Privacy policy
How Henerals handles your information
Who operates Henerals
Henerals is operated by Nio Martinez, an individual based in the Philippines. This notice covers henerals.com, the Henerals web app and the Henerals application for iOS and test applications for Android. Contact hello@henerals.com about privacy or your account.
Information used to run the game
When you create an account, we process your email address, account identifier and authentication information. Email and password sign-in is handled by our authentication service. If you choose an available social sign-in provider, that provider shares the account identifier and permitted basic information, such as email, display name and profile image. Henerals does not receive your Apple, Google or Discord password. If you sign in with Apple, our game server may keep an encrypted Apple sign-in token for your account. It is checked with Apple once when you sign in and is then used only to ask Apple to disconnect Henerals from your Apple Account when your Henerals account is deleted; it is never shown to other players or used for anything else. Our Google configuration requests only OpenID, email and basic profile access; it does not request Gmail, contacts, calendars or Drive access.
Your Henerals profile includes a username, display name, optional biography and avatar. These are public profile information. If you upload a photo, the app crops and compresses it before upload, and the server stores one small normalized image without the original metadata. Saving a replacement or a built-in avatar removes the previously stored photo; account deletion removes the current one. Your game data export includes the stored image. Do not put private contact details in your biography. We also store your saved formations, game settings and cosmetic choices so you can use them wherever you sign in.
Online play creates match records, moves, formations, clock information, results, ratings and experience awards. The game server processes both armies to resolve moves. An opponent receives the concealed game view defined by the rules. Concealed ranks are a gameplay feature; they do not mean the information is hidden from the game service.
Personal game insights use your completed online-match results, modes, rating changes, recorded own turn durations and active-play duration where available. We store numeric summaries to provide results and timing trends without reprocessing private formations. Missing historical timings and game durations remain unavailable rather than estimated. Insights do not expose concealed opponent ranks or provide advice during a live game.
Friends features store friend requests, friendships, match invitations and blocks. Online presence and last-online recency are optional and are shown only to accepted, unblocked friends when you enable them. If you turn on friend alerts on a device, we store a private registration for that device so the game can deliver generic notices that you have a match invitation or a friend request; the notices never contain names, formations or game details, and you can turn them off in Settings or by signing out. Reports include the category, details you submit, relevant account or match references, and moderation review information. Reports and blocks are not public profile fields.
Hosting and authentication services also process technical connection and diagnostic information to deliver the service and investigate errors or abuse. Sign-in session records can associate your account with your IP address and browser or device software information. Our authentication provider derives approximate city and country information from IP addresses and retains it in connection logs to operate and secure the service. We use the information above to authenticate players, synchronize their choices, run matches, calculate results and rankings, support friends features and respond to safety or support requests.
Game and operator-console builds can send limited crash diagnostics: application platform and build version, sanitized error text, bundled source locations and the application origin. Reports do not attach account, match, session or device identifiers, page paths or sign-in tokens. These diagnostics use no analytics cookies and are available only to authorized operators. Network addresses are used temporarily to limit incoming reports. We remove crash diagnostics from our application database after 30 days through periodic cleanup. An outage or cleanup backlog can delay removal; provider backups and service logs have separate retention.
Public, private and service-provider access
Account inventory includes items you bought, received from an operator or earned through an enabled promotion or invite mission. We store the item, source, access period, redemption and revocation records needed to maintain that access. Invite missions, when enabled, store your invite code, inviter relationship, account-creation platform, claim time, qualifying match and completed reward tiers. Android can read the Play Store install referrer once to recover a friend’s invite code; it is used for that claim, not advertising attribution. Gifts, code redemptions and mission rewards are not public purchase history. Profile flair you choose is public and may appear in profiles, friends lists, rankings and match headers.
We use stored account and online-match records for first-party service analytics, including sign-ups, completed matches, activity and retention reports, friendship totals and active purchase-access counts. Activity measures online-match participation rather than app opens or offline practice. Reports are available only to authorized operators. This adds an analytics purpose to existing account and gameplay data; it does not add advertising identifiers, analytics cookies or a third-party analytics SDK to the game. Authorized operators may explicitly inspect a completed replay with both armies when investigating a game; access is audited.
Other people can access public profile information and published ranking information. Your opponent can see the match information needed to play. Your saved formation library is scoped to your account. Authorized service operations can process match and safety records; access is not made public merely because a match has ended.
We use Supabase for authentication and database services, Render for the match server, Vercel for web hosting, Apple Push Notification service, Google Firebase Cloud Messaging and browser push services for optional friend alerts, and Hostinger for the support email service. Google Analytics is used on the public website only after you allow it. Social sign-in providers process the sign-in according to their own policies. Service providers may process information in countries other than your own; our configured database and match-server region is Singapore.
Device storage and optional website analytics
The game saves session information and local choices so you can stay signed in and resume using it. Native applications use secure session storage. Guest settings and practice data can remain on the device; signing out does not erase those separate guest choices. Clearing application or browser storage can remove local-only data.
The public website asks before loading Google Analytics. See Analytics & cookies for the measured information, retention settings, cookies and withdrawal controls. The game and native apps are outside this website analytics integration. Optional native purchases and advertising are described below; availability depends on the platform, build and store approval. Android remains in closed beta, and its new Google Play purchase options are not yet available. Web checkout is unavailable; verified mobile account benefits can also apply when you sign in on the web. The web game may display banners when Google approves the site and suitable space is available.
Android beta list
If you join the Android beta list on henerals.com, we store the email address you enter, when you joined and the version of the consent wording you agreed to. Joining does not create a Henerals account. We use the address only to invite you to test Henerals for Android on Google Play and to send beta instructions, updates and feedback requests. We do not use it for advertising or share it with advertisers.
