Privacy Policy
Road of Ashes · Barcan Games · Last updated 22 October 2026
1. Who We Are
Road of Ashes is an Android dark fantasy game published under the name Barcan Games.
The data controller is Barcan Razvan Gabriel, an independent developer based in Romania.
For privacy questions, personal data requests or account deletion, please contact: razvan.barcan.br@gmail.com .
This Privacy Policy describes how Road of Ashes handles information stored on your device and information processed through its online services.
2. Information Stored on Your Device
Road of Ashes stores gameplay information locally, including:
- Adventure progress and Journey checkpoints
- Character progression, classes and skills
- Equipment, inventory and in-game resources
- Pets, cosmetics and gameplay preferences
- Selected age range and advertising preferences
Your complete adventure save is not automatically synchronized between devices through the current account system.
However, selected progression information, character builds, achievements and battle results may be transmitted to our online services for features such as leaderboards, arena battles and social gameplay.
You can reset locally stored adventure progress through the game's available settings. Resetting local progress is different from deleting an online account.
3. Online Accounts and Google Sign-In
Road of Ashes uses Supabase to provide online authentication and game services.
When the game connects online, it may automatically create a guest account associated with a unique account identifier. Session information is stored locally to maintain access to online features.
You may optionally connect a Google account through the Warrior Account feature.
Google Sign-In uses Google's Android authentication interface. An identity token is exchanged with Supabase Authentication to associate your Google identity with your game account.
This process may involve:
- Your unique game account identifier
- Google authentication identifiers
- Your email address, when provided by Google
- Authentication and session information
Road of Ashes does not ask for your Google account password.
Connecting Google can help recover your online game identity on another device. It does not automatically restore or merge your complete locally stored adventure save.
4. Leaderboards, Arena and Covenants
Online features may process the following information:
- Game account identifiers
- Display names and selected avatars
- Regions reached and Prestige progression
- Completed runs, boss defeats and achievements
- Character classes and selected equipment or build information
- Arena defense builds, battle results and rankings
Other players may be able to view your display name, avatar, leaderboard results and selected combat information through the relevant online features.
Covenants, Clans and Raids
Where available, Covenant features may process:
- Clan names, descriptions, tags and emblems
- Clan membership and member roles
- Join applications and clan activity records
- Raid registrations and participant information
- Character-build snapshots used during raids
- Raid damage, attempts, results and rewards
These records are used to operate online cooperation, manage membership, calculate rewards and prevent duplicate or abusive actions.
Some information is visible to other players participating in the relevant social feature.
Please avoid including personal information in your display name, clan name or other publicly visible game content.
5. Purchases and Cosmetic Ownership
Where enabled, optional in-app purchases are processed through Google Play Billing.
Road of Ashes may send purchase-related information to its Supabase commerce service, including:
- Purchased product identifiers
- Google Play purchase tokens
- Purchase verification and acknowledgement status
- Game account identifiers or their derived hashes
- Cosmetic ownership and relevant account balances
This information is used to verify purchases, restore eligible entitlements and prevent duplicate or fraudulent grants.
Payment-card information is handled by Google Play. Road of Ashes does not receive your full payment-card details.
The availability of purchases and their prices depends on the version of the game and Google Play configuration.
6. Optional Rewarded Advertisements
Road of Ashes may offer optional rewarded advertisements. The game does not use an automatic banner or interstitial advertising flow in the audited implementation.
Before requesting an eligible advertisement, the game asks you to select an age range.
- Under 16: Rewarded advertisement requests are blocked.
- 16–17: Advertisement requests are configured with under-age restrictions and non-personalized treatment.
- 18 and older: Advertising privacy and consent choices are presented where applicable.
Advertising services may process information such as:
- Advertising and device identifiers
- IP addresses
- Approximate location derived from IP addresses
- Advertisement interactions
- Technical diagnostics and fraud-prevention information
- Consent preferences, where applicable
Road of Ashes uses Google Mobile Ads and Google's User Messaging Platform for relevant advertising and consent functionality.
