Applies to Bannervale on Android phones and tablets (Google Play), iPhone and iPad (App Store) and PC (Steam, itch.io, or the version downloaded from bannervale.djoox.com). Updated on 12 November 2026. The French version prevails.
1. Who is responsible
Bannervale is a game by Certyneo SASU, under the Djoox Studio brand, 14 rue Beffroy, 92200 Neuilly-sur-Seine, France. Certyneo SASU is the controller of the data described here. Purchases made on the website or in the PC version outside Steam are sold by Stripe, as reseller, through its Link service. Full publisher information is in the legal notice. Contact: contact@djoox.com.
2. The essentials
- No ads, no advertising identifier, no ad tracking, on any platform.
- The whole game is playable without an account and without a network. The account is optional.
- Accounts and online saves are kept on the studio's server, in Europe, for all platforms.
- Play data: only if you have stated that you are 16 or older and have agreed to them. They are sent with no name, no account and no device identifier, and are only kept as daily totals. Saying no takes nothing away from the game.
- The Daily Challenge compares your defense with those of other players with no name, no account and no device; you can turn this comparison off in the Settings.
- The game sends no crash reports to the studio.
- No data is sold or shared for commercial purposes.
- The game never asks for location, contacts, microphone, camera, phone number or name.
3. Data processed, and why
| Data | When | Why | How long |
|---|---|---|---|
| Player identifier created by the game (no name or email) | When the game has a network, from the first launch | Online save | As long as the save exists. Erased after 24 months of inactivity if it is not linked to any account |
| Progress (Sieges, seals, records, unlocked Tier, decorations, settings) and game in progress | When the game has a network; the game in progress, at the end of each wave | Save, resuming on another device | As long as the save exists. Only one game in progress is kept, with no history. Purchases on phones and tablets are never sent |
| Email address and password (stored hashed, never readable), or, with Google or Apple, the identifier of the chosen account. With Apple, the address may be a relay address that hides the real one | Only if an account is created | Signing in, recovering progress, verification codes by email | Until the account is deleted |
| IP address | At each exchange with the account and save service | Security, abuse prevention | Server technical logs: 30 days at most |
| IP address | When play data or the Daily Challenge comparison are sent | Limiting the number of submissions (abuse prevention) | Never stored: used in memory, in a scrambled form changed every hour, then forgotten |
| Play data: game events chosen in advance (mode started, game won, lost or abandoned, Siege, Tier, wave reached, seals earned, help taken, guardian chosen, scene viewed, image shared, account offered or created), with the platform, the game version and the language. Durations and numbers of attempts only in ranges | Only if you have stated that you are 16 or older and agreed (setting "Play data"); sent in batches at launch and at the end of a game | Understanding where the game is too hard or too easy, and tuning it | No per-player line is kept: only daily totals (for example "412 wins at Siege 5 that day"), erased after 90 days. No account, no device identifier, no time of day, no IP address |
| Daily Challenge result: date of the Challenge, win or loss, wave reached, pennants left at the Keep, data of the Challenge played (seed, board, game rules version) and a random number, valid for that day only, created on the device and never linked to an account, a device or another day | At the end of a Daily Challenge game, if the comparison is on (setting "Compare the Daily Challenge", on by default) | Showing the curve of the day's defenses, with no names and no ranks; the number only serves to keep a single result per player per day | Results: erased 8 days after the Challenge date. Daily totals, without any number: 30 days |
| Purchases on phones and tablets | At each purchase | Unlocking the purchased content. The purchase is processed and kept by Google Play or the App Store; it stays on the device and is restored with the same store account. It is not sent to the studio | At the stores: according to their policies |
| Purchases on Steam | At each purchase | Game and add-ons paid to Steam (Valve) and managed by Steam | According to Valve |
| Purchases on the website, in the PC version outside Steam and in the itch.io version (game, add-ons, soundtrack, artbook) | At each purchase | Stripe sells (through Link) and handles payment and invoicing (card, billing address, country, purchase email) as an independent controller, under its own policy. Certyneo SASU only receives the account identifier, the product, the amount, the date, the order reference and the country, to unlock the content on the account and allow the purchased files to be downloaded; never the card data | Right of access to the content: for the life of the account. Sales records: 10 years (accounting obligation), no longer linked to the person if the account is deleted |
| Steam achievements and save | If the game is launched through Steam | Steam features, managed by Valve under its own policy; the studio does not receive this data. The Steam save remains a backup copy of the studio's save | According to Valve |
Daily Challenge comparison. Never sent: your account, your player identifier, your name, your email, a device or advertising identifier, your language, your country, the course of your game. As with any exchange with the studio's server, the game only states the platform (Android, iPhone or iPad, PC) and its version, to check that it is up to date. Other players only see an overall curve, with no names, no ranks and no number of players. Because these results are linked to no one, we cannot find yours to show them to you or erase them on request: they erase themselves after 8 days. To send nothing: Settings > "Compare the Daily Challenge" > Off; pending submissions are then erased from the device.
