Draft awaiting the owner's approval. This text is not legal advice.
This Privacy Policy explains what information we collect when you play Tank AI on iOS or Android (the "App") or visit tankai.app (the "Website"), how we use it, and the choices you have.
The short version
- We collect what we need to run the game, keep the World ranking fair and fix crashes.
- We do not show ads. We do not sell your personal information or share it for advertising, and we do not track you across other companies' apps or websites.
- Your display name, country flag, level and average clear time are public on the World ranking. Nothing else is.
- You can delete your account and its data at any time.
- We will never ask for your password.
1. About us
Tank AI is a game developed and operated by an individual, Vũ Xuân Cường, under the name "Tank AI" ("we", "us"). We decide how and why your personal information is processed (we are the data controller). Contact: support@tankai.app.
2. Information we collect
2.1 Information you give us
| What | Details |
|---|---|
| Display name | The name you choose for the World ranking (2–16 characters). It is public. |
| Country or region | Shown as a flag next to your name on the World ranking. It is public. |
| Messages to support | Your email address and anything you include when you contact us. |
2.2 Account information
| Sign-in method | What we receive |
|---|---|
| Guest | A random account identifier created on your device. No email or name. |
| Sign in with Google | Your Google account identifier and email address. |
| Sign in with Apple | Your Apple account identifier and an email address, which may be a private relay address if you choose "Hide My Email". |
We never receive your Google or Apple password.
2.3 Gameplay information
- Progress: your level, zone, maps won, tanks remaining and refill timers, and your best winning time on each map.
- Battles: for each battle, the map, AI level, a random seed, the result, the duration and a replay, meaning the sequence of your game inputs and their timing. Our servers re-run the replay to confirm the result before it counts.
- Fair-play statistics: figures computed from your replays and touches, such as reaction times and input rhythm, used to detect bots and cheating. We store summary statistics only, not raw touch coordinates.
2.4 Technical information
- Server logs: when the App or Website talks to our servers, our providers record technical data such as IP address, time, request details and app version.
- Crash reports (Firebase Crashlytics): if the App crashes, we receive the device model, operating system version, app version, a crash trace and an installation identifier.
- App analytics (Firebase Analytics): how the App is used (for example screens viewed, battles started and finished), device and app details, an app-instance identifier, and an approximate location (country or region) derived from your IP address. Advertising features and advertising identifiers are not used.
2.5 The Website and cookies
The public Website uses no analytics, advertising or tracking cookies. Forms on the Website may use Cloudflare Turnstile to block bots, which processes technical data about your browser.
3. Why we use it, and on what basis
| Purpose | Information used |
|---|---|
| Create and run your account and save your progress across devices | Account, gameplay |
| Run battles, verify results, operate the tank and ammo systems | Gameplay |
| Show the World ranking | Display name, country, level, average clear time |
| Detect and prevent cheating, bots and abuse, and enforce the Terms | Gameplay, fair-play statistics, server logs |
| Fix crashes and improve the game, including tuning AI difficulty | Crash reports, analytics, aggregated gameplay statistics |
| Answer support and data requests | Support messages |
| Comply with the law | As required |
We process your information with your consent, given when you start using the App and accept this Policy, and, where the law of your country recognizes them, on these bases: performing our agreement with you (running the game and the ranking), our legitimate interests (a fair game, a secure service, fixing crashes) and legal obligations. You can withdraw consent at any time by deleting your account (Section 8). Withdrawing does not affect processing already carried out.
We do not use your information for advertising. Automated fair-play checks can hide a result or an account from the public ranking while a person reviews it. Warnings and suspensions are always decided by a person.
4. What is public
Your display name, country flag, level and average clear time appear on the World ranking in the App and on the Website. Please don't use your real name or personal details as your display name.
5. Who we share information with, and international transfers
We do not sell your personal information. We share it only with the service providers we need to run Tank AI. They may process it only on our instructions and for the purposes below:
| Provider | Role | Where |
|---|---|---|
| Supabase | Database, sign-in and game servers | Region to be confirmed before launch |
| Vercel | Website hosting | Global network / United States |
| Google (Firebase) | Crash reporting (Crashlytics) and app analytics (Analytics) | Global / United States |
| Cloudflare | Domain name system, bot protection (Turnstile), forwarding emails sent to support@tankai.app | Global |
| Google (Gmail) | Receiving support emails and replying to them | Global |
| Google, Apple | Sign-in, if you choose those options | Global |
| Apple App Store, Google Play | App distribution, under their own privacy policies | Global |
- Because these providers operate servers outside Viet Nam, your information is transferred abroad for processing. We follow the procedures and safeguards required by Vietnamese law on cross-border transfers of personal data and, for players in the EEA or UK, rely on safeguards such as the European Commission's Standard Contractual Clauses where required.
- We may disclose information to competent authorities when the law requires it, or to protect the rights and safety of our players or others.
6. How long we keep information
| Information | How long |
|---|---|
| Account, profile, progress, battles and replays | Until you delete your account |
| Database backups | Expire within 30 days |
| Server and security logs | Up to 90 days, then deleted or anonymized |
| Fair-play enforcement records (warnings, suspensions) | As long as needed to prevent repeat abuse |
| Crash reports and analytics | Under Firebase retention settings, up to 14 months |
| Support emails | Up to 2 years after the conversation ends |
7. Security
We use encryption in transit (HTTPS), per-player access rules in the database, server-side checks for every result, rate limiting, and administrator access protected by two-factor authentication, with every administrator action logged. No system is perfectly secure. If a personal data breach occurs, we will notify you and the competent authorities within the time the law requires (no later than 72 hours after we discover it, where that applies), along with what we are doing about it.
8. Your rights
Under Vietnamese personal data protection law, and depending on where you live (for example the GDPR, UK GDPR or California law), you have the right to:
- be informed about how your information is processed (this Policy);
- give or withdraw consent;
- access your information and receive a copy of it;
- correct it (you can change your display name in the App);
- delete it, using Settings › Delete account in the App or the steps at tankai.app/delete-account;
- restrict or object to processing;
- complain to a data protection authority, or bring a claim, as provided by law.
For anything not available in the App, email support@tankai.app with your Player ID (shown in Settings). We reply within the time the law requires and may ask you to confirm the request comes from you. We will never ask for your password, and we will not treat you differently for exercising your rights.
9. Children
Tank AI is for players aged 13 and over. We do not knowingly collect personal information from children under 13. If we learn that we have, we delete the account and its data. Parents or guardians can contact us at support@tankai.app. If you live in a country that sets a higher age for consenting to data processing, you need a parent's or guardian's permission to play.
10. Changes to this Policy
If we make important changes (for example a new purpose or a new kind of data), we will tell you in the App or on the Website at least 7 days before they take effect, and ask for your consent again where the law requires. The date at the top shows the current version.
11. Language
This Policy is written in English. If we publish translations and they differ, the English version applies.
12. Contact
Vũ Xuân Cường (Tank AI), Viet Nam Email: support@tankai.app