Privacy policy
This page explains what information we use when you play Seven Worlds: Myths, History & Puzzles, why we use it, and how long we keep it. If anything is unclear, please write to privacy@tilkly.com. We will be happy to explain it.
On this page
1. Who we are
Seven Worlds: Myths, History & Puzzles is made and run by Jyoti Singh, trading as Tilkly, Appt 4113, 169 Avenue de Grande Bretagne, 31300 Toulouse, France. Privacy law calls us the data controller. This means we are responsible for the data use explained here.
Privacy: privacy@tilkly.com.
Support: support@tilkly.com.
We do not sell your personal data. We do not share it with data sellers.
2. Playing without an account
You can start without signing in and play the first part of each available Chronicle. Guest progress stays on your device and is not linked to a Seven Worlds account. Uninstalling the game deletes that progress from your device.
The game still connects to our servers to download story files and settings. It may ask for an ad if you are not a member. It also sends a report if the game crashes. We explain these things below.
3. What data we use and why
EU privacy law asks us to give a legal reason for using personal data. Contract means we need the data to give you a feature you asked for. Legal duty means the law tells us to keep or use it. Permission means you chose to allow it. Legitimate interests means we have a fair reason, such as keeping the game safe, and we have checked that your rights come first.
| What we use | Why we use it | Legal reason |
|---|---|---|
| Your private Google account ID, email address and display name, when you sign in | To create your account, know when you return, save progress across devices, and show the profile details you choose to share | Contract |
| Game progress: missions, scores, stars, XP, rank, streaks, achievements, daily results, artifacts and looks you own | To save your game and restore it on a device where you sign in | Contract |
| Profile, avatar, privacy choices, follows, friends, blocks, reactions and reports | To run the social features you choose to use | Contract |
| Purchase records: item bought, Google Play order, purchase code and Coin balance changes | To deliver what you paid for, stop a purchase being used twice, and handle refunds or payments taken back | Contract and legal duty |
| Support messages, your reply address and any device details you choose to add | To answer and help you | Contract, or legitimate interests when you write as a guest |
| App version, Android version, time zone, language, a random install ID and Google Play security proof | To keep the game working, protect purchases and progress, and spot cheating or attacks | Legitimate interests in a safe and fair game |
| Crash reports and details that help us find the fault | To find and fix crashes | Legitimate interests in a stable game |
| Advertising ID and ad request details, if you are not a member | To show and measure banner ads and optional video ads | Your permission, where the law requires it |
| Server security logs, including IP address | To stop attacks, spam and misuse | Legitimate interests in security |
What we do not collect. We do not ask for your location, contacts, photos, camera or microphone. Puzzle answers and anything you type on a board are not sent with crash reports. The Breathing Reset does not measure your body. It is only a timer with a picture. It makes no health claim and never changes rewards, streaks or leaderboards.
4. Ads
Seven Worlds may show banner ads in a fixed space on puzzle boards. Some skips may also offer an optional video ad. Google AdMob supplies these ads. Inner Circle members do not see ads, and their devices do not ask for one.
To show an ad, Google receives your device's advertising ID, IP address and basic details about the device and ad request. Google may use them to choose and measure ads and to stop fraud. Google explains its use of this data at business.safety.google/privacy.
If you are in the European Economic Area, the United Kingdom or Switzerland, the game asks for your choice before showing ads based on your interests. If you say no, you may still see ads, but they are chosen from the game screen rather than a profile about you. You can change your choice in Settings → Legal → Ad Choices. You can also reset or delete the advertising ID in your Android settings.
5. Purchases and membership
Coins and Inner Circle are sold through Google Play. Google handles the payment. We never receive your card number, bank details or billing address. We receive the item, order, purchase code and payment state. We use them to check the purchase with Google and give you what you paid for.
Inner Circle is a plan that renews. Cancel it in the Play Store under Payments & subscriptions. Cancelling stops the next payment. Your benefits continue until the end of the time you already paid for.
6. Crash reports
The game uses Firebase Crashlytics. A crash report shows where the code failed, your device model, Android version, app version, game state at that moment and a Crashlytics install ID. It does not contain your account ID, email address, puzzle answers, or anything you typed.
7. Who else sees your data
A few companies help us run the game:
- Google: sign-in, Play billing, Play security checks, Crashlytics, Firebase Cloud Messaging and AdMob.
- Our hosting companies: servers and databases that store your account and progress.
- Our email company: support replies and delete account links.
Other players see only what your privacy choices allow, such as your display name, avatar, rank and shared progress. They never see your email address.
Gift and artifact notifications use Firebase Cloud Messaging. We send Google a device delivery token, an internal account ID and the notice type so it can reach your device while the game is closed. We store the token and your notification choices with your account. You can turn each type off in Settings. Notifications do not include puzzle answers or player messages.
We may share data if the law requires it or if we need it for a legal case.
8. Where your data goes
Some companies, including Google, may handle data outside the European Economic Area. EU law requires protection when data leaves this area. We use an approved country decision or the European Commission's standard data protection contract, plus any extra safety steps the company publishes. You can ask us for details.
9. How long we keep it
| What | How long |
|---|---|
| Account, profile and game progress | Until you delete the account |
| Purchase and payment records | 10 years, as French accounting law requires |
| Coin history | 10 years; new entries may be added, but old entries cannot be changed |
| Notification device tokens | Until disabled, invalidated, or unused for 60 days |
| Pending arrival notices | Up to 24 hours |
| Player reports and safety actions | Up to 24 months |
| Support messages | Up to 24 months, or until you delete your account, whichever comes first |
| Crash reports | Up to 90 days, set by Crashlytics |
| Server security logs | Up to 12 months |
10. Your rights
Under the GDPR, you can ask for a copy of your data. You can ask us to fix or delete it, limit how we use it, or give it to you in a format another service can use. You can object when we rely on legitimate interests. You can also take back your permission for ads at any time. This does not change anything that happened before you took it back.
Write to privacy@tilkly.com. We answer within one month. We will ask you to prove that you control the account, so we do not give your data to the wrong person.
If you think we got this wrong, you can complain to the privacy authority in your country. Ours is the Commission Nationale de l'Informatique et des Libertés (CNIL).
11. Deleting your account
Delete your account in Settings → Data → Delete Account, or use https://thesevenworlds.com/delete-account if you no longer have the game. Deletion starts at once and cannot be undone.
Deletion removes your sign-in link, profile, progress, collection and social data. We keep purchase and payment records, Coin history, and player safety records for the times listed above. We remove your name, email address and Google account link from those records. The delete account page lists exactly what goes and what stays.
12. Children
Seven Worlds is for players aged 13 and over. We do not knowingly collect personal data from children under 13, or under the higher age used in some EU countries. Read the children and age page. If you think a child gave us personal data, write to privacy@tilkly.com and we will delete it.
13. Security
The game uses HTTPS when it talks to our servers. Only approved staff can reach live player data, and we keep a record when they do. Purchase codes are locked while stored and never written to logs. New Coin records can be added, but old ones cannot be quietly changed.
No system is perfect. If you find a security problem, please write to support@tilkly.com. We will take it seriously.
14. Changes
If this policy changes, we will update the date at the top. If a major change affects you, we will tell you in the game before it starts.
15. Contact
Jyoti Singh, trading as Tilkly
Appt 4113, 169 Avenue de Grande Bretagne, 31300 Toulouse, France
privacy@tilkly.com