Play data. They are only used to tune the game. They are linked neither to your account nor to your device, are never sold or passed on, and are not used for any advertising. Because they are linked to no one, we cannot find yours: they only exist in daily totals. To stop them at any time: Settings > "Play data" > Off; measurements not yet sent are then erased from the device.
Sharing an image or a result goes through the device's share menu, to the app the player chooses: the studio receives nothing. A shared game code only contains the game's settings, never a name or an account.
The answer to the age screen is never sent: only "under 16" or "16 and over" stays on the device.
Crash reports are not sent by the game. Google Play, the App Store and Steam may pass anonymous crash reports on to the studio, depending on the settings of your device or of your account with them and on their own policies.
4. Legal bases (European Union)
Performance of the requested service (save, account, purchased content); consent for play data, which you can withdraw at any time in the Settings; legitimate interest in offering the Daily Challenge comparison, which you can refuse at any time with the setting, and in the security of the service (IP address); legal obligation (keeping accounting records).
5. Service providers and transfers
- Accounts, online saves, Daily Challenge comparison, play data and access rights to content purchased outside the stores, on all platforms: on the studio's server, hosted by IONOS in Europe; encrypted backups of accounts and saves at Scaleway, in Paris; verification codes sent by Resend. These companies are processors for Certyneo SASU. Daily Challenge results and play data are not included in the backups.
- Google and Apple (signing in with their account), Google Play and the App Store (purchases on phones and tablets), Valve (Steam), itch.io (download of the itch.io version) and Stripe (sale, through its Link service, of purchases on the website, in the PC version outside Steam and in the itch.io version: payment, invoicing, taxes, fraud, refunds) process some data as independent controllers, under their own policies, including Stripe's privacy policy.
Some data may be processed outside the European Union (in particular in the United States by Resend, and by Google or Apple when signing in with their account), with the safeguards provided by these companies' processing terms (standard contractual clauses of the European Commission or the EU–U.S. Data Privacy Framework).
6. Age, children and parents
- Bannervale is rated 13 and over on the stores. It is not aimed at children.
- Before an account is created, the game asks for a year of birth, without suggesting an answer.
- Under 16: no player email address is collected; a question for adults only comes before account creation, which the parent does with their own address or their own Google or Apple account, after a short notice. No play data are sent, and the question is not asked.
- Without an account, progress is saved online under an identifier with no name or email; it can be erased from the game.
- The Daily Challenge comparison uses no personal data and does not depend on age. A parent can turn it off in the Settings; this setting is protected by the same question for adults only.
- The Shop is preceded by the same question; on phones and tablets, each purchase also goes through Google Play or App Store parental controls.
- A parent can ask at any time for access to their child's data or for its deletion: contact@djoox.com.
7. Rights
Access, rectification, erasure, objection, restriction, portability, withdrawal of consent. Requests to contact@djoox.com; answer within one month. Play data and Daily Challenge results, linked to no one, cannot be found for a person; they erase themselves (90 days and 8 days). You can lodge a complaint with the data protection authority of your country of residence (in France, the CNIL).
8. Deletion
- In the game, on all platforms: Settings > Account > Delete the account; without an account: Settings > Erase the online save.
- On the web: Delete a Bannervale account. By email, in addition: contact@djoox.com.
- Erased: the account, the email, the identifier, the online save and the game in progress. With Apple, the authorization given to Bannervale is also revoked with Apple.
- What remains for a while: technical logs (IP address, 30 days at most); backups of the studio's server, erased in turn within 90 days at most; Stripe sales records at Certyneo SASU, for 10 years, not linked to the person.
- Daily Challenge comparison results and play data are not linked to any account: they are not affected by account deletion and erase themselves (Challenge: 8 days, totals without a number 30 days; measurements: 90 days).
- Purchases on phones and tablets remain recorded by Google Play or the App Store and are restored with the same store account. Purchases made from Stripe remain recorded at Stripe, which you can ask to delete your payment data from your Link account. Steam achievements and purchases are handled by Valve.
9. Security
Encrypted exchanges (HTTPS); each save can only be read by its owner; no password kept in plain text; encrypted backups; access rights to content purchased outside the stores signed by the server.
10. Changes
Any change is dated here; an important change is announced in the game.