Privacy Policy
Last updated: 13 October 2026
Bloodmantle is operated by Authority XR SRL, which is responsible for the personal data described in this notice. This policy covers the Bloodmantle puzzle webapp. For questions or data requests, contact contact@authorityxr.com.
Information used to run the webapp
Your browser stores gameplay progress, reward previews, form drafts, access status and privacy preferences so you can continue playing and recover unfinished actions.
When you save a victory, we receive the email address, commander name, faction, puzzle details and email preference you submit, together with a submission identifier. If you entered through a tester invitation, we may associate your submission with that invitation. Campaign scores use combined faction totals; the public score display does not show your email address or commander name.
Our hosting and service providers process technical information needed to deliver and protect the service, including network requests, IP addresses and limited diagnostic records. We use Amazon Web Services for the submission backend. If you contact us, we also use the information in your message to respond.
Why we use this information
We use service information to provide the features you request, save submitted victories, maintain campaign scores, manage tester access and handle reward requests. We process information necessary to provide those requested services, and rely on our legitimate interests in securing the webapp, preventing duplicate or abusive submissions and responding to support requests.
Advertising tracking is optional and based on your consent. Any daily puzzle email subscription is a separate choice. Saving a victory does not, by itself, give permission for Meta, X or Reddit advertising tracking. Email verification and reward delivery may be unavailable during the beta; the webapp explains the status when you submit.
Cookies and advertising
With your consent, Meta Pixel measures visits and actions such as playing puzzles and tutorials, completing challenges, saving a submission and clicking our Gamefound link. This helps measure campaigns and create audiences for Bloodmantle advertising on Facebook and Instagram. Meta receives activity and technical information and may associate it with a Meta account.
We also use X Pixel, with your consent, to measure website visits and support audiences for Bloodmantle ads on X. X receives visit and technical information and may associate it with an X account. This integration currently sends base visit tracking only.
With your consent, Reddit Pixel measures page visits, puzzle and tutorial starts and completions, successful victory submissions and Gamefound clicks. Reddit receives activity and technical information and may associate it with a Reddit account to measure campaigns and support advertising audiences. We do not provide Reddit with email addresses, phone numbers or advanced-matching identifiers.
The event details sent by our integration do not include your email address, personalized card name or private access codes. You can change or withdraw your advertising choice through Cookies & privacy. Rejecting optional cookies does not prevent gameplay or victory submissions.
See Cookies and advertising privacy for cookie names, storage periods and withdrawal details, and Meta’s Privacy Policy, X’s Privacy Policy and Reddit’s Privacy Policy for their processing, retention and international transfers.
Sharing and other websites
Service providers process data to host and operate the webapp. Meta, X and Reddit receive advertising data when you permit tracking. We may also disclose information when required by law. Gamefound and Discord are separate services with their own privacy policies; following a link to them does not transfer your cookie choice.
How long data is kept
Gameplay and draft data can remain in this browser until removed. Advertising preferences and submission tracking records are kept for up to 180 days; other gameplay advertising records last for the browser-tab session.
Saved beta submissions currently have no automatic expiry. They remain in our service records to support the campaign and reward requests. Contact us to request deletion of your personal data. We assess requests against any continuing service needs and applicable legal obligations. The advertising storage periods do not describe how long Meta, X or Reddit keeps data.
Your choices and rights
Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time without affecting processing before withdrawal.
Contact contact@authorityxr.com to exercise your rights or change an email subscription preference. You may also complain to your local data protection authority, including Romania’s ANSPDCP.