Privacy Policy

This policy explains how personal data is processed when you use Lost Banners, its game servers and lostbanners.ru. The game operator and personal data controller is Individual Entrepreneur Kozharina Yana Mikhailovna, Russian Federation, tax number (INN) 910501972008, registration number (OGRNIP) 322911200021900, registered on 25 March 2022. Our contact for support, privacy enquiries and requests to exercise your rights is dev@lostbanners.ru.

The Google Play edition is published by MIRRA GAMES, MCHJ, Uzbekistan. Publisher address: house 147, Babur MFY, 10th small district area, Chirchik - 111700, Uzbekistan (UZ). Publisher website: gardenofdreams.games. Identifying the publisher does not change the game service operator named above.

The Google Play edition of Lost Banners is available to selected closed-test participants. It uses the shared game server and supports purchases through Google Play. Advertising and Google Analytics for Firebase event collection are disabled in the currently available build; Adjust is not used. The general provisions about accounts, the game server, the website and enquiries apply regardless of how the game is installed. The website and RuStore edition is described separately below.

This version of the policy takes effect on 10 November 2026. It provides information about data processing; it does not itself constitute consent to advertising, analytics or other optional processing.

Data comes from you, is generated when you use the game and website, and is received from app stores, payment, advertising and analytics services within the scope of the features in use.

• Account and sign-in data: player number, nickname, installation or device identifier, authentication and session information, and settings. If you link an email address or sign in by email, this includes your email address and sign-in verification information.
• Game progress: army and heroes, resources, achievements, battle results, clan, event participation and game transaction history.
• Communication and support: chat messages, their author and time, reports and moderation, reply contact details, the content of enquiries and materials you choose to send.
• Technical and security data: IP address, game and operating system versions, device information, request times, errors and activity needed to investigate an incident, protect an account and maintain fair play.
• Purchases, where available: order, purchase and product identifiers, amount, currency, transaction time and status, account association and refund information supplied by the payment integration.
• Advertising and analytics data: the categories in section 5, depending on the game edition, services in use, available permissions and applicable privacy settings.

Do not send passwords, sign-in codes, payment secrets or documents that are unnecessary to resolve an enquiry. Remove unnecessary personal information before sending a screenshot or diagnostic log.

Accounts, sign-in, progress saving, requested game features and delivery of purchases require processing to perform our contract with the player. We process enquiries to respond and resolve the issue raised. Technical data and relevant activity records support connections, service security, fault investigation, fraud prevention and enforcement of game rules. Where applicable law permits it and the user's rights are respected, security and protection of rights rely on legitimate interests; mandatory records are also processed to comply with legal obligations.

Advertising services deliver and measure ads, support advertising rewards and detect invalid impressions. Where processing requires consent, it must be obtained separately before that processing begins. Accepting the game terms, choosing to watch an ad and consenting to particular advertising or analytics purposes are distinct actions.

You can withdraw consent and object to processing where applicable law provides that right by contacting dev@lostbanners.ru. Withdrawal does not affect the lawfulness of earlier processing or processing that continues on another valid legal basis. In our response, we will explain applicable limitations and any steps needed for the particular account or game installation.

Game features may show other players your nickname and player number, avatar, frame, clan and role, army strength, results and messages in the selected chat. Website rankings display nicknames, clans, positions and results, including arena, boss and clan events. Email addresses, sign-in tokens and payment details are not intended for publication. Public disclosure of personal data requires an applicable legal basis; where consent is the basis, it is obtained separately, including as required by Article 10.1 of Russian Federal Law No. 152-FZ.

To request removal of your results from public website rankings, email dev@lostbanners.ru with your player number. Display will stop within three working days after the request is verified. You can also use this address to report messages and contact support.

The server checks battle results and game transactions to detect violations and prevent unjustified rewards. An automatic check may reject a battle or transaction. If you disagree with a check result or an account restriction, contact support for review.

When you make a purchase, payment is handled by the store or payment service identified in the purchase interface: RuStore for the relevant edition, or Google Play for the Google Play edition when purchasing is available. Payment details are entered in that service's interface. The game operator processes information needed to verify and deliver the purchase, rather than your full card number or security code. See the RuStore privacy policy and Google privacy policy. This section applies to purchases that are actually available.

