In plain language: We collect only what we need to run the game. We never sell your data. Analytics is opt-in. You can delete your account instantly. We comply with POPIA.
This Privacy Policy explains how MirrorState (Pty) Ltd collects, uses, stores, and protects your personal information in connection with the Clash of Castes mobile application.
We comply with the Protection of Personal Information Act 4 of 2013 (POPIA) and, where applicable, the General Data Protection Regulation (GDPR). By using Clash of Castes you acknowledge that you have read and understood this policy.
In accordance with POPIA Section 18, we notify you at the point of collection that the following categories of personal information are collected:
| Category | What We Collect | Required? |
|---|---|---|
| Account Data | Display name, email address, Google account ID, authentication details | Required |
| Game Data | Gameplay history, leaderboard records, career progress | Required |
| Device Data | Device type, OS version, device identifier, network performance indicators | Required |
| Analytics Data | Gameplay patterns, session durations, feature usage (with your consent only) | Optional — consent required |
| Demographic Data | Age group (bracket only, never birth year), gender, province, home language | Voluntary — no penalty for skipping |
Important: We never store your birth year. During onboarding your birth year is used only to calculate your age group (e.g. “25–34”) and then permanently discarded.
| Purpose | Legal Basis (POPIA) |
|---|---|
| Game operation — running the game, tracking progress, leaderboards | Section 11(1)(b) — contractual necessity |
| Authentication — verifying identity via Google Sign-In | Section 11(1)(b) — contractual necessity |
| Analytics and app improvement — understanding how the game is used to improve features and balance gameplay | Section 11(1)(a) — explicit consent. Further processing under Section 15(3)(e) |
| Legal and tax compliance | Section 11(1)(c) — legal obligation |
| Security — fraud detection, abuse prevention | Section 11(1)(f) — legitimate interest |
Where you provide consent, we collect gameplay and usage data to improve the application and understand how features are used. This data is processed using de-identification, pseudonymisation, aggregation, and access controls to reduce the risk of identifying individuals.
In accordance with POPIA Section 14(2), de-identified or aggregated data may be retained for historical and statistical purposes even after account deletion.
You may withdraw analytics consent at any time in Settings → Privacy. Withdrawing consent has no impact on your gameplay.
Clash of Castes is strictly for players aged 18 and older. There are no exceptions.
Age is verified through a mandatory self-declaration at registration. Any account identified as belonging to a user under 18 will be deleted immediately in accordance with POPIA Section 35.
We share personal information with the following third parties strictly to the extent necessary. We do not sell, rent, or trade your personal information.
| Provider | Country | Purpose | Safeguard |
|---|---|---|---|
| Apple Inc | USA | App distribution and authentication | Apple Developer Agreement |
| Google LLC | USA | App distribution and authentication | Google Cloud DPA |
| Cloud hosting provider | European Union | Game server hosting and data storage | GDPR-compliant data processing agreement |
| Web infrastructure provider | USA (global CDN) | Website security, DNS, and traffic routing | GDPR-compliant privacy policy |
Personal information is transferred outside South Africa to the United States of America (app distribution and web infrastructure) and the European Union (game server hosting and data storage). We implement appropriate safeguards in accordance with POPIA Section 72.
| Data Category | Retention Period |
|---|---|
| Account and game data | Deleted immediately upon verified account deletion request |
| Analytics and usage data | May be retained in de-identified or aggregated form for app improvement purposes (POPIA Section 14(2)) |
| Legal compliance records | 5 years as required by the Income Tax Act |
| Server and security logs | 90 days rolling |
Account deletion is immediate and irreversible. When you delete your account, all personal data is permanently removed instantly, except where retention is required by law.
The Clash of Castes mobile application does not use browser cookies. Our web properties (www.clashofcastes.com) may use functional cookies for security purposes (bot detection, DDoS protection). These are strictly necessary and do not require consent.
In the event of a data breach likely to result in material harm, we will notify the South African Information Regulator and affected users as soon as reasonably possible, in accordance with POPIA Section 22.
Under POPIA you have the right to:
To exercise any of these rights, contact us at admin@mirrorstate.co.za. We will respond within 30 days.
This Privacy Policy was last updated on 10 May 2026. Material changes will trigger a re-consent flow within the app. The current version is always available at www.clashofcastes.com/privacy.