Privacy policy
How Henerals handles your information
Who operates Henerals
Henerals is operated by Nio Martinez, an individual based in the Philippines. This notice covers henerals.com, the Henerals web app and the Henerals test applications for iOS and Android. Contact hello@henerals.com about privacy or your account.
Information used to run the game
When you create an account, we process your email address, account identifier and authentication information. Email and password sign-in is handled by our authentication service. If you choose an available social sign-in provider, that provider shares the account identifier and permitted basic information, such as email, display name and profile image. Henerals does not receive your Google or Discord password. Our Google configuration requests only OpenID, email and basic profile access; it does not request Gmail, contacts, calendars or Drive access.
Your Henerals profile includes a username, display name, optional biography and avatar. These are public profile information. If you upload a photo, the app crops and compresses it before upload, and the server stores one small normalized image without the original metadata. Saving a replacement or a built-in avatar removes the previously stored photo; account deletion removes the current one. Your game data export includes the stored image. Do not put private contact details in your biography. We also store your saved formations, game settings and cosmetic choices so you can use them wherever you sign in.
Online play creates match records, moves, formations, clock information, results, ratings and experience awards. The game server processes both armies to resolve moves. An opponent receives the concealed game view defined by the rules. Concealed ranks are a gameplay feature; they do not mean the information is hidden from the game service.
Friends features store friend requests, friendships, match invitations and blocks. Online presence is optional and is shown to friends when you enable it. If you turn on invitation alerts on a device, we store a private registration for that device so the game can deliver a generic invitation notice; the notice never contains names, formations or game details, and you can turn it off in Settings or by signing out. Reports include the category, details you submit, relevant account or match references, and moderation review information. Reports and blocks are not public profile fields.
Hosting and authentication services also process technical connection and diagnostic information to deliver the service and investigate errors or abuse. We use the information above to authenticate players, synchronize their choices, run matches, calculate results and rankings, support friends features and respond to safety or support requests.
Public, private and service-provider access
Other people can access public profile information and published ranking information. Your opponent can see the match information needed to play. Your saved formation library is scoped to your account. Authorized service operations can process match and safety records; access is not made public merely because a match has ended.
We use Supabase for authentication and database services, Render for the match server, Vercel for web hosting, Google Firebase Cloud Messaging and browser push services for optional invitation alerts, and Hostinger for the support email service. Google Analytics is used on the public website only after you allow it. Social sign-in providers process the sign-in according to their own policies. Service providers may process information in countries other than your own; our configured database and match-server region is Singapore.
Device storage and optional website analytics
The game saves session information and local choices so you can stay signed in and resume using it. Native applications use secure session storage. Guest settings and practice data can remain on the device; signing out does not erase those separate guest choices. Clearing application or browser storage can remove local-only data.
The public website asks before loading Google Analytics. See Analytics & cookies for the measured information, retention settings, cookies and withdrawal controls. The game and native apps are outside this website analytics integration. Paid advertising and purchases are not currently enabled.
Retention and your requests
We keep your account information for as long as your account exists. You can edit your profile and account choices in the app. Profile → Your game data lets you download a JSON copy of stored game content and records. Device-only preferences, replays and operational or security records are outside that download. Profile → Delete account removes the account after a recent sign-in and typed confirmation; finish any active match first. Completed results remain for opponents with the account link removed. Backups and service logs are kept by our service providers for limited periods under their own settings; we do not currently promise a fixed retention schedule beyond this.
For other requests to access, correct or delete account information, write to hello@henerals.com from the email address on the account so we can confirm the request is yours. We answer as soon as we reasonably can and will tell you if a request cannot be met. Depending on where you live, including under the Philippine Data Privacy Act, you may also have the right to complain to a supervisory authority such as the National Privacy Commission.
Children and eligibility
Henerals is not directed at children under 13, and you must be at least 13 to create an account. If you are under 18, use Henerals with a parent or guardian's permission. If we learn that an account belongs to a child under 13, we will remove it.
Changes
We will update this notice when the service's data handling changes and show the effective date on this page. New advertising or payment features require an updated explanation before they collect additional information. See also the Terms of use.