To admit you to the test, we add your address to the Henerals closed test in Google Play Console; Google then processes it under its own policies, and you choose whether to accept the invitation. The list is kept in our Supabase database in Singapore, separately from game accounts, and the signup passes through our Vercel web hosting, which processes your network address to deliver the request. We delete the list when the Android closed beta ends, or sooner if you ask: write to hello@henerals.com from the address you joined with and we will remove it.
Optional native purchases and subscriptions
Where available, Apple App Store or Google Play processes payments for one-time purchases and monthly or annual Henerals Pro subscriptions. One-time products can include Walnut Board, Remove Ads Forever and permanent complete cosmetic collections. These are separate purchases. Pro provides benefits while entitled. Independently purchased or gifted items follow their own ownership and expiry rules when Pro expires. The native store shows its current localized price and availability before payment.
Henerals receives transaction and product identifiers, purchase and subscription status, renewal and expiry information, refund or revocation status, and the account association needed for server verification, restore and access. Purchases attach to the Henerals account signed in at checkout. We keep purchase and refund records to maintain account benefits and prevent duplicate grants or fraud. We do not receive your payment-card details. Purchase records may need to be retained for accounting, fraud prevention or refund obligations after account deletion. Deleting a Henerals account does not automatically cancel a store subscription; manage it in the store that bills you.
Advertising and your choices
Free accounts and guests in iOS 2.0 and updated Android test builds may see Google AdMob banners in lobbies and after a game. A full-screen ad may appear when you continue after three completed games, no more than once in five minutes. We request video inventory for these full-screen placements, but availability varies. Ads are not placed on the game board or during a mobile match. Completed-game counts, recent game identifiers and the last ad time are kept on the device to enforce this frequency limit.
The web game uses Google AdSense display banners only in unused desktop margins. The game is not compressed to make room for a banner, and small screens receive no web banners. There are no web full-screen, anchor or automatic placements. When your signed-in account has verified ad-free access, Henerals does not request ads. Unknown account access hides ads until it can be verified; guests receive the free experience.
Google's advertising services may process IP addresses and approximate location, app- or developer-scoped device identifiers, ad impressions and interactions, crash logs and performance information to deliver and measure ads, diagnose problems and prevent fraud. Henerals does not send your Henerals account identifier, email, friend list, formations or match history to AdMob. Henerals requests non-personalized ads. Publisher first-party IDs are disabled for mobile ad requests; the iOS app does not request Apple's advertising identifier, and the Android test app omits the advertising-ID permission. Web ads may use cookies, local storage, your browser information and the page URL for ad delivery, measurement and fraud prevention. Non-personalized ads still involve data processing; they are not anonymous or data-free.
Where applicable, Google's consent form lets you consent, decline or manage choices before ad requests. You can reopen Ad privacy in mobile Settings. In the web game, applicable Privacy and cookie settings and Do not sell or share my personal information controls appear in Settings after Google's privacy tools load. Depending on your choices and location, Google may serve limited ads. Blocking advertising scripts can make these controls unavailable without preventing play. US privacy choices let users opt out of the sale or sharing of data for ads. Google processes advertising and consent data under its own retention practices; see Google's Privacy Policy and how Google uses information from apps. These features do not grant Henerals access to precise device location.
Retention and your requests
We keep your account information for as long as your account exists. You can edit your profile and account choices in the app. Profile → Your game data lets you download a JSON copy of stored game content and records. Device-only preferences, replays and operational or security records are outside that download. Profile → Delete account removes the account after a recent sign-in and typed confirmation; finish any active match first. Linked support cases, messages, internal notes and delivery records are removed from the game database. Their audit action metadata remains with case details redacted; separate safety and security audit records may remain. Operator accounts require a deletion review to preserve audit authorship. Completed results remain for opponents with the account link removed. If you signed in with Apple, deletion asks Apple to revoke the Apple sign-in token we hold; the encrypted token is kept only until Apple accepts that, with retries for up to about 30 days if Apple cannot be reached, and is then removed. If we hold no such token for your account, for example because you last signed in with Apple before 25 September 2026 or we could not reach Apple at the time, you can disconnect Henerals from your Apple Account yourself: on an iPhone or iPad, open Settings, tap your name, find Sign in with Apple, choose Henerals and stop using it. Apple gives these steps and those for other devices at support.apple.com/102571. Deleting an account does not recall sent email or remove copies held by our email provider or recipients. Service logs and backups have separate retention from active account records. Under our current plans, Supabase project logs and daily database backups have seven-day retention, and Render service logs have fourteen-day retention. These periods do not apply to active sign-in sessions, support mail, recipient copies or every provider security record. Other provider records follow their own settings; deleting an account does not immediately erase backups or service logs.
See account and data deletion for the steps to delete in the app or request deletion without installing it.
For other requests to access, correct or delete account information, write to hello@henerals.com from the email address on the account so we can confirm the request is yours. We answer as soon as we reasonably can and will tell you if a request cannot be met. Depending on where you live, including under the Philippine Data Privacy Act, you may also have the right to complain to a supervisory authority such as the National Privacy Commission.
Children and eligibility
Henerals is not directed at children under 13, and you must be at least 13 to create an account. If you are under 18, use Henerals with a parent or guardian's permission. If we learn that an account belongs to a child under 13, we will remove it.
Changes
We will update this notice when the service's data handling changes and show the effective date on this page. New advertising or payment features require an updated explanation before they collect additional information. See also the Terms of use.