Privacy Policy

Effective Date: January 26, 2026  |  Last Updated: June 5, 2026

Welcome to Molten Alien! Your privacy is important to us. This Privacy Policy explains how Molten Alien Technologies Ltd., a company registered in Dubai, United Arab Emirates (DIFC) ("we", "us", "our"), collects, uses, and protects your information when you use our mobile games, website, and related services.

As we are established in the Dubai International Financial Centre (DIFC), our processing of personal data is governed by the DIFC Data Protection Law No. 5 of 2020. For users in the European Economic Area (EEA), the EU General Data Protection Regulation (GDPR) also applies. Where this policy refers to GDPR rights or lawful bases, equivalent rights and bases apply under the DIFC Data Protection Law.

1. Information We Collect

1.1 Personal Information

We collect personal information only when you voluntarily provide it, such as when you:

  • Register an account (username, email address, password)
  • Contact us for support
  • Participate in surveys or promotions
  • Subscribe to our mailing list

1.2 Non-Personal Information

We automatically collect certain data for analytics and game performance, including:

  • Device information (model, operating system, unique identifiers)
  • Gameplay statistics and preferences
  • IP address and general location (if enabled)
  • Crash reports and debugging information

1.3 User-Generated Content & Chat

When you use in-game features such as chat, profile avatars, or usernames, we collect and process that content to provide the service and to maintain a safe environment for all players.

Social (direct) messaging is available only between users who are mutually accepted friends (one sends a friend request, the other accepts) — there is no separate on/off setting for it. Social messages are encrypted at rest under keys we manage (this is not end-to-end encryption), are retained no longer than necessary for the service (typically up to about 30 days), and the conversation is deleted when either user unfriends the other.

In-game chat (messaging within a live game or competition) is temporary: it is held only briefly, is not stored in our database, is not encrypted, and is deleted automatically (typically within 24 hours). Because games and competitions can be watched, in-game chat may be visible to spectators of that public game or competition.

We may apply automated safety screening to chat — for example filtering on sending, or reviewing content that is reported by other users. This is automated screening, not routine human review, and is not used to profile you.

1.4 Public Leaderboard & Social Features

To enable competitive and social gameplay, the following information is uploaded to our servers and made visible to other players:

  • Username and avatar — displayed alongside your score on global, regional, club, and friend leaderboards.
  • Game results and statistics — wins, losses, XP, level, and skill rating (MMR) are uploaded after each match for ranking and matchmaking purposes.
  • Club membership — your username appears in your club's member list and activity feed.
  • Country flag — if you opt in during signup, displayed next to your username on leaderboards and in chat.

By creating an account and playing online matches, you consent to this gameplay data being uploaded and displayed publicly within the app. If you do not want your scores shared, please do not play ranked or tournament matches. Anonymous (guest) play is supported but limited features apply.

1.4 Third-Party Services

We integrate third-party services (e.g., Apple App Store, Google Play, Firebase, and analytics providers) that collect user data based on their respective privacy policies.

1.5 In-App Economy

We process your in-app virtual economy: coins and gems balances and a transaction history of how they are earned (real-money purchases, gameplay winnings, rewards) and spent (entering competitions, sending virtual gifts, and buying items such as emotes and cosmetics in the in-app store), together with the items you own. This is in-app activity data and contains no payment card data.

1.6 Special-Category Data

We do not intentionally collect or analyse special-category data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health, sex life, or sexual orientation). Free-text fields such as chat and bio could in principle contain anything a user types, but we do not collect or analyse such content for special-category data or to profile you.

2. How We Use Your Information

  • To provide and improve the game experience
  • To personalize in-game content and features
  • To analyze game performance and user behavior
  • To process purchases and transactions
  • To prevent fraud and maintain security
  • To moderate content using automated systems, including AI (see Section 5)
  • To communicate important updates, promotional offers, or customer support responses

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

Processing Activity Legal Basis
Account registration & management Contractual necessity — required to provide our services to you
Gameplay statistics & analytics Legitimate interest — improving game quality and player experience
Content moderation (automated, with manual review on request) Legitimate interest — maintaining a safe environment for all users
Purchase & transaction processing Contractual necessity — fulfilling your purchase requests
Marketing communications Consent — you can opt out at any time
Fraud prevention & security Legitimate interest — protecting our services and users
Legal compliance & law enforcement requests Legal obligation — complying with applicable laws

Where we rely on legitimate interest, we have assessed that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interest at any time by contacting us at privacy@moltenalien.com.