Choosing non-personalized advertising does not necessarily prevent all advertising-related data processing.
For further information, see How Google uses information from apps and sites that use its services .
Some rewards are granted locally following successful advertisement completion.
Where production server-verified Cosmetic Sigil rewards are enabled, the game may process account identifiers, reward identifiers, transaction verification information and timestamps to prevent duplicate rewards.
7. Service Providers and Data Sharing
Road of Ashes uses external service providers to deliver specific features.
- Supabase: Authentication, online profiles, leaderboards, arena, Covenants and associated game records.
- Google Sign-In: Optional Google account authentication.
- Google Play: Application distribution, purchases and billing verification.
- Google Mobile Ads: Optional advertisements, advertising measurement, consent and fraud prevention.
Information made public through leaderboards and social features may be visible to other players.
We do not sell player profile information directly. External providers may process information under their applicable terms, privacy policies and service arrangements.
Depending on the provider's infrastructure, information may be processed outside Romania or the European Economic Area. Applicable international-transfer safeguards and processing locations must be assessed against the service configuration.
8. Why We Process Information
Personal information is processed for purposes including:
- Providing online accounts and requested game features
- Operating leaderboards, arena and social gameplay
- Verifying optional purchases and rewards
- Maintaining account security and preventing abuse
- Responding to support and privacy requests
- Providing optional advertisements where requested
- Meeting applicable legal obligations
Depending on the processing activity, applicable legal grounds may include providing requested services, compliance with legal obligations, legitimate interests in security and fraud prevention, and consent where required for advertising or related processing.
Where processing relies on consent, you may withdraw that consent through available controls without affecting processing that occurred before withdrawal.
9. Security
Road of Ashes uses HTTPS connections when communicating with its configured online services.
Access to online account and game records is managed through authentication and server-side access controls.
No internet-connected service can guarantee absolute security. Authentication credentials should not be shared with other people.
10. Data Retention and Account Deletion
Online account and gameplay records are maintained as needed to provide the associated services, subject to account deletion, maintenance processes and applicable legal requirements.
Some temporary service records may be removed through scheduled cleanup operations. Provider logs, backups and legally required records may follow separate retention rules.
We do not promise that every server record or backup is automatically deleted after a fixed 30-day period.
Delete Your Online Account
To request deletion from inside the game, open:
Settings → Privacy & Support → Delete online account
Follow the confirmation instructions while connected to the internet.
The account-deletion functionality is designed to remove the game account and associated personal records from the online services controlled by Road of Ashes.
Some shared or historical raid records may remain in de-identified form after account associations are removed. Records required for legitimate legal, security or fraud-prevention purposes may be retained where applicable.
Deleting your Road of Ashes account does not delete your Google account or automatically refund Google Play purchases.
Your locally stored adventure save is separate and is not automatically erased by deletion of the online account.
Request Deletion Without the App
If you no longer have the application installed, you can use our Account Deletion page or contact: razvan.barcan.br@gmail.com .
Please identify your Road of Ashes profile so the request can be assessed. We may need to verify account ownership. Do not send passwords, authentication codes or payment-card details.
11. Your Privacy Rights
Depending on applicable data protection law, including the GDPR where relevant, you may have rights to:
- Request access to personal information
- Request correction of inaccurate information
- Request deletion of eligible personal information
- Request restrictions on certain processing
- Object to certain processing activities
- Request data portability where applicable
- Withdraw consent where processing relies on consent
- Lodge a complaint with a competent data protection authority
To submit a privacy request, contact razvan.barcan.br@gmail.com .
12. Children and Age Restrictions
Road of Ashes is intended for players aged 16 and over and is not directed toward younger children.
The game uses age-range restrictions for optional rewarded advertisements.
If you believe personal information relating to a child has been processed inappropriately, please contact us.
13. Changes to This Policy
We may update this Privacy Policy when game features, service providers, legal requirements or data practices change.
The latest version will be available on this page, with its updated date displayed above.