Last updated: 12 October 2026
Who we are and what this covers
Carved Stone Interactive operates H.A.D.E.S. // Sentinel for Android, package com.carvedstoneinteractive.hadessentinel. Contact us at carvedstoneinteractive@gmail.com about privacy, access or deletion. This policy covers the game and its account, purchase and advertising features when available. It also covers internal testers. This is not a policy for an unreleased iPhone version.
You can play without a studio account. Signing in enables cloud progress and account-linked items. Availability varies by build and region; a disabled shop or ads switch does not mean account data has stopped syncing. Our web demo saves progress locally and does not offer the Android account, checkout or ad services.
Information used by the game
- Device saves: progress, settings, earned rewards and recovery copies. The app also stores an age group when you choose one, rather than a birth date.
- Account: Google sign-in through Firebase Authentication supplies an account identifier and profile information such as your display name and email. The game displays your name; our game database uses a hashed account identifier for saves and inventory. We do not receive your Google password.
- Cloud progress: game progress, revisions, save-operation identifiers, prior recovery copies, reward claims and timestamps. We use these to sync devices, resolve conflicting saves and recover interrupted operations.
- Purchases: product identifiers, purchase tokens, account association, grant/refund status, and item-use records. Retry receipts on our server are encrypted. Google processes payment details; we do not receive your payment-card number.
- Ad rewards: an account-linked reward-session identifier, placement and signed transaction evidence establish whether a reward was earned and prevent duplicate grants.
- Security: Firebase App Check and Google Play Integrity assess app/device authenticity. Requests expose network information such as IP addresses to the services receiving them. Our host can keep access/security logs; the API also uses hashed abuse-limiting identifiers.
- Support: information you choose to email us, including the sender address and details needed to resolve your request. Do not send passwords, verification codes or payment-card information.
We do not request camera, microphone, contacts or precise GPS access. There is no studio chat, user-content upload, Firebase Analytics or Crashlytics integration in these Android games. Ad SDK diagnostics are separate from those products.
Why information is used and who receives it
We use account and progress data to provide sync and recovery, purchase records to deliver and restore items, reward records to deliver earned rewards, and security information to prevent unauthorized access and fraud. Local game settings make the game work as you choose.
Our account identity and app verification use Google Firebase and Google Play services. Our existing GoDaddy hosting runs the game API and database; Firebase is not the cloud-save database. Encrypted recovery copies are also kept on a separately controlled backup system. Access is restricted to service operation and recovery. Cloudflare fronts the public website and processes network requests for delivery and security.
Google Play handles checkout and purchase verification directly. We do not use RevenueCat. A game-specific obfuscated account identifier accompanies Play checkout. Google AdMob receives information needed to serve ads and verify rewards. When you email support, the email provider processes the message. Information may also be disclosed when legally required or to protect users and the service.
Our providers may process information outside your country, including the United States. Their privacy information is available at Google Privacy Policy, Firebase privacy, Google advertising services and GoDaddy privacy.
Advertising and choices
Optional rewarded ads can add bonus XP after a successful round. There are no interstitial ads. Learning and hints remain free.
When ads operate, Google's ad SDK processes IP-derived approximate location, device identifiers, ad interactions and diagnostic information for advertising, measurement and fraud prevention. It does not require us to request precise GPS permission.
Where required, consent is requested before ads. You may decline personalization or manage available choices. Ad availability and reward offers can change when consent is unavailable or an ad cannot load; ordinary gameplay remains available. Privacy options are being added to the account panel for the next Android update. Until that update, contact our privacy email for assistance with choices. Android also offers advertising-identifier controls in its privacy settings.
We do not sell personal data for money. Ad-related sharing for personalized advertising may be considered sale or sharing under some privacy laws. Use the offered privacy controls or contact us to exercise applicable rights.
Age groups
This app is intended for adults, ages 18 and older. The app asks for an age group before account sign-in. Account sign-in, cloud save, purchases and ads are only enabled for the 18+ selection; anyone who selects a younger age group can keep playing on the device without an account, purchases or ads. If you believe a minor provided account data, contact us so we can investigate and remove it as appropriate.
Retention and security
Local saves remain until removed through app/account cleanup, device storage controls or uninstall. Clearing device data can destroy progress that has not synced. Signing out alone does not delete the cloud account.
We retain cloud progress and active purchase/recovery records while providing your account, then remove the active account data through the deletion process below. Limited hashed account-deletion and transaction records remain to prevent deleted accounts or previously claimed receipts from being reused. These protective records have no automatic expiry in the current service; they are retained for that fraud-prevention purpose, not to restore your deleted gameplay profile.
Encrypted backups rotate as new snapshots are created. The host retains the newest 48 snapshots and a daily copy for the latest 30 backed-up dates; the independent copy additionally retains snapshots less than 30 days old. This is not a promise that all backup data disappears within 30 calendar days: interruptions can extend retention. Backup copies are restricted to recovery; deletion records must be reapplied before restored data is served.
Support messages are retained while handling the request and any related dispute or required record. Providers apply their own retention schedules to their records and operational logs. We can explain retained categories when you request deletion.
We use encrypted network connections, access controls, verified identity/app tokens and encrypted backup/receipt material. No storage or network service can guarantee protection against every incident. Contact us if you suspect unauthorized access.
Delete your account or request your data
Use the game's Account / Your progress panel, then Manage account → Delete account, and read the confirmation. In Coquí Pop the labels are Cuenta / Tu progreso → Administrar cuenta → Eliminar cuenta. Recent Google sign-in may be required.
Deletion applies to the shared studio identity and its cloud progress and inventory across connected games, including Coquí Pop, Critter Pop and Sentinel. It is not limited to the game where you request it. It removes active cloud saves and history, inventory, item-use and reward-session records, encrypted purchase retry records, and the Firebase sign-in identity. Limited protective records and backups remain as explained above. Your Google account itself is not deleted.
The requesting app removes its account recovery copies after confirmation. Other app installations can retain local copies until their data is cleared; uninstalling one game does not delete the shared cloud account. Separate guest saves are not part of account deletion. Deletion does not automatically refund purchases; Google Play handles refund requests.
You can request deletion without reinstalling the game using our account-deletion page. You may also contact our privacy email for access, correction, deletion, an objection or restriction request, or other rights available where you live. We verify ownership before disclosing or deleting data. We do not ask you to email a password or one-time sign-in code.
Legal grounds and changes
Where a legal basis is required, we process information to provide the service you request, with consent where required for advertising, for legitimate interests in security/support and abuse prevention, and to comply with legal obligations. You can withdraw consent without changing the lawfulness of earlier processing and may complain to your local data-protection authority.
We update this page when practices change and revise the date above. Material changes affecting your choices will be explained through the app or the updated policy. Contact: carvedstoneinteractive@gmail.com.