IMPERIO is a game by LUGRANA S.R.L. This policy covers the web game and the iPhone, iPad and Android apps. We do not display ads inside the game or sell players’ data. From app version 1.1, you can choose optional statistics and, separately, measurement of the campaigns used to promote IMPERIO. Both remain off until you consent.
You can play as a guest. An account is required to keep progress online and join the shared world.
Who processes your data
The data controller is LUGRANA S.R.L. For personal data requests, to exercise your rights or for information about providers, email amministrazione@lugrana.com. You can also call +39 347 072 5250.
What data we use and why
| Data | Use |
|---|---|
| Player name, email and account identifier | Creating your account, recognizing you in the game, verifying your email and recovering access. Your player name is a public alias; your real first and last names are not required. |
| Password and session | Authenticating access. Passwords are stored using an irreversible cryptographic transformation. The service keeps session information, IP addresses and browser or device details for operation and security. |
| Valley, resources, progress and game actions | Saving and syncing your game, carrying out actions, and resolving exchanges and battles. Coordinates are positions on the game map, not your geographical location. |
| Chat, alliance names and descriptions | Enabling communication and community participation. Messages are visible to alliance members; alliance names and descriptions are public within the game. |
| Reports, reported content and blocks | Reviewing possible violations, retaining necessary context and respecting players’ blocks. Your identity is not disclosed to the reported player. |
| Faith purchases in the Apple app | Verifying purchases, crediting packs, preventing duplicate credits and handling disputes. We receive transaction and product identifiers, credit date and amount, and the signed transaction. Your game account identifier is associated with the purchase through Apple’s account reference. We do not receive your card number or Apple Account credentials. |
| Faith purchases through Google Play | Verifying and crediting packs, preventing duplicate credits and handling refunds. We receive the purchase token, product and order identifiers, transaction status, credit date and amount. Google receives a pseudonymous game account reference to associate the purchase correctly. We do not receive your card number or Google Account credentials. |
| Technical data for Android purchases | The Google Play Billing library sends device information (model, operating system and memory), app package and version, operation events and errors, and a random billing-session identifier directly to Google. This data supports purchase functionality and diagnostics. Google may also use it to improve its services according to its privacy policy. The library may send events even without a purchase or game account. Purchase processing does not require us to request advertising identifiers, IMEI or location permission. The campaign measurement described below is separate and requires your consent. |
| Optional app statistics | If you consent, Google Analytics for Firebase (GA4) measures game use: launches and sessions, screens opened, sign-ins, new registrations completed with email verification, tutorial progress, game starts, levels, joining alliances and opening Faith packs. This may include the purchased pack, value, currency and technical transaction identifiers to measure purchases correctly. It does not include payment method details. |
| Optional campaign measurement | With separate consent, we link app measurements to Google Ads campaigns to understand which ads lead to installations, players and purchases. We do not use this data for personalized ads or remarketing lists. |
| Support requests | Responding to issues and requests you send. Include only necessary information; never send passwords, codes or payment method details. |
Legal bases and required data
We use data needed for accounts, saves, requested communications and purchases to provide the service you choose to use (GDPR Article 6(1)(b)). Security, abuse prevention, moderation and the defense of rights rely on the legitimate interest in protecting the service and its players (Article 6(1)(f)), taking data subjects’ rights into account. Processing required by law relies on Article 6(1)(c).
Registration and chat are optional. Without the required account data, you can use guest features but not services requiring authentication. Optional statistics and campaign measurement rely on your consent (GDPR Article 6(1)(a)). You can decline both without losing game or purchase features and withdraw consent at any time, without affecting the lawfulness of earlier processing. We do not make decisions with legal effects through automated profiling; text filters are an initial check and you can ask support to review their outcome.
Statistics and campaign measurement: your choice
From app version 1.1, we use Google Analytics for Firebase (GA4), provided by Google, only after the choice requested inside the app. Change it in Options → Privacy and statistics. You can allow statistics without campaign measurement; campaign measurement also requires statistics. On iPhone and iPad, it additionally requires Apple’s system tracking permission (App Tracking Transparency): if denied or restricted, advertising measurement stays off. Earlier versions and the game opened in a normal browser do not activate this integration: we do not install the Firebase Analytics web component or Google Ads tags in the game page.
When you enable statistics, the service uses a pseudonymous app-installation identifier, app and device information (for example version, model, operating system and language) and the events listed above. Google may infer an approximate area, such as country, region or city, from the connection’s IP address; we do not obtain precise location or request GPS permission. Device advertising identifiers, when available, may be used only after campaign-measurement consent and subject to system permissions. Ad personalization remains off.
