Privacy policy

About this policy

First Realm is operated by Lore Casta Pendragon Inc. (L.C. Pendragon Inc.). This policy explains the information processed by the game and its online services, how it is collected, used and shared, and how long it is retained. You can play single-player without signing into Epic Games.

What we collect and how

Epic sign-in. When you choose Epic Games sign-in, Epic provides account identifiers, a display name and authentication tokens through its sign-in service. First Realm requests Basic Profile only, not Epic Friends or Online Presence permissions. Basic Profile may also include language and linked-account display names; First Realm uses account identifiers, display names and authentication to connect you to its services. A remembered sign-in is stored on your device so you can sign in again.

First Realm does not receive or store your Epic Games password. Enter your password only in Epic’s own sign-in interface.

Information you provide. We receive the player and lobby names you enter, messages you send, players you add to your First Realm friends list, invitations and matchmaking requests. Signing into Epic connects you to First Realm’s shared chat. If you contact us, we receive your email address and the information in your message.

Information generated by play. The game records scores, survival times, match results, coin rewards and spending, developer coin grants, unlocks, taunt favourites and transaction identifiers. It also creates settings, saved match and reconnect information, and temporary score or reward caches. Online account records are linked to your Epic product user identifier.

Technical information. Network connections process IP addresses, platform and connection information, latency, authentication results and diagnostic/error logs. This information is generated when the game connects to a host or online service. Visiting this website also lets its hosting provider process normal web request information such as IP address, browser information and cookies.

Player reports and online moderation

When a player submits an Internet-match report, First Realm records the reason, reporter and reported player names and product user IDs, match ID, capture and receipt times, a kingdom screenshot and a build-menu evidence snapshot showing resources and buildings. Available coin-balance information from the reported account’s latest authenticated sync is attached with its observation time. Screenshots capture the game, not other apps or the device desktop. Reports include up to the latest 1,000 match-chat messages; any earlier omitted messages are counted. Private and shared-lobby chat are not included.

Evidence is saved on the reporting device and uploaded to our private Cloudflare-hosted report service. An Epic Player Reports entry contains the reason, player IDs and an evidence reference. Only the verified developer can access our private review page. We use reports to investigate misconduct and decide on First Realm online suspensions or bans. Reports alone never automatically punish an account. Epic Online Services stores sanctions, and online hosts check active sanctions to enforce access restrictions.

Private uploaded reports are retained for 90 days and then removed by daily cleanup. Local evidence and saved match-chat recovery data remain until cleared or replaced. Sanction and developer-action audit records have no automatic expiry; they are retained to enforce access decisions, investigate misuse and prevent duplicate actions. Provider backups and security logs follow their own retention practices.

How we use information

We use this information to authenticate players; remember settings and names; host, find and join games; reconnect to matches; deliver chat and invitations; match available players; display leaderboards; and save account-linked coins, rewards and unlocks across devices.

Transaction and grant records help prevent duplicate rewards and unauthorised grants. Connection and diagnostic information helps operate and secure the service, investigate faults and answer support requests. We do not sell players’ personal information or use game data for targeted advertising. Real-money coin purchases and live advertising are disabled in the current test version. Android test builds include optional Google sample videos, described below. We will update this policy before introducing live advertising or purchases.

Who receives information

Epic Games / Epic Online Services provides authentication, multiplayer services, account-linked player storage, statistics and leaderboards. Account identifiers, authentication information and the relevant game records are processed through these services. See the Epic Games Privacy Policy.

Cloudflare hosts First Realm’s coin-grant, social and private reporting services. Our database there stores player identifiers, names, grant records, messages, friends selections, presence, lobby and matchmaking information. Authentication tokens are checked to authorise requests; the game’s service database does not store your raw sign-in token. See the Cloudflare Privacy Policy.

Other players and match hosts can see information needed for the features you use. Shared chat messages, your chosen name, online player listing and advertised lobby details are visible to other signed-in players. Leaderboard names and scores are visible to people viewing that board. Match participants receive gameplay and match chat; direct social messages are available to their sender and recipient. A player hosting a match processes connection and game-state information. Do not put private information in public names or chat.

Squarespace hosts this website and processes website visits under its Privacy Policy. Hosting providers may process information in countries other than your own. We may also disclose information where necessary to comply with a legal obligation or protect the service and its users.

Android sample videos and privacy choices

First Realm uses Google Mobile Ads and Google User Messaging Platform on Android. The game requests a consent-status update when it starts and again when you choose a sample video. A video is requested only after Google reports that ads may be requested. Where Google requires a privacy-options entry, Ad privacy choices appears in the Marketplace.

All current ad requests use child-directed and under-age-of-consent settings, a General Audiences (G) maximum rating and non-personalized ad requests. The Android app does not request Advertising ID or Android AdServices permissions. These settings do not mean that no information is processed.

Google's SDKs may process IP addresses and approximate location inferred from them, app or ad interactions, diagnostic information, and device or account identifiers. Information is encrypted in transit and may be used to operate ads, measure performance and prevent fraud. See Google's Privacy Policy and its explanation of data processed through partner apps.

Videos in the current test version are sample ads. Completing a Marketplace sample video adds five session-only test coins; eligible match-result videos can add a session-only test bonus. These test credits do not change your Epic-linked coin balance. A generated ad-session identifier is provided to Google for the ad callback. We do not send your Epic password to Google. Live advertising and purchases remain disabled.

Google Privacy Policy · Google data processing through partner apps

How long information is kept

Account and progress records: coin/grant and transaction records, unlocks, scores, player identifiers and saved names currently have no automatic expiry. They are kept to maintain account progress, leaderboards and grant history, and to prevent duplicate credit. They remain until removed following a verified request, reset through an available feature, or no longer needed when a service is retired. Removing a friend deletes that First Realm friend selection.

Shared and direct social messages: the social service shows recent messages from the last 30 minutes. Messages older than 30 minutes are eligible for automatic deletion on the next presence update. They may remain stored longer while the service is inactive. Invitations expire after two minutes and matchmaking offers after 30 seconds, with cleanup on subsequent service activity. Match chat is held for the current session and match recovery; copies included in reports follow the reporting retention described above.

Online status: a player stops appearing online after about 90 seconds without a presence update, or on sign-out. Going offline does not delete their saved identifier, name, friends or account records.

Device and host records: settings, saved matches/reconnect data, cached scores/rewards and diagnostic files may remain until cleared or replaced. A match host may retain saved state for recovery. Platform backups may retain copies. Provider security logs and backups follow the relevant provider’s retention practices and may outlast deletion from the active game service.

Support correspondence: we keep it while handling the request and for necessary follow-up or legal obligations. We do not currently apply a fixed automatic deletion period to support email.

Account data and deletion requests

You can sign out in the game and revoke First Realm’s access through your Epic account settings. This stops future authenticated access but does not itself erase existing cloud progress, scores or messages. You can clear local game data using your device’s app settings. Clearing local data does not delete cloud records and may remove local progress or settings.

To ask what information we hold, request a correction or request deletion, email the address below. Include your First Realm player ID if available so we can locate the right records; never send passwords or sign-in codes. We may ask you to verify control of the account before acting. We will explain any information that must be retained for security, transaction integrity or legal reasons. Deleting account-linked records can remove coin balances, unlocks and scores. Requests concerning Epic’s own account data should also be directed to Epic.

Email a First Realm account-data or deletion request

Security and policy updates

Online services use authenticated requests and encrypted service connections. Access to administrative grants, private reports and moderation commands is restricted to the verified developer. No online service can promise absolute security. When the game’s data practices change, we will update this page and its date, and provide any additional notice or choices required for the new feature.