Sign-in, subscriptions and cloud saves
Offline play does not require sign-in. On supported platforms, you may optionally sign in with Google or Apple for cloud features. Firebase Authentication processes account identifiers, sign-in credentials, and the name or email supplied by the provider, including an Apple relay email. We use these data to authenticate you and associate your cloud save with your account. We do not receive your Google or Apple password.
VIP is a paid, automatically renewing subscription. The price, currency and billing period are those shown by Google Play or the Apple App Store when you purchase. The store processes payment. You can manage or cancel renewal in that store and restore purchases in the game. Cancelling renewal does not immediately end access for the paid period; subscription status follows the store response. Refunds follow store procedures and applicable rules. Google and Apple subscriptions are not shared across stores.
The game uses store services to process products, purchases and subscription status. It locally stores VIP status, query times and hashed transaction identifiers/processing records to restore purchases, acknowledge transactions and provide benefits. Local transaction records do not store raw purchase tokens or receipts. Cloud sign-in and the payment store account are separate identity flows. We do not receive payment card numbers.
Optional cloud backups use Firebase Authentication for sign-in verification, Cloudflare Workers for requests, D1 for hashed account identifiers, backup metadata, operations and daily quotas, and R2 for the latest encrypted player database. The database includes all local characters and progress but excludes device VIP state and subscription transaction records. Each platform account has one backup and one restore per day, resetting at midnight Hong Kong time and shared across its characters and devices. Google and Apple save spaces are separate. A successful new backup replaces the previous one; version history is not provided.
Cloud saves are retained until you delete the cloud account; subscription expiry or sign-out does not automatically delete them. While subscribed, request deletion in the VIP panel’s cloud account section; if the entry is unavailable, contact service@firstcommand.dev with your deletion request; Google accounts can also use https://firstcommand.dev/xiadao/delete-account . Deletion removes the cloud save and this game’s Firebase sign-in account, not your Google/Apple account or local characters, and does not cancel store subscriptions. A minimal hashed deletion marker may remain to prevent old credentials recreating data; temporary files are removed by daily cleanup. Uninstalling or clearing local app data does not delete cloud saves or cancel renewal.
Who We Are
Xia Dao is developed and provided by First Command Limited. First Command Limited is a Hong Kong company. In this policy, "we", "us", and "our" mean First Command Limited.
For privacy, terms, or game support questions, contact service@firstcommand.dev.
Personal Data We Do Not Require
Offline play does not require an account. Optional cloud saves use Google or Apple sign-in; see the cloud saves section for data handling and deletion. Character names and messages you publish are handled under the message-board rules.
We do not sell players' personal data.
Local Game Data
The game stores local data on your device, including language settings, audio settings, battle settings, character data, quest progress, map fog, items, equipment, faction progress, daily reward records, and other save data.
This local data is used mainly to preserve progress, load character state, provide game features, and limit daily rewards or other in-game flows.
Town Message Boards
When you accept the community rules and use a town message board, your character name and message content are displayed publicly to other players. Do not include your real name, contact details, address, or other sensitive information in a character name or message.
The game sends the character name and character seed to our service. The character seed and connecting IP address are used only to derive irreversible HMAC identifiers for spam limits, reports, blocking, and abuse prevention; the server does not store the raw character seed or IP address.
The server stores messages, reports, pseudonymous author identifiers, and moderation status. Each board retains its latest one hundred messages, although hidden messages may remain until they rotate out or are manually reviewed. You can report a message, report an author, or block an author for an individual character save from within the game.
To request removal of a message you posted, ask about content handling, or contact the moderator, email service@firstcommand.dev.
Ads and Rewarded Ads
The game uses Google Mobile Ads to display ads and rewarded ads. The Google Mobile Ads SDK may process device identifiers, ad interactions, approximate location, diagnostics, or other ad-related data under Google's policies for ad delivery, abuse prevention, measurement, and service maintenance.
When you choose to watch rewarded ads for daily rewards, battle speed, dungeon revival, or similar game effects, the game records whether the reward flow was completed so that the corresponding in-game reward can be granted or limited.
Third-Party Services and Technical Data
The game may generate technical data because of platform requirements, debugging, crash diagnostics, ad SDKs, or store services.
Third-party SDK data handling is governed by those providers' own policies, and we aim to use only SDKs and services that comply with platform requirements.
Data Deletion
You can delete local game saves by uninstalling the app or clearing app data through your operating system.
After deletion, character progress, settings, daily reward records, message-board rule acceptance, block lists, and related local data may not be recoverable.
Uninstalling the app or clearing local data does not automatically delete messages that were already published. Contact service@firstcommand.dev to request removal of a server-side message.
Policy Updates
This policy may be updated when features, platform rules, or SDK behavior changes.
Continuing to use the game after an update means you accept the updated privacy policy.