The website account area uses your email address and a one-time code or password, depending on the sign-in method, together with an essential session cookie. The sign-in cookie lasts 30 minutes. The website stores your language preference in local storage. The website also processes technical information needed to serve pages, provide sign-in and prevent abuse. Google Analytics for Firebase is not enabled for event collection on the website.

The edition distributed through our website and RuStore

This edition uses rewarded advertising: the player chooses to watch a video for an additional game reward. Ads are provided through Yandex Mobile Ads SDK, which includes an AppMetrica library. Yandex's advertising service may process an advertising identifier, device information and settings, IP address, ad impressions and interactions. Yandex processes data under its own documents; the game server uses the viewing result to grant the reward. Separate game analytics through AppMetrica is not enabled in this edition.

Provider: YANDEX LLC, INN 7736207543, 16 Leo Tolstoy Street, Moscow, 119021, Russian Federation. For its practices and your rights, see the Yandex privacy policy.

The current Google Play edition

Advertising through AppLovin MAX and ad networks is disabled in the currently available Google Play build. Google Analytics for Firebase event collection is also disabled. Adjust is not used. This does not disable the processing of account, progress, chat, security and purchase data described elsewhere in this policy.

To verify Google Play purchases, the server processes purchase and product identifiers, payment and delivery status, transaction times and the association with the game account. Information required to verify a purchase and indirect identifiers associating it with the game account are provided to Google. Card details are entered in Google Play's interface and are not received by the game server. See the Google privacy policy.

If advertising or additional analytics is enabled in a future update, we will update information about providers, data and purposes before the relevant processing begins, and provide the notices, controls and consent mechanisms that are required.

Your choices

Watching a rewarded ad is optional: if you do not watch it, the additional reward for that ad is not granted. Non-personalised ads may still require technical data. Advertising identifier and personalisation controls on your device or within an advertising service can limit particular uses of data, but do not replace deletion of your game account or a request to erase data already received.

For consent, objection and deletion enquiries, contact dev@lostbanners.ru. You may also use the rights procedures in an independent advertising provider's policy. We handle requests relating to the game and, where organisations process data on our behalf, send the relevant requests to those service providers.

Data is available to the operator and persons who need access for support, hosting, security and delivery of requested features. Other players receive only the information visible to them through game features and rankings. App stores, payment, advertising and analytics companies receive data within the scope of their respective operations. The Google Play publisher participates in distribution and in arranging advertising and analytics; information and reports relevant to those tasks may be available to it. This does not mean that it receives access to the entire game database or support correspondence.

Processing on our behalf is subject to the data protection and processor requirements of applicable law. Companies that determine their own processing purposes act as independent controllers for those purposes. Information is disclosed to public authorities where required or permitted by applicable law.

The main game database is hosted in Moscow, Russian Federation. The hosting provider is FirstVDS, JSC IOT, INN 7731399513, 42 Bolshoy Boulevard, building 1, Skolkovo Innovation Centre, Moscow, Russian Federation. Hosting the main game database in Russia does not mean that all processing by every service is confined to Russia.

Google Play purchase information is processed through Google infrastructure. Account, progress and enquiry data is processed by the game service. If you access services from another country, processing may take place outside your country of residence, including in Russia. Data protection laws in those countries may differ. Cross-border transfers are subject to the conditions and grounds required by applicable law; you can request information about specific recipients and applicable safeguards at dev@lostbanners.ru. Accepting this policy does not itself constitute consent to any and all international transfers.

• Account and progress: while the account exists. Deletion in the account area removes active account data when the operation succeeds. An email request is fulfilled within 30 days after account ownership is verified, unless a shorter statutory deadline applies.
• Chat messages: messages older than 10 days are cleared in the scheduled daily cleanup. A message copied into a report may remain with the enquiry.
• Technical and diagnostic logs: ordinarily up to 30 days, followed by scheduled cleanup. Records needed to investigate a particular incident or protect legal rights may remain until the investigation and applicable claims periods end.
• Enquiries sent to dev@lostbanners.ru: while needed to handle the matter, fulfil a request, document the action taken or resolve a related dispute. The period depends on the enquiry and applicable obligations; there is no blanket promise that all correspondence is automatically erased after 90 days. You may request erasure of unnecessary materials and information about the basis for further retention.
• Payment records: for mandatory periods under applicable tax and accounting law. Violation records remain for the duration of a restriction and, where necessary, resolution of a related dispute.

