Privacy Policy

Fenhold TD · WhatsYum Ltd · Last updated 11 November 2026

This policy explains what information the Fenhold TD app collects, why, who else receives it and what you can do about it. "We" and "us" means WhatsYum Ltd, the developer of Fenhold TD, a company registered in the United Kingdom. You can reach us at support@whatsyum.com.

The short version

You don't need an account to play, and the game never asks for your real name, email address, phone number, contacts, photos or precise location.
Your progress is saved on your phone. The game also keeps a copy on our server (the cloud save) under a random player ID, so you can get it back on a new phone.
Purchases are made through the App Store or Google Play. We never see your card or bank details. Our server checks each purchase with Apple or Google and keeps a record of it: the transaction ID, the product and the time.
The game shows optional rewarded video ads from Google AdMob. Google uses your device's advertising ID, your IP address and some device details to show and count those ads. Ads are only personalised if you agree to it (and, on iPhone, only if you allow tracking).
We advertise the game on Facebook and Instagram. Outside the EEA, the UK and Switzerland, the game can tell Meta when it was installed and opened and which stages you clear, so we can see which of our ads bring players. It's on for new installs, and the "Help measure our ads" switch in Settings turns it off.
The game sends our server stats about how it's played, under a random code, so we can fix problems and balance it. They're never used for ads or shared with anyone. In the EEA, the UK and Switzerland it asks you first, and everywhere you can turn them off in Settings.
If you play the League, other players see a name (a made-up one, unless you choose your own), your League tier, your scores, your combat level and the towers you used.
We don't sell your information, and we only use it to run and improve the game.
Fenhold TD is meant for players aged 13 and over.

What we collect, and why

Your game progress, on your device

Your towers, gear, currencies, settings and progress are stored on your phone so the game can carry on where you left off. They stay there until you delete the app or wipe your progress in the game.

The cloud save, on our server

The game sends a copy of your save to our server so your progress can be restored if you change or reset your phone. The cloud save holds:

a player ID: a random code the game creates on your phone the first time it runs (it isn't your name and isn't linked to your advertising ID);
if you choose to sign in with Game Center (iPhone) or Google Play Games (Android), the player ID that service gives the game, so your save can follow your Game Center or Play Games account to another device. We don't receive your email address or password. Signing in is optional;
your save data (the same progress described above) and when it was last saved;
your save code, if you look at it in the game's Profile: it's stored with your save, only so that you can type it into the game on a new install or another phone to restore your save there.

We use it only to keep and restore your progress. Under European and UK law our reason for using it is that it's needed to provide the game you asked for.

The League: what other players see

The League's leaderboards are the one part of the game other players can see you on, and only once you've played it. For each week you play, they show:

your name on the boards: one the game makes up for you (like "Mossy Warden 47"), until you choose your own. Please don't use your real name;
your League tier and highest tier, your best wave that week, your combat level and the towers in your deck.

Our server also keeps how long the run took and the game's version, to spot scores that can't be right. If another player reports your name, we keep the report (the name, and random codes for you both) so we can look at it, and we may reset the name or take your scores off the boards. Under European and UK law our reason for using this is that it's needed to provide the League you chose to play, and our legitimate interest in keeping it fair and friendly.

Purchases

In-app purchases are handled by Apple (App Store) or Google (Google Play) under their own terms and privacy policies. We never receive your name, card or bank details from them.

When you buy something, the app sends the store's proof of purchase to our server, which checks it with Apple or Google before the game hands over what you bought. Our server keeps a purchase record for your player ID: the store's transaction ID, the product bought and the time, and for a Warden's Pass bought on Google Play, Google's purchase token, so it can check the pass's renewals. We use it to deliver purchases, restore them on a new device, handle refunds and stop fraud, and for our accounts. Our reasons under European and UK law: it's needed to provide what you paid for, and we're legally required to keep sales records.

