Privacy Policy
The short version
Sage of War helps you play Rise of Kingdoms better.
This is a short summary of our Privacy Policy.
The full policy is below this page.
Sometimes the two will not match. When that happens, the full policy wins.
What we ask you for
You choose what to tell us.
We only need your kingdom number to start.
You can tell us more later if you want better answers.
We tell you what each answer gets you. We tell you before we ask.
We never ask for your game password.
We never log into your game account. We only give advice.
Your birthday
You must be 13 or older to make an account.
We ask for your date of birth one time. We use it to check your age.
We do not save your date of birth.
We only save that the check passed. We save the day it happened.
What we do with what you tell us
We use it to answer your questions about the game.
We use it to keep your account working and safe.
That is all we use it for.
Who else can see it
A few other companies help us run Sage of War.
They store our information, run our website, and help write your answers.
They are only allowed to use it to do that job for us.
Your information is stored in the United States.
The AI that helps write your answers usually does not keep your questions.
Sometimes it keeps them for a short time for safety checks.
Cookies
The public pages of our website set no cookies.
When you sign in to the app, it sets one strictly-necessary cookie that keeps you signed in. That is all it does.
What we never do
We never sell your information.
We never send you marketing email.
We never use ad trackers.
We never share your information so companies can follow you around the internet.
How long we keep it
We keep your information while you have an account.
Delete your account and we delete your information. We have to keep records of what you bought, because the law says so.
Our backups take a little longer to catch up. Then it is gone from those too.
What you can ask us to do
You can ask to see what we have about you.
You can ask us to fix something that is wrong.
You can ask us to delete it.
You can ask us any time. You do not have to give a reason.
How to reach us
Email us with any privacy question.
A real person reads it.
Sage of War is not made by the company that makes Rise of Kingdoms.
We are not part of Lilith Games.
The full policy
1 · Who we are
Sage of War LLC, a Texas limited liability company, operates Sage of War and the ROK AI Expert advisory service.
Privacy contact: privacy@sageofwar.com. A person reads it.
Sage of War is an independent product. It is not made by, endorsed by, or affiliated with Lilith Games or the publishers of Rise of Kingdoms.
2 · What we collect
You choose what to tell us. The service is built as a ladder: a kingdom number alone gets a real answer, and every additional detail is asked for only when it changes the advice, with the benefit stated before the ask (F25 alignment #1).
| Class | What it is |
|---|---|
| Account record | Email address, account identifier, age-check result and its timestamp |
| Game-account details | Kingdom number, governor power, VIP level, commander roster and equipment, and anything else you choose to enter |
| Uploaded screenshots | Images you upload for us to read values from |
| Advisor answer history | The questions you ask and the answers we produce |
| Application and security logs | Technical records of requests, errors and security events |
| Support email | Correspondence you send us |
| Purchase records | What you bought and when |
| Tester recordings | Session recordings, only where a tester has separately agreed |
| Language-waitlist email | The email address you leave on the language list, and the language you picked |
| Your name (optional) | A name you choose, used only to address you in your conversations; deleted with your account |
We never ask for your Rise of Kingdoms password and we never log into your game account. We give advice; we do not act on your behalf inside the game.
We do not collect payment card details. Card data goes to our merchant of record and never reaches us (see §6).
3 · Why we use it, and on what basis
| Purpose | Basis |
|---|---|
| Creating and running your account | Performance of our contract with you |
| Producing advisory answers from the details you provide | Performance of our contract with you |
| Processing purchases and honouring refunds | Performance of our contract with you |
| Security, fraud prevention, abuse detection, service logs | Our legitimate interests in keeping the service working and safe |
| Transactional email — receipts, password resets, service notices | Performance of our contract with you |
| Counting, in daily totals, how often five service steps happen | Our legitimate interests in understanding whether the service works |
| Writing to you once, the day the language you asked for goes live | Your consent — you asked us to |
That is the complete list. We do not profile you for advertising, and we do not use your data to train general-purpose models.
About that counting: we count, in total, how many times five steps happen each day (for example, an account being created), and for each step, which page of the site it started from. The count holds nothing about who took the step: no account, no IP address, no device details, and no cookie or browser storage. It is a number per day, per step, per page — nothing more.
4 · Children
You must be 13 or older to create an account.
We ask for your date of birth once, to check eligibility. We do not store it. We store only that the check passed and the date it happened (F21).
If we learn that an account belongs to someone under 13, we delete it. To report one, email privacy@sageofwar.com.