We do not send email addresses, passwords, player names or aliases, chat messages, alliance names, complete saves or the IMPERIO account identifier to Firebase Analytics. Registration and sign-in events only indicate the type of operation. Account operation, purchase verification and security records remain separate processing activities, as described in this policy.
Turning statistics off stops optional collection, also disables campaign measurement and resets the local Analytics identifier. You can turn off campaign measurement alone while keeping statistics. Deleting your account revokes both choices and clears local Analytics data. These actions do not immediately delete data already transmitted to Google, which remains subject to the retention rules and rights described below.
Read more in the Firebase privacy documentation, Google’s description of Analytics app data and Google’s information about IP addresses and approximate location.
Who can see information
Other players can see your alias, village, game coordinates, level and game information needed for interactions. Alliance members see chat and group activities. Your email and sign-in credentials are not shown to other players. Avoid posting your own or other people’s personal information in chat.
Data is held by the game service operated by LUGRANA S.R.L. and is accessible to people authorized for support and security. We use Cloudflare for protected traffic forwarding and security, Resend for verification and recovery emails, and Apple and Google Play for distribution of their respective apps and purchases. These providers receive information necessary for their respective functions. With the consent described above, we also use Google for Firebase Analytics/GA4 and, if authorized, measurement through Google Ads.
Providers may operate outside the European Economic Area. Information about their processing, locations and transfer safeguards is available in the policies of Cloudflare, Resend and Apple App Store and Google. You can ask LUGRANA for information about safeguards applicable to your account and copies of the relevant documents.
How long we retain data
- Account and online valley: while you keep your account, subject to requested deletion and the strictly necessary retention below. Technical save history is limited to recent versions.
- Chat: the service keeps up to the latest 200 messages per alliance. Your messages are removed when you delete your account; any reported copy follows the report retention rule. Shared alliance text may remain while the group exists.
- Reports: up to 90 days from creation; technical receipts for moderation operations are kept for 30 days. When an account is deleted, identifying references and report text identifying that account are removed, temporarily leaving the reason, status and dates.
- Blocks: until unblocking or deletion of either account. Posting suspensions expire at the time shown to the player.
- Sessions: a remembered sign-in lasts 30 days and may be renewed during use. Account deletion revokes all sessions.
- Operational emails: content in the game’s queue is encrypted and deleted after sending or a final outcome. Provider and mailbox retention follow their respective policies.
- Purchases: the game ledger does not keep the complete Apple receipt. Profile references are removed after deletion. Minimal transaction records separate from the profile remain as necessary to prevent receipt reuse, handle refunds and meet legal obligations. For Google Play, the purchase token is stored encrypted only while credit confirmation with the store is pending, and removed after completion or account deletion; a cryptographic fingerprint remains in the ledger to prevent reuse. Apple or Google may still link transaction identifiers to the buyer; deleting the game account does not delete the stores’ history.
- Optional statistics and campaigns: the Google Analytics property is configured to retain user-level and event-level data for 2 months, without resetting the period on new activity. Google’s processing times and deletion procedures apply. Aggregated reports and data processed by Google Ads may follow different rules; withdrawing consent in the app does not immediately delete them. See Google Analytics retention rules or contact us for details of the settings applied and to exercise your rights.
- Support and security: for the time needed to handle the request, prevent or investigate abuse and protect relevant rights. Further retention is limited to specific legal obligations or disputes.
Managed server backups are protected and rotated, with a maximum retention of 30 days. They are not used as browsable archives of deleted games. Any restoration must respect deletions already carried out; contact support for information about remaining backups.
Device data and cookies
Your guest game and preferences, including audio and language, stay on your device. Accounts use essential session cookies and local storage needed for syncing and recovering interrupted operations. We do not use advertising cookies in the game page. In the apps, consent preferences are saved on your device; Analytics identifiers and local data are used only under the conditions described in the optional statistics section. Account deletion removes local data linked to that account on the device carrying out the deletion; guest games and exported files remain under your control.
The game does not request access to contacts, microphone, camera or geographical location. Its audio resources do not access your music library.
Your rights
Where provided by law, you can request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. You can withdraw statistics and campaign-measurement consent in the app’s options; for data already sent to Google, contact us so we can assess and handle your request using the available tools. Email amministrazione@lugrana.com; we may request only information needed to establish account ownership. You may also complain to the Italian Data Protection Authority or the competent authority where you live.
You can delete your account directly in the game. Instructions and effects are on the Delete account page. Never email your password.
Minors and updates
Follow the age rating shown in the store. If you are a minor, involve a parent or guardian in decisions about accounts, purchases and optional consent. Contact us if you believe a minor’s data was collected without the conditions required by law.
This page is updated when the service or its data processing changes. The latest revision date appears above.