Advertising (Google AdMob)

The game offers rewarded video ads: you choose to watch one in return for an in-game reward. They're served by Google AdMob. When the game asks AdMob for an ad, Google's software in the app collects:

your device's advertising ID (on iPhone, the IDFA, only if you allow tracking when asked; on Android, the Android advertising ID);
your IP address, which Google uses to work out your approximate location (such as your country or city), never your precise location;
device details such as the model, operating system, language and screen size;
which ads were shown and how you interacted with them;
crash and performance information about the ads.

Google uses this to choose and show ads, count views and rewards, measure how ads perform and prevent fraud. Ads are personalised (based on your interests) only if you agree. In the European Economic Area, the UK and Switzerland, the game shows Google's consent message before any ads; if you say no, you may still see ads, but they won't be personalised (Google may still use limited information to show and count them and to stop fraud). On iPhone, the game asks your permission before the advertising ID can be used for tracking, and works the same whether you allow it or not.

Google acts on its own account for some of this. See how Google uses information from apps that use its services and Google's privacy policy.

Measuring our own ads (Meta)

We advertise Fenhold TD on Facebook and Instagram. To see which of those ads bring players, the game includes Meta's software (the core of the Meta SDK, without Facebook Login). When it's on, it sends Meta:

that the game was installed and opened, and which stages you clear for the first time (as "levels achieved");
purchases made in the game (the product and its price, never your payment details), which Meta's software records by itself;
your device's advertising ID (on iPhone, the IDFA, only if you allow tracking when asked; on Android, the Android advertising ID), your IP address and device details such as the model, operating system and language.

Meta uses this to tell us how our ads perform and to show our ads to people more likely to enjoy the game. If you have a Facebook or Instagram account, Meta may match it to that account. We only ever see totals, never you.

It's off in the European Economic Area, the UK and Switzerland. Elsewhere it's on for new installs (if you played before it was added, it stays off unless you turn it on), and the "Help measure our ads" switch in the game's Settings turns it on or off at any time. On iPhone, the advertising ID is only sent if you allow tracking. In US states with their own privacy laws, the game asks Meta to use the data only to provide its service to us (Meta's "Limited Data Use").

Meta acts on its own account for some of this. See Meta's privacy policy and, if you have an account, its activity off Meta technologies settings.

Your ad consent choice

Google's consent tool stores your choice on your phone so it isn't asked again every time. You can change it in the game's Settings ("Privacy choices").

Server records

Like most servers, ours records the IP address and time of each request it receives. We use these records only to keep the service running and secure, and delete them after 30 days.

Gameplay stats

So we can see what works and fix what doesn't, the game sends our server a record of how it's played:

when the game is opened and closed, and the screens and buttons used;
each battle: the stage, the result, how far it got and how long it took, the towers and boons used;
currency earned and spent, rewards claimed and your combat level;
which offers were shown, which ads were watched, and which purchases were started, cancelled or completed (the product and its price, never your payment details);
the game's version, your phone's operating system, screen size and language setting, how smoothly battles ran, and any errors in the game.

These records carry a random code made only for this purpose. They don't include your name, your advertising ID, your IP address or anything from the rest of your phone. Only we see them. They aren't sold, shared or used for advertising, and we use them only to understand how the game is played, fix problems and balance it.

In the European Economic Area, the UK and Switzerland the game asks you first, and nothing is sent unless you say yes. Elsewhere the stats are on unless you turn them off. Wherever you are, the "Share gameplay stats" switch in the game's Settings changes it at any time. Turning it off, or using "Delete my online account", deletes the only link between you and the records already sent, so they can no longer be traced to you. Our reason under European and UK law: your consent where the game asks for it, and otherwise our legitimate interest in understanding and improving the game.

Crash reports from Apple and Google

If you've agreed to share analytics with app developers in your phone's settings, Apple or Google may send us anonymous crash reports and usage statistics. We use them to fix problems.

If you contact us

If you email us, we keep your email address and message so we can reply, and delete them once the matter is closed and no longer needed.