5 · How long we keep it
We keep personal data only as long as it serves the purpose it was collected for, then we delete it.
| Data class | Period | Clock starts |
|---|---|---|
| Account record | Account lifetime + 30 days | Account deletion |
| Game-account details | 30 days after removal | Whichever comes first: you remove that game account, or you delete your account |
| Uploaded screenshots | 90 days | Upload |
| Advisor answer history | Account lifetime + 30 days | Account deletion |
| Application and security logs | 30 days | Event |
| Support email | 24 months | Last message in the thread |
| Tester recordings | 90 days | Recording |
| Purchase records | For as long as tax and accounting law requires us to keep them, then deleted | Purchase |
| Language-waitlist email | Until we have sent the one email telling you your language is live, then deleted | You leave your email |
Purchase records are the one thing that outlives your account. Tax and accounting law requires us to keep a record of what was bought and when, so that record survives account deletion — it is the only class in the table that does. Most billing data is not ours at all: you buy from our merchant of record, which holds your payment and billing details under its own policy (see §6).
You can remove a single Rise of Kingdoms account from the service without deleting your Sage of War account. Doing so deletes that game account's details on the schedule above and leaves your account, your credits and your other game accounts untouched. Analyses you have already received are kept for the period shown above, with the game-account details removed from them.
Backups. Deletion is immediate in the live database. We honour deletion requests within 30 days, and backups age out within a further 30 days, after which the data is gone from those too.
AI processing. Our AI subprocessor does not retain conversation content by default. Limited retention applies for specific features, and where trust-and-safety systems require it.
To have your data deleted sooner, see §8.
6 · Who else is involved
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
Companies that process data for us. Each is bound by data-protection terms and may use your data only to perform its job for us.
| Who | What they do for us | Where |
|---|---|---|
| Supabase | Stores your account and your game details | United States |
| Render | Runs our website and application; its content delivery network (run on Cloudflare) serves pages from locations near you | United States |
| Anthropic | Helps produce your advisory answers | United States |
| Google Workspace | Runs our email | United States |
When you upload a screenshot for a reading, we send that image — as you uploaded it — to Anthropic, our AI provider, to read it. Anthropic retains it only per the retention period in §5 and does not train on it. Tip: screenshots can carry hidden metadata (like device info); we're adding automatic stripping, and until then you can remove it yourself before uploading.
Who you buy from. When you make a purchase, you are buying from our merchant of record — the reseller of our service — not from us directly. It collects your billing details (name, contact and payment information) for its own purposes as the seller, under its own privacy policy, which is linked at checkout. It then passes us what we need to fulfil your order and support you, and we use that data only for those purposes. It is a separate company with its own responsibilities for your data — not a processor acting on our instructions — and describing it as anything else would be inaccurate. It retains its transaction records for as long as its own legal obligations require, under its own policy.
7 · Where your data is processed
Your data is stored and processed in the United States. When you load a page, our hosting provider's content delivery network may handle that request at a location near you. Where your data moves between the companies above, it moves under their own data-protection terms.
8 · Your rights
Depending on where you live, you can ask us to:
- give you a copy of what we hold about you;
- correct anything that is wrong;
- delete it;
- restrict or object to how we use it;
- send it to you, or to someone else, in a portable form;
- withdraw any consent you have given.
You can ask at any time and you do not have to give a reason. Email privacy@sageofwar.com.
One routing note that saves you a step: a deletion request to our merchant of record covers only the data it holds as the seller, and a deletion request to us covers only the data we hold — neither of us can delete the other's records. If you want both gone, ask both; we will tell you that at the time too.
You can also complain to your local data protection authority.
9 · How to reach us about privacy
Email privacy@sageofwar.com.
10 · Cookies
The public pages of sageofwar.com set no cookies and use no browser storage of any kind. The Sage of War app sets a single strictly-necessary cookie when you sign in — __Host-sow_session, which keeps you signed in (30 days, or until you sign out); it is not used for advertising or analytics and is never shared. There is no consent banner: that one cookie is strictly necessary, and the disclosure is given anyway. The full statement, including how we verified it and how you can check it yourself in about ten seconds, is in our Cookie Notice.
If a feature ever needs another strictly-necessary cookie, it will be listed in that notice — with name, purpose and lifetime — before that feature is available to you, not after.
Before each release we check the site for advertising and analytics cookies, third-party trackers and embedded third-party content.
If we ever add analytics or embedded content, a consent mechanism ships with them, not after.
The step-counting described in §3 happens entirely on our servers. It places nothing in your browser — no cookie, no script, no storage — and involves no third party, which is why no consent banner accompanies it.
11 · Changes to this policy
If we change this policy we will update the effective date below, and we will tell you about anything significant before it takes effect.
What changed in v1.3 (from v1.2): §6 now says plainly that uploaded screenshots are sent to Anthropic, our AI provider, to be read, with retention per §5's table, and notes that automatic metadata stripping is being added. Nothing else changed.
What changed in v1.2 (from v1.1): the cookie lines now match the Cookie Notice (one strictly-necessary sign-in cookie, in the app only) · the step counting also counts by the page a step started from · two classes added — the language-waitlist email and your optional name.
What changed in v1.1 (from v1.0, effective 2026-09-23): added one purpose to §3 — anonymous daily step-counting — with its plain-language description, and a note in §10 that it sets nothing in your browser. Nothing else changed.