Skip to the content
The Shattered Eye

The Shattered Eye — Privacy Policy

Last updated: 6 October 2026

The Shattered Eye ("the game") is made by AM Soft SH.P.K. ("we", "us"), NIPT M67611801A, Tirana, Albania. We are responsible for the personal data described here. You can reach us at [email protected].

This policy explains what the game and our servers keep about you, why, for how long, and what you can do about it. We wrote it to be read.

The short version

  • You need an account to play. We keep your email (or your Apple link), the name you choose, and your progress, so your game is safe and you can play with others.
  • Other players see your name: in battles together, on the month's boards, and in their friends list.
  • Our servers are in Germany. We do not sell your data.
  • The game shows ads from Google AdMob. Ads are personal only if you agree; players under 16 always get general ads.
  • You can delete your account in the game at any time: Settings → Account → Delete account. It is gone at once.

What we keep, and why

Your account

  • Email and password, if you create an account with an email. The password is never stored as you typed it: our server keeps only a one-way hash of it.
  • Sign in with Apple, if you use it: Apple gives us an identifier for your account in this game and your email. If you choose "Hide My Email", it is a private Apple address that forwards our messages to you. We do not ask Apple for your name.
  • Sign in with Google (Android), if you use it: Google gives us an identifier for your account in this game and your email. Google also sends your name and profile photo; we delete them at once and do not keep them.
  • Your name in the game (your username). You choose it, you can change it, and other players see it. Names are checked against a filter of rude words.
  • This device's link to your account: an identifier the game makes for this installation, so the game can sign you in again on this device.
  • The time your account was made and last used, and the sessions that keep you signed in (stored encrypted on your device).

Why: to give you an account and keep it secure (the contract between us when you use the game).

Your progress

  • Your campaign: missions won, stars, unlocked heroes, towers and other items, Crystals and other in-game currencies.
  • The results of your missions (which mission, how many stars, how long it took), so our server can check that progress is real. Progress that could not have been made is not accepted; this keeps the boards and battles together fair.

Why: to keep your game safe across devices and to keep the game fair (contract; our legitimate interest in fair play).

Playing together, the boards and friends

  • Battles together. When you play with others, our match servers handle your name, your people (race), your actions in the battle and your connection (including your IP address) while the battle lasts. The other players in the battle see your name. With Quick play, those players may be strangers. There is no chat: only map pings and a few emotes.
  • The month's boards. At the end of a game in the endless mode we keep the wave you reached, your score and your people (the time it took is checked, not kept). The best results of the month are shown to every player, with the players' names. A team's result shows the names of all its players.
  • Friends. The friend requests you send and accept, and your friends list. Your friends see your name, whether you are online, and the battle you are in, so they can join you.
  • Reports and blocks. You can report a player's name, cheating or behaviour, and block a player. A report keeps who reported whom, why, where and when, so that we can act on it (for example give a rude name a plain one, or close an account); the player reported is not told who reported them. A block stays until you lift it: a player you block cannot ask you to be friends, and Quick play keeps you apart.

Why: these are the game's features you choose to use (contract); reports and blocks keep the game safe for everyone (our legitimate interest).

Advertising

  • The game shows ads through Google AdMob. AdMob may process device identifiers (such as the advertising ID), your IP address and how you interact with ads, to show and measure ads. See Google's policy: https://policies.google.com/privacy
  • In the European Economic Area, the UK and Switzerland you are asked before ads are personalised (Google's consent form). You can change your answer at any time in Settings → Privacy options.
  • On iPhone and iPad, Apple's App Tracking Transparency prompt decides whether ads may track you; you can say no.
  • Players who tell the game they are under 16 always get non-personalised, general-audience ads.

Why: ads pay for the free game (personalised ads only with your consent).

Purchases

  • Payments are made through the Apple App Store or Google Play. We never see your payment details. We get a confirmation of what you bought, and the game unlocks it on your account.