What we don't do

We don't ask for or collect your real name, email address, phone number, contacts, photos, microphone, camera or precise location.
We don't sell your personal information or share it with data brokers.
The game has no chat and no way to talk to other players. Your League name is the only thing you write that anyone else sees.
We don't track you across other companies' apps and websites ourselves. The only tracking in the game is Google AdMob's personalised advertising and Meta's measurement of our own ads, as described above.

Who else receives information

Apple and Google, who run the app stores and process payments.
Google (AdMob), for advertising, as described above.
Meta, to measure our own ads on Facebook and Instagram, as described above.
Microsoft (Azure), who hosts our server and stores the cloud saves and purchase records for us. They may use it only to provide that service to us.
Authorities, if the law requires us to, or to protect our rights or someone's safety.
If WhatsYum Ltd or the game is ever sold, the buyer, who would have to keep to this policy.

Where it's kept

Our server is in Ireland (Microsoft Azure's North Europe region). Google and Meta process advertising data in many countries, including the United States. Where information about people in Europe or the UK is transferred to countries without the same level of protection, it's protected by the standard contractual clauses approved for that purpose (or an equivalent safeguard).

How long we keep it

Progress on your phone: until you delete the app or wipe your progress.
The cloud save: until you delete it, or 2 years after the game last saved it.
Purchase records: 5 years after the purchase, because tax law requires us to keep sales records; they're deleted with your cloud save before then if no longer needed.
League boards: 8 weeks after the week they're from, or until you delete your account. Reports of a name: until we've dealt with them, and at most 13 months.
Server records: 30 days.
Gameplay stats: 13 months. After that we keep only daily totals, which say nothing about any one player.
Advertising data: as set out in Google's and Meta's policies.

Your choices and rights

Personalised ads: change your choice at any time in the game's Settings ("Privacy choices"). On iPhone you can also turn tracking off in Settings > Privacy & Security > Tracking. On Android you can reset or delete your advertising ID in your phone's Google settings.
Gameplay stats: turn them off or on at any time with "Share gameplay stats" in the game's Settings.
Measuring our ads: turn it off or on at any time with "Help measure our ads" in the game's Settings.
Notifications: if you turn them on, the game schedules them on your phone itself, and nothing about them is sent to us or anyone else. Turn them off any time in the game's Settings or your phone's settings.
The League: you only appear on its boards if you play it. Change your name at any time up to once a week in the Profile, and hide or report another player's name from their card on the boards.
Delete your data: wiping progress in the game removes it from your phone. To delete your cloud save, your League name and scores, and purchase records, use "Delete my online account" in the game's Profile (tap your combat level), or email us with the player ID shown there. We'll delete them within 30 days, apart from records the law makes us keep.
Wherever you live, you can ask us what information we hold about you and for a copy of it, ask us to correct or delete it, and complain to us. We'll answer within 30 days.
If you're in the European Economic Area or the UK, you also have the right to object to or restrict how we use your information, to take a copy of it to another service, to withdraw consent at any time (this doesn't affect what happened before), and to complain to your data protection authority (in the UK, the Information Commissioner's Office, ico.org.uk).
In Australia, if you're not happy with how we've handled a complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

To use any of these rights, email support@whatsyum.com with the player ID from the game's Profile (tap your combat level) so we can find your data. We may ask you to confirm the request comes from your device.

Children

Fenhold TD is made for players aged 13 and over and isn't directed at children under 13. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, email us and we'll delete it.

Security

Information sent between the game and our server is encrypted in transit (HTTPS), and access to the server is limited to the people who run it. No system is perfectly secure, but we take reasonable steps to protect what we hold.

Changes to this policy

If we change this policy we'll update the date at the top, and if the change is significant we'll tell you in the game before it applies.

Contact

WhatsYum Ltd
support@whatsyum.com
https://whatsyum.com

The data controller for the cloud save, purchase records, gameplay stats and server records is WhatsYum Ltd. For advertising, Google, and for measuring our ads, Meta, are also controllers of the data they collect.