Privacy notice
Operator and contact
Service operator / data controller: Townboran
Address: Samut Prakan, Thailand
Account, payment or privacy contact: Open the contact form
DMs and alliance invitations are seasonal and deleted when the season closes. Battle reports and financial records follow the operator’s separate retention policy.
1. Data the service uses
- Account data: player name, email, hashed password, language, registration and last-visit dates, and IP addresses recorded for security.
- Gameplay data: towns, resources, commands, units, alliances, messages, quests, dragon progress and seasonal records. Player names, towns and rankings can be visible to other players.
- Transactions: packs, amounts, currency, references, payment status, Gem and inventory history, and accepted document versions. The game does not collect card details through its own forms.
2. Purposes and legal bases
Necessary data supports account creation, gameplay, progress, payment verification and service requests under the agreement. Security records support fraud prevention and service integrity with regard for player rights. Data may also be retained for legal obligations. Acknowledging this notice is not marketing consent. The game does not use marketing subscriptions or advertising cookies.
3. Cookies and device storage
The game uses a session cookie for login and a townboran_locale language cookie lasting up to one year. Effects preferences, viewed-scene flags and the tab’s draft town name and site use localStorage or sessionStorage. You can clear this data in your browser settings. Clearing the session cookie signs you out.
4. Recipients and processing locations
Authorized administrators and hosting providers access data as needed for their duties. HostDrift Pay receives necessary checkout and verification information and handles payment data under its own notice. Data may be disclosed under lawful requests. Use the contact form to ask about service providers, storage locations or cross-border transfers. The game does not sell player data.
5. Retention
เราเก็บข้อมูลบัญชีและการเล่นเท่าที่จำเป็นเพื่อให้บริการ เมื่อสิ้นสุดบริการหรือหมดความจำเป็น เราจะลบหรือทำให้ข้อมูลไม่สามารถระบุตัวบุคคลได้ เว้นแต่ข้อมูลที่ต้องเก็บตามกฎหมายหรือเพื่อสิทธิเรียกร้อง ข้อมูลจราจรและข้อมูลระบุตัวผู้ใช้เก็บตามระยะที่กฎหมายกำหนดเมื่อเข้าข่าย ส่วนเอกสารประกอบการลงบัญชีเก็บอย่างน้อย 5 ปีนับแต่วันปิดบัญชีของกิจการเมื่อมีหน้าที่ตามกฎหมาย
6. Rights and requests
Subject to legal conditions, request access, a copy, correction, erasure, restriction, objection or portability, and withdraw consent for processing based on consent. Use the controller contact above. The operator may verify identity with necessary information and explain applicable limitations. Contact the operator above to request account closure or data erasure. The operator reviews and processes requests; records subject to retention may remain. There is no automated privacy-request portal. You may complain to Thailand’s Personal Data Protection Committee.
Activity and invitation data
The system records credited play time, visit dates, streaks, gift receipts and invitation relationships to calculate eligibility and prevent duplicates. Eligibility email identifiers use keyed hashes. Inviters see friends’ player names and reward status, not their email addresses or IP addresses on these pages. Shared networks may lead to operator review. Reward and Gem ledger records are retained for reconciliation under the operator’s retention policy.