Northeld — The Codex

Privacy Policy

Last updated: 23 June 2026

This Privacy Policy explains how Northeld Ltd ("Northeld", "we", "us", "our") collects, uses and protects your information when you play Northeld (the "Game") on iOS and Android. Northeld Ltd is the data controller responsible for your personal data.

The short version

  • We don't show ads and we don't sell your data.
  • You can play anonymously; creating an account (email) is optional and only used to back up and recover your progress.
  • We use Firebase for analytics & crash reports, PlayFab (Microsoft) for cloud saves, and Apple / Google for purchases.
  • You can ask us to delete your data any time at info@northeld.com — see How to delete your data.

I.Who we are

Northeld Ltd is a company registered in England & Wales (company no. 11050315). You can contact us about privacy at info@northeld.com, or by post at Northeld Ltd, 88 Peterborough Rd, Fulham, London, SW6 3HH, United Kingdom. We are the "controller" of your personal data under the UK GDPR and the Data Protection Act 2018.

II.What we collect, why, and our legal basis

We collect only what we need to run the Game. The table below also mirrors the categories shown on the Apple App Store and Google Play data-safety labels.

How we use your data and our lawful basis under UK GDPR.
DataWhy we use itLawful basis
Account info (optional): email address, password (stored hashed), in-game username / display nameCreate and recover your account; sync your saved game across devicesPerformance of a contract; consent (you choose to create an account)
Identifiers: a device identifier, your PlayFab player IDBack up your progress to the cloud even if you don't create an accountLegitimate interests (providing reliable cloud backup); contract
Game & save data: progress, settings, language preferenceSave and restore your game locally and in the cloudContract; legitimate interests
Purchases: records of in-app purchases and subscription status (not your card number)Deliver and restore purchases, prevent fraud, provide supportContract; legal obligation (tax & accounting records)
Analytics & usage (Firebase Analytics): in-game events, device model, OS version, language, approximate region (from IP), app-instance IDUnderstand how the Game is used so we can improve and balance itLegitimate interests; consent where required (e.g. UK/EEA)
Crash & diagnostics (Firebase Crashlytics): crash logs, device state, diagnosticsFind and fix bugs and stability problemsLegitimate interests
Notifications: your notification permission statusSend on-device reminders when timers (building, training, research) finishConsent (you grant the permission)

We do not collect precise GPS location, your contacts, photos, microphone audio, or health data. Notifications are scheduled locally on your device and do not, by themselves, send data to us.

III.How we collect it

IV.How we use your data

V.Who we share it with

We share data only with the service providers that help us run the Game. We do not sell your personal data and we do not share it with advertisers.

ProviderPurposeTheir privacy policy
Google (Firebase Analytics & Crashlytics; Google Play billing & distribution)Analytics, crash reporting, purchases on Androidpolicies.google.com/privacy
Microsoft (PlayFab / Azure)Account and cloud-save hostingprivacy.microsoft.com
Apple (App Store billing & distribution)Purchases and delivery on iOSapple.com/legal/privacy
Unity Technologies (game engine, in-app purchasing & notification tooling)Core game functionalityunity.com/legal/privacy-policy

We may also disclose data where required by law, to enforce our terms, or as part of a business transfer (e.g. a sale of the Game), in which case we will tell you.

VI.International transfers

Our providers may process data outside the UK and EEA, including in the United States. Where they do, the transfer is protected by appropriate safeguards such as the UK International Data Transfer Agreement (or Addendum to the EU Standard Contractual Clauses) and/or the providers' certification under the EU–US and UK Data Privacy Framework.

VII.Advertising

Northeld does not currently contain third-party advertising and does not use advertising identifiers for ad targeting. If we add optional rewarded ads in the future, we will update this Policy and, where the law requires, ask for your consent before any advertising-related data collection begins.

VIII.Children

Northeld is not directed at children under 13, and we do not knowingly collect personal data from children under 13. You must be at least 13 to create an account or make a purchase. If you are under 18, you should have your parent or guardian's permission before making purchases. If you believe a child under 13 has given us personal data, contact info@northeld.com and we will delete it.

IX.How long we keep it

X.Your rights

Under the UK GDPR and EU GDPR you have the right to access, correct, erase, restrict or object to our use of your data, to data portability, and to withdraw consent at any time. To exercise any of these, email info@northeld.com and we will respond within one month.

You can also complain to the UK Information Commissioner's Office at ico.org.uk (or your local EEA supervisory authority).

California residents

Under the CCPA/CPRA you have the right to know, delete and correct your personal information, and to opt out of its "sale" or "sharing". We do not sell or share your personal information as those terms are defined, and we will not discriminate against you for exercising your rights. To make a request, email info@northeld.com.

XI.How to delete your data

You can ask us to delete your account and associated data at any time:

  • In the Game (recommended): open Settings → Profile → “Delete account & data” and confirm. This permanently deletes your account, cloud save and all progress — from our servers and from this device. This cannot be undone.
  • By email: if you can’t use the in-game option, email info@northeld.com from the address linked to your account — or, if you play anonymously, tell us your in-game username or player ID — and we’ll delete it for you.
  • On request we will delete your PlayFab account, cloud save and profile data, and ask our analytics provider to delete analytics tied to your app instance — except records we must keep by law (e.g. purchase/tax records).
  • You can remove locally stored data yourself at any time by deleting the Game from your device.

This section (northeld.com/privacy#delete) is our data-deletion route for the Google Play Data safety form.

XII.Security

We rely on established providers (Google, Microsoft, Apple, Unity). Account passwords are stored in hashed form by PlayFab, and data in transit is encrypted using HTTPS/TLS. No method of storage or transmission is completely secure, but we take reasonable measures to protect your data. If a breach affects your rights, we will notify you and the ICO as required by law.

XIII.Changes to this Policy

We may update this Policy as the Game evolves or the law changes. We will post the new version here and update the "Last updated" date; we will highlight significant changes in-game or by other reasonable means. The current version always lives at northeld.com/privacy.

XIV.Contact us

Questions about this Policy or your data? Email info@northeld.com or write to Northeld Ltd, 88 Peterborough Rd, Fulham, London, SW6 3HH, United Kingdom.