Privacy policy
VANGUARD: Rogue Ops Shooter · last updated 5 October 2026
VANGUARD: Rogue Ops Shooter (“VANGUARD”, “the game”) is an Android game published by Kromatik (“we”, “us”). This policy explains what the game and its server collect, why, who can see it, how long we keep it and how you can delete it. It covers the game (package com.main.vanguard) and our game server at vanguard.kromatik.io.
- There is no sign-up. We never ask for your name, email address, phone number or location.
- The game gives your phone a random install ID. That ID, your progress and your purchases are what we need to run the game.
- No ads, no advertising ID, no third-party analytics or crash-reporting tools. We do not sell your data or share it with advertisers.
- You can delete everything yourself in the game: Settings, Account, Delete account. See how to delete your data.
What we collect and why
| What | Why |
|---|---|
| Install ID | A random ID the game creates on your phone the first time it starts. Our server keeps only a one-way hash of it, never the ID itself. We use it to recognise your phone and open your player profile and cloud save without an account. |
| Player profile and progress | Your display name (optional, called a callsign in the game), your player ID, level, power, Gold and Credits, operators, gear and upgrades, the cloud save of your game, and the results of your runs (level, mode, operator, stage reached, kills, perks). We use it to run the game, keep your progress safe in the cloud, show leaderboards and events, and keep the game fair. |
| Purchases | When you buy something through Google Play, the game sends Google’s purchase receipt (the product, purchase token, order ID and time) to our server. Google handles your payment: we never see your card or your Google account. We use the receipt to check the purchase with Google, give you what you bought and handle refunds. |
| Technical data | The app version, the platform (Android) and the IP address your phone connects from. The IP address is stored with your sign-in session. If you send a Support message we also receive your phone model, level and power. We use it to keep the game secure, limit abuse, answer support requests and fix problems. |
| Gameplay analytics | Simple events such as starting the game or a run (app version, platform, level, mode, operator). We use them to see how the game is played and to balance it. They are not used for advertising. |
| Support messages and mail | What you write in Settings, Support, our replies, and the in-game mail and rewards you claim. We use them to help you and to deliver rewards. |
What we do not collect: your real name, email address, phone number, contacts, photos, files, camera or microphone data, your precise or approximate location (we do not work out where you are from your IP address), or any advertising ID. The game asks Android for only these permissions: internet access, vibration and Google Play billing.
Who sees your data
- Other players see your display name and your leaderboard scores. Choose a name that does not identify you.
- We, the developer, can see your player data to run, protect and support the game.
- Service providers: our server is hosted by Hostinger in Paris, France, and purchases go through Google Play (Google’s own privacy policy covers what Google collects).
- We do not sell your data, we do not share it with advertisers or data brokers, and we do not use it for advertising or profiling. We may disclose data if the law requires it.
Where it is stored and how it is protected
Our server is a Hostinger virtual server in Paris, France (European Union). Everything between the game and our server is encrypted with HTTPS. Install IDs and sign-in tokens are stored only as hashes. Access to the server is limited to the developer. No system is perfectly secure, but we take care of yours.
How long we keep it
- Profile, progress, cloud save, runs, scores, support messages and analytics: until you delete your account.
- Sign-in sessions (including the IP address): deleted soon after they expire.
- Technical server logs: up to 7 days.
- Purchase records: when you delete your account we keep the record of each purchase (product, price, time, Google order ID) with no link to you, for accounting and refund handling.
- Backups: database backups are kept for up to 30 days and then deleted, so data you delete is gone from backups within 30 days.
- Admin audit trail: our log of actions in the admin tools (for example a ban or a deletion) may keep your Player ID, and nothing else about you, after you delete your account.
Your choices and rights
- Delete your data: Settings, Account, Delete account. It happens at once and cannot be undone. Details on the delete page.
- Change your display name in Settings. Move to a new phone with the transfer code in Settings, Account.
- Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict how it is used, and to complain to your data protection authority. We do not know who you are by name, so to use these rights we need your Player ID (shown in Settings). Contact us below.
- If you are in the EEA or the UK, our legal bases are: running the game for you (contract), keeping it secure and fair and understanding how it is played (legitimate interests), and accounting (legal obligation).
Children
VANGUARD is not directed to children under 13 and we do not knowingly collect their personal data. If you think a child under 13 uses the game, contact us and we will delete the data.
Changes
We may update this policy. The date at the top changes, and we will tell you in the game if the changes matter.
Contact
Kromatik. The developer's contact email is shown on the game's Google Play page. In the game: Settings, then Support (while you are online).