As a DIFC-registered controller, we rely on equivalent lawful bases under Articles 10 and 12 of the DIFC Data Protection Law No. 5 of 2020 (including performance of a contract, consent, and legitimate interests).

4. How We Share Your Information

We do not sell your personal information. We may share data only in these cases:

  • Service Providers: We share necessary data with the providers that operate our services — including Apple and Google (app distribution, payments, sign-in, push notifications), Google Firebase (authentication, push messaging, crash diagnostics), Meta (Facebook login), SendGrid (verification emails), Backblaze B2 (media storage), Cloudflare (content delivery), and our cloud and game-server hosts (Google Cloud and OVH). Each processes data under its own data-processing terms.
  • Legal Compliance: We may disclose data if required by law or to protect our legal rights.
  • Business Transfers: If Molten Alien Technologies is acquired, merged, or transferred, user data may be part of the transaction.

5. Artificial Intelligence & Automated Systems

We use artificial intelligence (AI) and automated systems to enhance and safeguard our services. These include:

  • Content Moderation: AI may review in-game chat messages to detect and filter inappropriate, abusive, or harmful content in order to maintain a safe gaming environment.
  • Avatar & Image Review: AI may analyze user-uploaded avatars and profile images to ensure they comply with our community guidelines and do not contain inappropriate or offensive material.
  • AI Players: Our games may include AI-controlled players (bots) that participate in matches. AI players are clearly identified and are used to fill open seats, provide practice opponents, or ensure a complete game experience.

AI-based moderation decisions may result in content being filtered, flagged, or removed. If you believe a moderation action was taken in error, you can contact us at privacy@moltenalien.com to request a manual review.

The use of AI within our services is not limited to the examples listed above and may include further integration and approaches in the future as we continue to improve the safety and quality of our platform.

We do not use AI to make decisions that produce legal or similarly significant effects on users without human oversight.

How Automated Moderation Works

Our AI content moderation system works as follows:

  • Detection: AI scans text (chat messages) and images (avatars, custom emotes) to identify potential policy violations such as hate speech, harassment, explicit content, or illegal material.
  • Flagging: Content identified as potentially violating our policies is automatically filtered. You can report content, or contest a decision, to request a manual review by our team.
  • Action: Content that violates our policies may be automatically filtered or removed. You may contest any action and request a manual review by our team.

Consequences: If your content is moderated, it may be filtered, flagged, or removed. Repeated violations may result in temporary or permanent account restrictions.

Your right to contest: You have the right to contest any automated decision. Contact us at privacy@moltenalien.com to request a human review of any moderation action. For users in the European Economic Area, this right remains available for at least six months from the decision (EU Digital Services Act). We confirm that no fully automated decision produces legal or similarly significant effects on you without human oversight.

6. Advertising & Analytics

Molten Alien does not currently serve third-party or targeted advertising in its games. We use analytics tools to measure performance and improve the game; these services may collect and use data according to their own privacy policies. If we introduce advertising in the future, we will update this policy and apply the restrictions below.

Should personalized ads be introduced, you can opt out via your device settings or visit:

Advertising Restrictions

In compliance with the EU Digital Services Act, we observe the following restrictions:

  • We do not serve targeted advertising to users who are under 18 years of age or whom we reasonably believe to be under 18.
  • We do not use sensitive personal data — including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life, or sexual orientation — for the purpose of profiling users for advertising (Article 26(3) of the Digital Services Act).

7. Data Security & Retention

We implement industry-standard security measures to protect your data against unauthorized access or loss. We retain data only as long as necessary for gameplay, legal, and business purposes.

Retention Periods

  • Chat messages: Social (friends-only) messages are retained no longer than necessary for the service (typically up to about 30 days), then automatically purged; a conversation is also deleted when either user unfriends the other. In-game chat is temporary, is not stored in our database, and is deleted automatically (typically within 24 hours).
  • Custom emotes: Retained while your account is active. Deleted upon account deletion.
  • Profile data: Retained while your account is active.
  • Gameplay statistics: Retained while your account is active. After account deletion they are deleted or kept only in anonymised, aggregate form that can no longer be linked to you, for leaderboard integrity and game-balance purposes.

Account Deletion

You may request deletion of your account and personal data at any time through the in-app settings or by emailing privacy@moltenalien.com. Upon receiving your request, your account is deactivated immediately and your personal data (profile information, chat history, and custom emotes) is permanently deleted after a 14-day recovery period, during which you may restore your account by signing back in. Gameplay statistics are handled as described above. We will send you a confirmation when deletion is complete.

