Privacy — ÈRES

Who handles your data?

ÈRES is published by YSkill Studio, the trading name of Quentin Linclau EI, in France. You can contact the studio at yop@yskillstudio.com. The studio's legal notice is available at yskillstudio.com/mentions-legales.

Solo play and saving progress

Settings, campaign progress and solo results are stored on your device. Your online account does not automatically synchronize the solo campaign. Clearing browser or app data may delete this local progress.

Accounts and sign-in

The server stores a player ID, your username, chosen emblem, bio and multiplayer statistics. If you create an email account, it stores your email address, verification status and a cryptographic hash of your password. Your password is not stored in plain text.

External sign-in methods offered in the game are optional. They use a provider page to ask for your authorization. The server stores the stable ID supplied by the service, linked to your ÈRES profile. Matching email addresses do not automatically merge accounts: use the linking option from your existing profile.

Google: sign-in requests standard identity information (openid, email and profile). ÈRES verifies Google's signed response and uses its stable ID to recognize you. Discord: the identify permission allows your profile to be checked; ÈRES keeps its ID. Facebook, when offered: sign-in uses the public profile and its app-specific ID.

ÈRES does not read your messages, friend lists or posts on these services, does not post on your behalf and does not use sign-in data for advertising, resale or AI model training. Provider tokens are used for the sign-in exchange, without permanent background access.

Multiplayer, friends and messages

The server stores match results and two separate ratings for long and quick matches. Private duels do not change Elo or ranked win/loss counters. Other players may see your username, emblem, bio and ranked results.

Social features use your friendships, invitations, blocks, private messages and read status. Private messages are available to participants; a reported message may be sent to the studio for review. Presence and activity allow your friends to see whether you are available.

Why is this data used, and who receives it?

Account, match and community data are needed to provide the online features you request. Security, attempt limits and abuse handling rely on the legitimate interest in protecting players and the service. External sign-in starts only after you choose it and authorize the provider.

The official server is hosted on OVHcloud infrastructure. Resend delivers email verification messages and password recovery links. Google, Discord or Meta handle sign-in when you choose their service. The studio website is served through Cloudflare. These services may process technical connection data, such as IP addresses, under their own terms.

The studio does not send your ÈRES password to sign-in providers. Providers and their subprocessors may process some data outside the European Union; their policies describe processing locations and applicable safeguards. The studio can clarify which providers are involved when you make a request about your data.

Retention and security

Profile and rating data are retained to maintain your account, progress and match integrity until deleted or no longer needed for these purposes. Reports and information needed to handle abuse or disputes may be kept separately during review and in accordance with applicable obligations.

A sign-in session lasts at most 30 days and can be revoked from your profile. Email verification links expire after 24 hours and recovery links after 30 minutes. Invitations expire after 5 minutes. A conversation keeps at most its latest 500 messages; the interface shows the most recent 100.

Separate technical backups allow the service to be restored. Deletion requests must also be taken into account when handling these backups. Support will explain the scope, any retained data and the relevant reasons; deleting local app data does not delete server backups.

Your choices and rights

You can edit your profile, block or report a player and revoke your sessions. To request access, correction, erasure or, where the conditions apply, restriction, objection or portability of your data, contact yop@yskillstudio.com and include your username. Never send a password, sign-in code or secret key.

The studio may ask for only the information needed to confirm that a request concerns your account. You can also contact the CNIL. The Account deletion page explains the deletion procedure. Revoking authorization in Google, Discord or Facebook does not by itself delete your ÈRES account.

Crystals, purchases and collection

When purchases are available, Google Play handles payment on Android and Stripe handles payment on the website and PC. The game server does not receive card details. It keeps your account balance, owned and equipped cosmetics, unlocked heroes and saved hero loadouts, purchase references, receipt fingerprints, transaction dates and refund adjustments to deliver your items and prevent duplicate credits.

A pseudonymous account identifier links the payment to your ERES account. Google purchase tokens are processed on the server for verification; pending consumption tokens remain in a private retry queue until processed and may remain in technical backups. Your cosmetics may be visible to opponents and friends; your wallet and payment history are private.

Purchase records and anti-replay references are also used to resolve payment requests and disputes. Contact the studio for access or deletion requests; any records retained for legal or fraud-prevention reasons must be explained as part of that request.

Friend invitations

When you use an invitation link to create an account, the server records your inviter’s player ID and your registration date. The invitation code can remain on this browser for up to 30 days before registration. A verified account and a qualifying completed public match validate the reward: 50 Crystals for the inviter, up to three times per account. Sending or opening a link alone does not grant a reward. The sharing app processes the message you choose to send; ÈRES does not access your contacts.

Android ads and daily wheel

When ads are enabled on Android, Google AdMob SDK may process IP addresses (from which approximate location may be inferred), device or advertising identifiers, ad interactions and technical diagnostics to serve and measure ads and prevent fraud. The Google consent form collects advertising choices when required. Ad privacy in Settings lets you review choices when the form is available. AdMob ads are not integrated in the browser or Windows version.

The five-match counter is stored on your device. The wheel stores free and ad spins per account and UTC day, prizes and transaction history on the server to prevent duplicate credits. Crystal prizes cannot be transferred or converted to money.

To verify an ad spin, Google receives a reward-specific pseudonymous identifier and a temporary random token. The server verifies Google’s signature and retains the transaction reference for replay protection. This mechanism does not send your email, display name or password to AdMob. Google’s advertising practices are described at https://policies.google.com/technologies/ads and https://policies.google.com/privacy.

Android ads are requested without personalization, using protective under-age-of-consent treatment and a maximum Teen ad content rating. ÈRES does not ask for a birth date for this feature.

Optional browser and itch.io ads

The web rewarded-ad integration uses Google H5 and is awaiting Google approval. It is limited to one optional daily wheel bonus spin; it does not interrupt matches or impose browser match refills. Google may process browser/device information, IP addresses and advertising interactions. Its certified consent message handles applicable regional choices.

The free and bonus spin quotas are shared across platforms. H5 completion is reported by the browser callback; unlike Android AdMob, it is not a signed server-to-server confirmation. The game server controls account binding, expiry, daily limits, random prizes and duplicate-credit prevention.

Discord welcome reward

If you choose to claim the Discord welcome reward, Discord asks you to authorize identify and guilds.members.read. ÈRES checks only your membership in the YSkill Studio server, including whether its membership screening has been completed. It does not read messages or list your other servers. Access tokens are used transiently and are not stored.

The game stores the verified Discord identity through account linking, and a hashed identifier, account reference and reward date in its transaction records to prevent duplicate rewards. This anti-fraud record is retained with the Crystal transaction history.

Arena home banner

A small Google AdSense banner is prepared for the desktop browser home page on arena.yskillstudio.com, below the menu content. It is excluded from battles, native applications and embedded players such as itch.io. It stays hidden while Google approval is pending. Google’s consent and privacy controls apply when advertising becomes available.