What we do not do

  • We do not sell personal data and do not use it for anything this policy does not describe.
  • The game does not send analytics or usage tracking to us or to analytics companies. If that changes, this policy will say so first.
  • The game does not use your location, contacts, camera, microphone or photos.

Our servers and logs

  • Our servers are run for us by Hetzner Online GmbH in Germany. They keep accounts, progress, boards and friends lists, and run the battles you play together.
  • For security and to fix problems, the servers keep technical logs. The web server's logs (with IP addresses) are deleted after 14 days. The game servers' logs (which can include player names and account identifiers) are deleted automatically as newer logs replace them.
  • Every night we make a backup of the database. Backups are kept for 14 days on the server and for up to 90 days in a second copy we keep ourselves, so the game can be restored after a failure.
  • All connections between the game and our servers are encrypted (HTTPS and secure WebSockets).

The website

theshatteredeye.com uses no cookies and does not follow you. What it keeps:

  • Visits: Cloudflare Web Analytics counts visits without cookies and without identifying you. The web server's logs are deleted after 14 days, as above.
  • The contact form: your name, your email, your name in the game and your message, so that we can answer you. Kept for 12 months, then deleted.
  • The launch news: your email and your language, only if you ask for the news and confirm it from the email we send you. We write about the launch and the big news, at most once a month. Unsubscribing (a link in every email) deletes your address at once; an address that is never confirmed is deleted after 30 days.
  • Deleting your account from the website: we use the email you write to find your account and send it a link. The email is kept only until the account is deleted or the link expires (24 hours); a record that the account was deleted, with no email address in it, is kept for 12 months.
  • The spam check: Cloudflare Turnstile checks that a person, not a program, sends the forms.

Why: to answer you and do what you ask (contract, or steps you ask for); the news only with your consent, which you can withdraw at any time; deletion requests to respect your rights (a legal obligation).

Who else handles your data

  • Hetzner Online GmbH (Germany), which hosts our servers for us.
  • Cloudflare, Inc., which delivers our website, theshatteredeye.com, protects it from attacks and checks its forms for spam (Turnstile): it handles the IP address of the website's visitors. The game itself talks to our servers directly.
  • Resend, Inc., which sends our emails (confirmations, links to delete an account, password resets).
  • Apple (Sign in with Apple, App Store purchases) and Google (Sign in with Google, AdMob, Google Play purchases), under their own privacy policies.
  • Other players see what is described above: your name, your results on the boards, and your part in battles together.

AM Soft SH.P.K. is based in Albania, and we manage the game from there.

How long we keep it

  • Your account, progress, friends, blocks and board results: while your account exists.
  • Reports: until we have acted on them, and never longer than 90 days.
  • When you delete your account, it is removed from our live database at once: your email or Apple link, your name, your progress, your friends list and your results on the boards. On a team's result, your name is replaced by "?", so the other players keep their place. The last copies leave our backups within 90 days.
  • Logs and backups: as described above.

Your rights

You can:

  • see and correct your data: your name and email are in Settings → Account, and you can rename yourself there;
  • delete your account and its data: Settings → Account → Delete account;
  • ask us for a copy of your data, or to restrict or object to how we use it, by writing to [email protected];
  • withdraw your consent to personalised ads at any time in Settings → Privacy options.

We answer within one month. If you think we handle your data wrongly, you can complain to Albania's data protection authority (the Information and Data Protection Commissioner, https://www.idp.al) or, if you live in the EU, to your own country's data protection authority.

Children

The game is not made for children under 13. If you are under 13, please do not create an account; if we learn that a child under 13 has an account, we delete it. When the game starts for the first time it asks your age: players under 16 only get general-audience ads, and this answer stays on your device.

Changes

When this policy changes, we update this page and the date at the top. If a change matters for how we use your data, the game will tell you.

Contact

AM Soft SH.P.K. — Tirana, Albania — [email protected]