8. Your Rights & Choices

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of access (Art. 15) — request a copy of the personal data we hold about you
  • Right to rectification (Art. 16) — request correction of inaccurate personal data
  • Right to erasure (Art. 17) — request deletion of your personal data
  • Right to restriction of processing (Art. 18) — request that we limit how we use your data
  • Right to data portability (Art. 20) — receive your data in a structured, commonly used format
  • Right to object (Art. 21) — object to processing based on legitimate interest, including profiling
  • Right to withdraw consent — withdraw your consent at any time for processing activities based on consent (e.g., marketing communications)
  • Right regarding automated decision-making (Art. 22) — not be subject to decisions based solely on automated processing that produce legal or similarly significant effects on you

For users in other regions, you may have similar rights under your local data protection laws, including the right to access, correct, or delete your personal information, and to opt out of targeted advertising.

To exercise any of these rights, contact us at privacy@moltenalien.com. We will respond within 30 days. For particularly complex or numerous requests we may extend this period by up to two further months, and will tell you why within the first 30 days.

You also have the right to lodge a complaint with a data protection supervisory authority in your EU member state if you believe your data protection rights have been violated.

As Molten Alien Technologies Ltd. is established in the Dubai International Financial Centre (DIFC), our processing is also governed by the DIFC Data Protection Law No. 5 of 2020. You hold equivalent rights under that law (Articles 32–40), and you may lodge a complaint with the DIFC Commissioner of Data Protection (commissioner@dp.difc.ae).

9. Protection of Minors

Our games are not intended for children under 13 (or the applicable minimum age in your region). We do not knowingly collect personal data from children under this age. If you believe we have collected data from a child under 13, contact us immediately and we will delete it.

Targeted advertising ban: We do not serve targeted advertising to users who are under 18 years of age or whom we reasonably believe to be under 18. This is a complete prohibition with no exceptions, in compliance with Article 28(2) of the EU Digital Services Act.

Age-appropriate design: We are committed to designing our services in a way that does not exploit minors. We do not use manipulative design patterns that encourage excessive spending or addictive usage patterns targeting younger users. We do not profile minors for any purpose beyond delivering the age-appropriate game experience.

10. Fair Design Commitment

In compliance with Article 25 of the EU Digital Services Act, we commit to the following principles in the design and operation of our platform:

  • We do not use deceptive or manipulative user interface designs ("dark patterns") to obtain your consent, influence your purchasing decisions, or prevent you from exercising your rights.
  • In-app purchase flows display real-money prices clearly alongside any virtual currency costs.
  • Deleting your account is as straightforward as creating one.
  • We do not use aggressive, misleading, or confusing prompts to pressure you into making purchases or sharing personal data.
  • Privacy settings and consent choices are presented in a clear, neutral manner without pre-selected options that favor data collection.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Continued use of our services after updates means you accept the revised policy.

12. EU Contact Information

Point of Contact for EU Authorities

For communications from EU member state authorities, the European Commission, and the European Board for Digital Services:

Point of Contact for EU Users

For EU-based users who need to reach us directly and rapidly:

EU Legal Representative (Article 13 DSA)

Molten Alien Technologies Ltd. is in the process of designating a legal representative in an EU member state for the purposes of the Digital Services Act. Until a representative is formally appointed, EU authorities and users may direct any DSA-related communications to eu-dsa@moltenalien.com.

13. Contact Us

For general questions or concerns about this Privacy Policy, contact us at:

14. Governing Law, Jurisdiction & Regional Rights

Molten Alien Technologies Ltd. is established in the Dubai International Financial Centre (DIFC). Our processing of personal data, and the rights of our users who consent to this Privacy Policy, are governed by the DIFC Data Protection Law No. 5 of 2020 as the primary applicable data protection law and jurisdiction. You may lodge a complaint with the DIFC Commissioner of Data Protection at commissioner@dp.difc.ae.

In addition, we recognise, respect, and uphold any further data protection rights that apply to you under the laws of your own region — including, for users in the European Economic Area, the EU General Data Protection Regulation (GDPR), and the EU Digital Services Act where applicable. Where your local law grants you additional or stronger rights than the DIFC Data Protection Law, we will honour those rights for you.

Additional commitments for EU/EEA users. Although our service is directed primarily at users outside the EU, we uphold our GDPR and EU Digital Services Act obligations for any users in the EEA. In particular: (i) you may contest a content-moderation decision and request a manual review for at least six months from the decision (DSA Article 20); and (ii) we maintain a designated EU point of contact that responds to EU authorities within 72 hours (see Section 12).