Who we are
Ilavath: Battle of Cosmos ("Ilavath", "the game") is developed and published by 5th Ocean Studio Private Limited ("5th Ocean Studios", "we", "us"), a company incorporated in India. We are the data controller (data fiduciary under India's Digital Personal Data Protection Act, 2023) for the personal data described in this policy.
This policy applies to the Ilavath mobile game on Android and iOS, the website ilavath.com, and any support you receive from us.
What we collect
Ilavath is built to play offline and does not require an account. What we collect depends on how you play.
When you play (all players)
- Device and app information: device model, operating system and version, app version, language, and approximate country (derived from your IP address).
- Gameplay and usage data: progress, level results, heroes and items used, session start and end times, and in-game events. This is used to save your game and improve balance.
- Diagnostics: crash reports and performance data.
- Identifiers: an app-instance ID generated by our analytics provider and, where you allow it, your device's advertising ID (Google Advertising ID on Android, IDFA on iOS).
When you watch a rewarded ad
- Ad interaction data (which ad was shown, whether it was completed) and the identifiers above are processed by our ad partners to deliver and measure ads. Rewarded ads only play when you choose to watch one.
When you sign in (optional)
- If you choose to sign in with Google, Apple, Facebook, Google Play Games or Apple Game Center to save progress across devices, we receive a user ID from that provider and the basic profile details it shares with us, such as your name or nickname and email address. With "Sign in with Apple" you can hide your email; we then receive a relay address.
When you make a purchase
- Purchases are processed by Google Play or the Apple App Store. We receive a transaction ID, the item bought, price, currency and the store receipt so we can deliver your item. We never receive your card or bank details.
When you contact us
- Your email address, the content of your message and any details you share (for example your in-game User ID).
What we do not collect
- We do not collect precise location, contacts, photos, microphone or camera data.
How we use it
| Purpose | Data used | Legal basis (EEA/UK) |
|---|---|---|
| Run the game, save progress, sync across devices | Gameplay data, identifiers, sign-in data | Performance of our contract with you |
| Deliver purchased items and handle refunds | Purchase data | Contract; legal obligation (tax records) |
| Show rewarded ads you choose to watch | Device data, advertising ID, ad interactions | Consent where required; otherwise legitimate interests |
| Fix crashes and improve performance | Diagnostics, device data | Legitimate interests |
| Understand how the game is played and improve balance and content | Gameplay and usage data | Legitimate interests; consent where required |
| Prevent cheating, fraud and abuse | Identifiers, gameplay and purchase data | Legitimate interests; legal obligation |
| Answer support requests | Contact data | Contract; legitimate interests |
We do not sell your personal data, and we do not use it to make decisions that produce legal or similarly significant effects about you.
Ads and your choices
Ilavath uses rewarded ads that play only when you tap to watch one. Ads may be personalised using your advertising ID unless you opt out.
- EEA, UK and Switzerland: we ask for your consent before personalised ads, using Google's consent tool. You can change your choice at any time from the game's settings.
- iOS: we only access your IDFA if you allow tracking in Apple's App Tracking Transparency prompt. You can change this in iOS Settings → Privacy & Security → Tracking.
- Android: you can reset or delete your advertising ID in Settings → Google → Ads (or Settings → Privacy → Ads).
If you opt out, you will still be able to watch rewarded ads, but they will not be personalised.
International transfers
We are based in India, and our providers may process data in other countries, including the United States. Where data from the EEA, UK or Switzerland is transferred, we rely on the European Commission's Standard Contractual Clauses or other lawful transfer mechanisms.
How long we keep it
- Game and account data: while you keep playing. If your account is inactive for 24 months, or you ask us to delete it, we delete it.
- Analytics and diagnostics: up to 14 months, then deleted or anonymised.
- Purchase records: as long as Indian tax and accounting law requires (currently 8 years).
- Support emails: up to 2 years after the conversation ends.
- Fraud-prevention logs: up to 90 days.
Your rights
Depending on where you live, you can ask us to:
- access the personal data we hold about you, or get a copy of it;
- correct inaccurate data;
- delete your data (see Delete your account);
- restrict or object to processing based on legitimate interests;
- withdraw consent at any time (this does not affect processing before you withdrew);
- nominate another person to exercise your rights if you die or become incapacitated (India).
Email publisher@dva.world with your in-game User ID. We reply within 30 days. You may also complain to your local data protection authority or, in India, the Data Protection Board of India.
California residents: we do not sell or share personal information for cross-context behavioural advertising other than through the ad choices described above, and you can opt out using those controls. You will not be treated differently for exercising your rights.
Children
Ilavath is not directed at children under 13, and we do not knowingly collect personal data from them. In the EEA and UK, and in India, we do not knowingly process personal data of children below the age of digital consent in their country without verified parental consent. If you believe a child has given us personal data, email us and we will delete it.
Security
We use encryption in transit, access controls and reputable cloud providers to protect your data. No system is completely secure, so we cannot guarantee absolute security. If a breach affects you, we will notify you and the relevant authorities as the law requires.
Changes to this policy
We may update this policy. We will post the new version here with a new date, and tell you in the game or by email before significant changes take effect.
Contact and grievances
Questions about this policy or your data:
Under India's Information Technology Rules, 2011 and the Digital Personal Data Protection Act, 2023, you can also contact our Grievance Officer: