which are relayed to your opponent and not kept after the match;
- your IP address and technical data in server logs, kept briefly (rotated, at most 30 days) for security and troubleshooting;
- error reports: if the game hits a programming error while you are signed in to Online, it sends the error message, where in the game's code it happened, the game version, platform, language, device model and graphics chip; if the game closed unexpectedly last time, it also reports which screen was open. They contain no personal content (folder names that could include your computer's user name are removed). We keep them for at most 90 days to fix bugs. You can turn this off in Settings › Error reports.
We use this data only to run the online features (sign-in, cloud save, matchmaking, leaderboards and ratings) and to fix errors in the game. The legal basis is the performance of our contract with you (providing the game you asked for) and our legitimate interest in keeping the service secure.
Ads (phones only)
On iPhone, iPad and Android the free game shows ads from Google AdMob (Google Ireland Ltd / Google LLC): a banner in the menus, an occasional full-screen ad after a battle, and ads you choose to watch for a bonus in battle. There are no ads on Steam (PC, Mac, Linux) and none in online matches. To show and measure ads, Google collects data such as your device's advertising identifier, IP address, approximate location from it, device and app information and how you interact with the ads. In the UK, EU and Switzerland the game first asks for your consent with Google's consent form; you can change your choice at any time in Settings › Ad privacy choices. Without consent you get non-personalised ads. On iPhone the game does not ask to track you across other apps. Ads are limited to those rated for teens. See how Google uses data: policies.google.com/technologies/partner-sites.
Purchases
Remove ads is a one-time purchase made through the App Store or Google Play. Apple or Google process the payment; we only learn that this install owns the purchase (no card or account details), and the game keeps that on your device. Restore purchases in Settings brings it back on a new device.
What we don't do
No tracking across apps or websites by us, no analytics SDKs, no selling of your data. Apart from the ad partner above (phones only), we do not share your data. The game does not access your contacts, location, camera, microphone or photos.
Where it is stored
On our server hosted by Hetzner Online GmbH in Germany (EU). Hetzner processes the data on our behalf.
How long
Until you delete your account. You can delete it at any time in the game: Online › Account › Delete Account. This removes your account, name, email, cloud save, scores, rating and error reports from the server immediately; backups are overwritten within 30 days. Progress on your device is not affected.
Your rights
Under the UK GDPR, the EU GDPR and Turkey's KVKK you can ask for access to, correction or deletion of your data, object to processing or ask for a copy of it. Email us at the address above. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local authority.
Children
Epoch Siege is not directed at children under 13, and the online features are not meant for them. If you believe a child has created an account, contact us and we will delete it.
Changes
We will update this page if anything changes and show the new date at the top.