Privacy Policy

Who we are

Bitcoin Miner: Valhalla (“the game”) is published by HashCore AI, based in the United Kingdom (“we”, “us”). We are the controller of the personal data described here. Contact: contact@hashcoreai.com.

What we collect, and why

• Game account. An anonymous account identifier created when you first play, and your game progress (settlement name, rigs, boosts, runes, unlock tiers). We need it to run the game.
• Sign-in details. If you secure your settlement with Apple, Google or an email link, the email address and account identifier those services give us. We use them to restore your settlement on another device and to email you about unlock requests.
• Bitcoin address. When you request a tier unlock, the Bitcoin address you enter, kept with the request so it can be reviewed. The game runs in simulated mode: no Bitcoin is sent to it.
• Purchases. Store transaction identifiers and the items granted, to deliver purchases and to handle refunds. Payment details stay with Apple or Google; we never see them.
• Rewarded ads. Ads are shown only when you choose to watch one. The ad network (Google AdMob) confirms the reward to our server with your game account identifier. AdMob may collect device identifiers under its own policy and according to your consent choices.
• Unlock reviews. When you request a tier unlock, our administrators receive a review email with your email address, how old your account is, your purchase total, the number of ads you watched in the last 7 days and the Bitcoin address you entered.
• Notifications. If you allow notifications, our server sends you reminders through Firebase Cloud Messaging: when a forge’s boost has ended, when Thor’s Blessing is ready again, an evening reminder to keep your daily streak, and news about your unlock requests (approved or completed). We also send announcements: a new offer, or a message from us to all players or to you alone. The switches in Settings cover boosts that ended, Thor’s Blessing, the streak reminder and new offers; unlock news and messages from us follow only your phone’s notification permission. Where notifications from our server aren’t available, the game may schedule the same reminders on your device instead, and those never leave your phone. You can turn all notifications off in your phone’s settings.
• Notification token, switches and time zone. While notifications are allowed, the game sends our server your device’s notification token, the notification switches you chose in Settings and your phone’s time-zone offset from UTC (so the streak reminder comes in your evening and Thor’s Blessing never wakes you at night). They are stored with your game account identifier and used only to send you notifications. We don’t share them with anyone else, apart from Google, whose Firebase Cloud Messaging delivers the notification. A token is removed when it stops working, when the same phone signs in to another account, and when you delete your account.
• Support messages. If you email us, your message and the player ID and account email that the game adds to it, to answer you.
• Security. App and device attestation (Firebase App Check, with Google Play Integrity on Android and Apple App Attest or DeviceCheck on iOS) to block abuse.

What your device stores

The game keeps on your device your sign-in session, whether you have seen the introduction, the email address a sign-in link was sent to (until the link is used), your sound setting and your notification choices.

Who processes it

Google Firebase (Hosting for our web pages, Authentication, App Check, Cloud Messaging, and the database and server functions in the EU region europe-west1), Google AdMob (ads and consent), Apple and Google (app stores, purchases and sign-in), Resend (the emails we send you) and Google Gmail (our internal notices about purchases and unlock requests). Some of them process data outside the United Kingdom and the European Economic Area; they do so under the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses, or under an adequacy decision. We don’t sell your personal data.

How long we keep it

For as long as your account exists. Unlock decisions and purchase records are kept as accounting records after you delete your account, anonymised: your identity is removed from them. They are kept for up to 6 years, as UK accounting and tax rules require.

Your rights (UK GDPR and EU GDPR)

You can ask for access to your data, its correction or deletion, a portable copy, restriction of its processing, and you can object to processing based on our legitimate interests. We rely on our contract with you (running the game and your account), our legitimate interests (security, abuse prevention and handling refunds) and your consent (personalised ads, which you can change at any time in Settings › Privacy choices). Players in the European Economic Area and the United Kingdom see a consent form before any ads are shown.

You can delete your account at any time in Settings › Delete account: your game data, sign-in details, notification tokens and Bitcoin addresses are deleted (how to delete your account, also without the game). For any other request, email contact@hashcoreai.com; we answer within one month. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority where you live. If you live in a US state with a privacy law, you have the rights that law gives you.

Children

The game is for players aged 13 and over. We don’t knowingly collect personal data from children under 13; if you believe a child under 13 has an account, email us and we will delete it. Where the law of your country sets a higher age for consent to online services, personalised ads are shown only with the consent your country requires.

Changes

We may update this policy; the date above shows the latest version. If a change is significant, we will tell you in the game.