This Privacy Policy applies to Game of the Generals — Salpakan (“Salpakan,” “we,” “us,” “our”).
This Privacy Policy describes how we collect, use, and share information when you use our mobile application and related services. By using Salpakan, you agree to this policy. If you do not agree, please do not use the app.
1. Who we are
Salpakan is operated by RLC Information Technology Solutions (“Operator”), registered in the Philippines.
Contact: privacy@rlcappsolutions.com
2. Information we collect
2.1 Account and profile
- Email address and authentication credentials via Firebase Authentication (email/password, Google Sign-In, or Apple Sign-In).
- Display name (username) you choose when setting up your commander profile.
- Profile picture — optional. If you upload one, the image is stored in Firebase Storage and linked to your public profile.
- ELO rating, wins, and losses — computed by our servers and stored in Firestore.
- Unique User ID assigned by Firebase Authentication.
2.2 Gameplay and match data
- Match records — game results, move history, and replays stored in Firestore and Firebase Realtime Database.
- In-game chat messages sent during online matches (stored in Firestore, visible only to the two players in that match).
- Lobby chat messages posted in the community Lobby COMMS channel (visible to all authenticated users).
- Challenge posts — open challenges you create or accept on the Challenge Board.
2.3 Device and notification data
- FCM push token — collected when you grant notification permission, used solely to deliver match and challenge notifications. You can revoke this at any time in your device settings.
- Firebase Analytics and Crashlytics are not enabled in this app. We do not collect behavioral analytics or automatic crash reports.
2.4 Advertising data (Google AdMob)
Salpakan shows rewarded ads powered by Google AdMob. You choose when to watch an ad to unlock a feature (e.g. viewing a replay). Watching ads is never required to play.
- AdMob may collect your device advertising identifier (IDFA on iOS, GAID on Android), IP address, and device signals to serve relevant ads and measure ad performance.
- iOS: Before AdMob accesses your IDFA, we present Apple’s App Tracking Transparency (ATT) prompt. If you decline, non-personalised ads are shown.
- EEA / UK users: Before loading any ads, we display a consent form (Google User Messaging Platform / GDPR) explaining how AdMob uses your data and giving you the choice between personalised and non-personalised ads. You can change your choice at any time in your device settings (Ads → Reset Advertising ID / Opt out of Ads Personalisation).
- AdMob’s data practices are governed by Google’s Privacy Policy.
2.5 Purchases and entitlements
- Purchase and subscription status for Command Clearance (PRO) is processed entirely by the Apple App Store or Google Play. We receive only a confirmation of entitlement — never your payment card details.
3. How we use information
- Authenticate you and maintain your account.
- Run online multiplayer matchmaking, ELO ranking, and challenges.
- Store and display your match history, replays, and lobby chat messages.
- Deliver push notifications for matches and challenges (only if you opt in).
- Serve rewarded ads (with your consent where required).
- Process Command Clearance entitlements.
- Detect and prevent cheating, abuse, and fraudulent activity.
- Comply with applicable law and enforce our Terms of Service.
4. Legal bases for processing (GDPR / UK GDPR)
If you are located in the EEA or UK, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Account creation and authentication | Contract |
| Running online play, matchmaking, rankings | Contract |
| Storing match history and replays | Contract |
| Push notifications | Consent (you can withdraw at any time) |
| Personalised advertising (AdMob) | Consent (via GDPR consent form) |
| Non-personalised advertising | Legitimate interest |
| Security, fraud prevention, abuse detection | Legitimate interest |
| Compliance with legal obligations | Legal obligation |
5. Third-party service providers
We share data with the following providers to operate the app:
| Provider | Service | Privacy policy |
|---|---|---|
| Google (Firebase) | Authentication, Firestore, Realtime Database, Cloud Functions, Storage, App Check, Cloud Messaging | firebase.google.com/support/privacy |
| Google (AdMob) | Rewarded advertising | policies.google.com/privacy |
We do not sell your personal information. We do not share your data with any other third parties except as described above or as required by law.
6. Data retention and deletion
- Account and gameplay data is retained while your account is active.
- You can permanently delete your account at any time from Settings → Delete Account inside the app. This removes your profile, username, stats, and game history within 30 days.
- Lobby chat messages you have posted are not automatically removed when you delete your account; contact us if you wish these removed.
- Firebase infrastructure may retain minimal access logs for up to 90 days per Google’s policy.
7. Security
All data in transit is encrypted via TLS. Firebase infrastructure enforces server-side access controls. We use Firebase App Check to block unauthorized API access. No transmission or storage method is 100% secure, and we cannot guarantee absolute security.
8. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data (username and profile can be updated in-app).
- Delete your data — use the in-app account deletion or email us.
- Withdraw consent for personalised ads at any time via your device settings (iOS: Settings → Privacy → Tracking; Android: Settings → Google → Ads).
- Opt out of push notifications in your device notification settings.
- Object or restrict certain processing — contact us at privacy@rlcappsolutions.com.
- Lodge a complaint with your local data protection authority (EEA / UK users).
California (CCPA): We do not sell your personal information. You have the right to know what data we hold and to request its deletion.
9. Children
Salpakan is not directed at children under 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it promptly.
10. International data transfers
Your data may be processed in countries other than your own, including the United States, where Google/Firebase infrastructure operates. By using Salpakan, you acknowledge this transfer. Where required (e.g. EEA/UK), we rely on Google’s standard contractual clauses and adequacy decisions.
11. Changes to this policy
We may update this policy as the app evolves. Material changes will be announced via an in-app broadcast. The “Last updated” date above always reflects the current version.
12. Attribution — classic board game
The tabletop strategy game Game of the Generals (Filipino name: Salpakan) was invented by Sofronio H. Pasola Jr. in 1970 in the Philippines. This app is a digital adaptation and is not necessarily affiliated with or endorsed by the Pasola family or any rights holders unless separately stated by the Operator.
13. Contact
Privacy inquiries: privacy@rlcappsolutions.com
Postal address: Available upon request at the email above.