1. Scope and controller
This policy applies to the mobile game World One: Arena, provided by H2C Games ("we" or "the Company"), and related customer support. The currently available events are UP, DODGE, SKI JUMP, and ARCHERY.
This static website does not use registration forms, analytics tools, or advertising cookies. If you contact us by email, we process the sender address, message, and any attachments you choose to provide.
2. Information we process
| Category | Information | When |
|---|---|---|
| Account and device association | Random installation identifier, hashed device-authentication information, internal account ID, public profile ID, last access time, and—if you choose Google account linking—a one-way processed server-side identifier derived after Google ID-token verification | When an online account is created, refreshed, or linked |
| Ranked profile | Nickname, representative country, country-change time, equipped cosmetics, profile frame, badges, and status entitlements | When joining official rankings or using the profile |
| Game and official records | Game mode, server run ID, course and seed, start point, best result, play duration, client and balance version, and verification status | When an official run is issued or submitted |
| Telemetry and integrity | Height, position, speed and input checkpoints at approximately 0.5-second intervals, Play Integrity results, verification tier, and anomaly signals | When verifying official records |
| Rankings and career | World and country rank, personal bests, WORLD KING and TOP 3 achievement history, and verified ghost replay records | After an official result is verified |
| Profile interactions | Short bio, user-provided external link and hostname, nickname search queries, NICE/AMAZING/RESPECT reactions, report reasons, and moderation status | When you use those features |
| Coin and cosmetics | Coin balance and ledger, owned and equipped cosmetics, acquisition source, permanent SUPPORTER status, and reward entitlements | When using rewards, the shop, or customization |
| In-app purchases | Store, product ID, transaction or order ID, purchase/restoration/cancellation/refund status, purchase time, and verification result | When purchasing or restoring through Google Play or the App Store |
| Ad rewards | Reward session ID, type and status, ad transaction ID, ad unit and network, reward item and amount, and callback time | When you choose a rewarded ad |
| Diagnostics | App and client version, platform and operating system information, request error codes, crash information, and error diagnostics | When an error occurs or service stability is assessed |
| Customer support | Sender email address, message, and screenshots or other files you choose to attach | When you contact support |
We do not directly collect full payment-card numbers or store-account passwords. Payments are processed by Google Play or the Apple App Store. Our server processes only transaction identifiers and status data needed for purchase verification.
The game does not require your legal name, date of birth, phone number, postal address, precise location, contacts, photo library, microphone, health data, or biometric data.
3. Purposes
- Maintain an anonymous account, reconnect the device, and protect the service
- Enable Android account recovery across devices when you choose Google account linking
- Issue and verify official runs and provide world/country rankings and ghosts
- Grant and revoke WORLD KING/TOP 3 privileges and preserve career history
- Provide Coin, cosmetics, PREMIUM purchases and restoration while preventing duplicate grants
- Verify rewarded-ad results and prevent duplicate rewards
- Provide profile search, reactions, external links, reporting, and content moderation
- Handle errors and support requests and improve service reliability and security
4. Information visible to other users
If you use official competition or profile features, the following may be displayed to other users:
- Nickname, flag and representative country, world/country rank, and best result
- Equipped cosmetics, ranking rewards, and WORLD/COUNTRY TOP 3 career history
- A bio and external link you choose to publish, and positive-reaction counts
- Your ghost character and its nickname, country, and record
Internal account IDs, device-authentication information, purchase evidence, full telemetry, and integrity results are not displayed in public profiles.
5. External platforms and processing
The following services may be used:
- Google Play and Google Identity Services: Android distribution, Play Integrity, in-app purchases and verification, and optional account linking
- Apple App Store: iOS distribution, in-app purchases, and purchase verification
- Google AdMob: interstitial and rewarded ads and reward verification
Depending on device settings and consent, these platforms may process advertising identifiers, IP addresses, and device information under their own policies. For optional Google linking, our server verifies a Google ID token but does not store your email address, profile photo, or Google password; it uses a one-way processed server-side identifier for account recovery. Other purchase and ad verification information described above is sent to our game server.
The static h2cgames.com website may be hosted on Cloudflare Pages, whose hosting infrastructure may process network logs necessary for security and delivery.
6. Retention and deletion
Account, profile, game-record, Coin, and cosmetic information is retained while needed to provide the service and protect official competition integrity. After a verified deletion request, associated information is deleted or de-identified.
Transaction, purchase restoration/refund/dispute, duplicate-grant prevention, security, integrity, and enforcement records may be retained separately for the period reasonably necessary or required by law. Official-ranking history may remain as statistics or anonymous records after identifiers such as the nickname are removed. Support emails are deleted after the inquiry is resolved and no further retention is needed.
7. Your rights
You can view and edit profile information and may request access, correction, deletion, or restriction of your personal information. See the Account Deletion page for the request procedure.
We may request the minimum information necessary to identify the correct account. We will not ask you to email your account password, complete payment details, or a full purchase token.
8. Safeguards
- Hashing of device-authentication secrets and token-based server requests
- HTTPS transport and separation of production secrets from source code
- Combined validation of Play Integrity, server-issued run IDs, seeds, and telemetry
- Server-side verification of purchases and ad rewards with duplicate-transaction protection
- Separation of public profiles from internal account IDs, with external-link reporting and blocking
9. Children
World One: Arena is not designed for children under 16. Its Google Play target age groups are 16–17 and 18+. The game does not collect a date of birth. A parent or guardian who believes a child's information has been processed without lawful consent may contact us to request deletion.
10. Changes and contact
If this policy changes, we will publish the effective date and material changes on this page.
Privacy and account deletion: privacy@h2cgames.com
General support: support@h2cgames.com