Privacy policy
Last updated: 7 November 2026
This policy explains what Banner Lands collects when you play, why, who receives it, how long it is kept, and how you can exercise your rights. It covers the Banner Lands game on iPhone and Android and this website.
Who is responsible
The controller of your data is XMind Labs SAS, 388 Route le Roc, 33190 Casseuil, France. For any question about your data, write to support@bannerlands.com.
What we collect, and why
| Data | Why we use it | Legal basis | How long |
|---|---|---|---|
| Account number and player identifiers, created with your account | To run your account and your cities in each kingdom | Contract | Until you delete your account; your account and player identifiers then stay, with the date, in a register of deleted accounts, so that the game's statistics forget you too, for one year |
| Sign-in links: Sign in with Apple, Google, or an email address if you sign in with a code sent by email | To let you find your account again on another device | Contract | Until you remove the link or delete your account |
| Your player name and portrait | To show you to other players | Contract | Until you delete your account; then the game shows “Deleted account” |
| Game data: city, troops, heroes, alliance, battles and reports | The game itself | Contract | Until you delete your account; your city then stays on the map as a colony without a lord, tied to no identity, until it leaves the map like any castle whose lord has not been seen for fourteen days |
| Chat messages and letters you write | To let players talk, and to handle reports of abuse | Contract; legitimate interest (safety) | Chat: each channel keeps its last 200 messages, older ones are overwritten; the text of a reported message is kept with the report. Mail: a mailbox keeps its last 50 letters, and any message left unread for 30 days disappears |
| Purchase history: product, date and the store's transaction number (never your card details) | To deliver what you bought, prevent fraud, and keep accounts | Contract; legal obligation | Ten years, as accounting law requires |
| Gameplay events: what you do in the game (buildings, battles, use of items) | To balance and improve the game; these events carry no money amounts | Legitimate interest | Not recorded on the live game servers today; once they are, kept 13 months; erased when you delete your account |
| Notification token of your device | To send you game notifications | Consent, which you give or withdraw in your device's settings | Until you turn notifications off or delete your account |
| Technical logs, which can include your IP address; your player identifier is stored hashed in them | Security, abuse prevention and troubleshooting | Legitimate interest | 30 days for the game's logs; a few months at this website's host, Firebase Hosting, as Google states |
We do not sell your data. Banner Lands shows no advertising and uses no advertising identifier or ad tracking.
Who receives it
- Other players see your player name, portrait, city, alliance and the messages you send them.
- Apple (Sign in with Apple, App Store purchases) and Google (Google sign-in, Google Play purchases, and Firebase Cloud Messaging for notifications).
- Gandi SAS (France), which sends the sign-in codes by email and receives the mail written to our support address.
- Our hosting providers: OVHcloud (OVH SAS, France), for the game, its servers and its data; Google (Firebase Hosting), for this website.
Apple and Google may process data in the United States. They rely on the EU–US Data Privacy Framework and on the European Commission's standard contractual clauses.
Your rights
You may access your data, correct it, receive a copy, have it erased, object to its use or restrict it. Most of it you can do yourself in the game:
- Export my data, in Settings, gives you a copy of your account: profile, names, kingdoms and purchases;
- your name and portrait can be changed from your profile;
- Delete my account, in Settings, erases your account (see Delete your account).
For anything else, write to support@bannerlands.com; we answer within one month. You may also lodge a complaint with the French data protection authority, the CNIL, or with the authority of your country.
Children
Banner Lands is meant for players aged 13 and over. If you are younger than the age your country sets for consenting alone, ask a parent before playing. If you believe a child has given us data, write to us and we will delete it.
Security
The game talks to its servers only over encrypted connections (TLS). Access to the servers and to the data is limited to the people who run the game.
This website
This website sets no cookies, runs no analytics and loads no fonts or scripts from anyone else. When you press play on the trailer, your browser fetches the video from OVHcloud, which sees your IP address as any web server does.
Changes
If this policy changes, the new version is published on this page with its date. A change that matters to you will also be announced in the game.