Technical copies after deletion. Before an account is deleted, a temporary technical copy of its records is created. A daily process clears it after 30 days; because cleanup is scheduled daily, the actual period may be approximately 31–32 days. Daily backups of the main database have a separate cleanup cycle, approximately 8–9 days from creation. These periods do not mean that every external copy disappears within the same time.

External backup archives may contain information already removed from the active database, including temporary copies of deleted accounts. They are intended for disaster recovery and, under the normal daily rotation schedule, are removed approximately 15–16 days after the archive is created. Because an archive may include a temporary copy before its cleanup, such technical copies may remain for approximately 48 days in total after the active account is deleted. This does not extend access to the deleted account. For information about particular retained data, contact dev@lostbanners.ru.

If particular data must be retained to meet legal obligations, prevent fraud or protect legal rights, the response to your request explains the categories, reason and retention period or criterion. Advertising and analytics services apply periods reflecting their functions, settings and obligations. Requests to erase associated data are handled with the relevant providers; deleting a game account does not instantly erase all records held by every recipient.

When a purpose is fulfilled or a legal basis ends, information is deleted or anonymised in accordance with applicable law.

Depending on applicable law, you may request information about processing and a copy of your data, correction, restriction, blocking or erasure, data portability, object to processing and withdraw consent. You may also complain to the competent data protection authority or seek a judicial remedy. In the Russian Federation, the supervisory authority is Roskomnadzor.

Email dev@lostbanners.ru with your player number and the nature of your request. We may request proportionate information to verify account ownership or a representative's authority. Do not send passwords, sign-in codes or payment secrets. A passport copy is not a standard requirement for every request.

We review requests and communicate the outcome within 30 days after receiving the information necessary to verify them, unless applicable law sets a shorter deadline. If a lawful extension is necessary, we explain the reason and the further time needed. This organisational response period does not override statutory deadlines for responding to or fulfilling particular requests.

Our Delete your account and data page explains the deletion process. You can submit a request without having the game installed. Accounts with a linked email can also use the player account area; if you cannot access it, contact dev@lostbanners.ru. Uninstalling the app does not delete the server account.

Deleting an account ends access to its progress, resources and game purchases. Deletion is not itself a refund request. Associated personal data is deleted with the account, except information that must be retained on a lawful basis, such as mandatory records, fraud prevention or protection of legal rights. Where necessary, we send requests to service providers; data held by independent controllers is also subject to their rights procedures and lawful processing grounds.

The edition distributed through our website and RuStore remains subject to its existing terms: a minimum age of 14, availability for the territory of the Russian Federation and the applicable age classification. The Google Play edition is intended for users aged 13 and above, subject to its age classification and the requirements of the user's country. This does not change the age or territorial terms of the website and RuStore edition.

Being 13 does not establish an ability to give every type of data processing consent in every country. Where applicable law requires a parent's or legal guardian's consent, that consent is necessary before the relevant processing; a simple age declaration or reading this policy does not replace it.

Advertising providers may impose additional restrictions on the use of their services in relation to children. Making the game available to a particular age group does not itself permit every advertising service to process that user's data. If you believe a child's data is being processed without the necessary legal basis, contact dev@lostbanners.ru. A legal representative may request exercise of the child's rights, restrictions on processing or account deletion. We may need to verify their authority to protect the child.

We use legal, organisational and technical measures to protect data, including restricting access to the game server, protecting credentials and using secure connections. Report a security concern to dev@lostbanners.ru.

The current English policy is published on this page; the Russian version is available at Политика конфиденциальности. When processing changes, we update the date and version. Updating this text does not replace consent or a separate notice where either is required for a new purpose.