Privacy Policy.

Last updated: September 23, 2026

Pentecost Software Co., LLC ("Pentecost Software," "we," "us," or "our") operates Centuries and our company website (together, the "Services"). This Privacy Policy explains how we handle personal information when you play Centuries, visit our website, make purchases, use connected platform features, or contact us. It also applies to testing and prerelease versions of Centuries that link to this policy.

Centuries is intended for players aged 18 and older. Availability is determined by the countries and regions in which the game is offered through Google Play. This policy does not mean that Centuries is available in every country.

Centuries does not create Pentecost Software player accounts or use Firebase. We do not operate a cloud-save service, cross-device gameplay synchronization, or Connected Lives. Saved games are stored locally and are not uploaded to our servers. Google Play purchases, Google Play Games achievements, and Android device backups are separate features described below. Our website does not offer public user accounts.

Centuries does not display ads or operate automated app crash reporting of its own. Optional gameplay statistics are enabled by default and can be turned off in Settings. Google Play Games Services has its own service analytics and diagnostics, and Cloudflare processes technical requests and operational logs. These distinctions are explained below.

This policy does not replace the privacy policies of independent platforms or client websites we develop for other businesses.

1. Who is responsible for your information

Pentecost Software Co., LLC, based in Independence, Iowa, United States, is responsible for the personal information we collect and use as described in this policy. Where applicable data protection law uses that term, we are the data controller.

For privacy questions or requests, contact support@pentecostsoftware.com.

2. Information we handle

Gameplay, saved progress, and preferences

Centuries stores information on your device to run the game and remember your progress. This includes characters, character names and attributes, choices, achievements, inventories, relationships, family histories, in-game events, settings, and saved progress. We do not receive your full saved game through ordinary gameplay or purchase verification. You may separately choose to send a save, screenshot, or other game information to support.

Fictional character ages, health, relationships, religion, politics, finances, and locations describe the game, not necessarily the person playing it. We do not use fictional character attributes to infer your real-world health, sexual orientation, religious beliefs, political opinions, or other sensitive characteristics. Avoid entering real sensitive information or another person's private information into game fields.

Android backup and device transfer

The saved-game file is eligible for Android's operating-system backup and device-transfer features. Depending on your device, settings, and backup provider, Android may back up that file to your Google account or transfer it to another device. The app's Android backup rules require supported encryption capabilities for cloud backup. Backup availability and protection also depend on the operating system and your settings.

These are device or platform services, not a Pentecost Software cloud-save system. We do not receive or administer those backup copies. You manage them through the relevant device, Google account, or backup-provider controls. Google Play Games achievement synchronization does not synchronize your full saved game.

Google Play Games identity and achievements

When Centuries is connected to Google Play Games, the app accesses your Play Games player ID and display name, reads achievement status, and sends achievement unlocks to Google. The app keeps a local cache of confirmed achievements associated with the Play Games player ID. This allows it to recognize achievements and coordinate synchronization for the connected player.

Connection can use your existing Play Games sign-in settings rather than requiring a new sign-in each time. Google manages the Play Games profile; it is not a separate Pentecost Software account. The achievement integration does not send your Play Games display name, player ID, or complete saved game to our Cloudflare purchase-verification database.

Google stores and processes the achievements and other platform information it receives. Profile and achievement visibility depends on Google's features and your Play Games privacy settings. You can manage the connected profile, sign-in settings, and game data through Google's available controls. When Play Games is not connected, locally earned achievements remain on your device, but they may not synchronize with Google.

Purchases and entitlements

Centuries offers subscriptions and one-time purchases through Google Play. Google processes payments under its own terms and privacy policy. We process purchase information needed to verify transactions, provide or restore paid features, and maintain entitlements. This can include product identifiers, purchase tokens, transaction references, purchase dates, subscription status, and refund or cancellation status.

When server purchase verification is enabled, the app sends the Google Play purchase token over HTTPS to our verification service hosted on Cloudflare Workers. The service checks the purchase with Google Play and returns a signed receipt used to grant or restore paid access. This connection does not upload your saved game or create a Pentecost Software player account. Builds without server verification configured do not send purchase tokens to this service.

We store raw purchase tokens and their hashed identifiers in Cloudflare D1, together with product and subscription-plan identifiers, subscription status, expiry and renewal information, paid-access status, verification timestamps, and purchase-acknowledgement status. We also store identifiers and processing records for Google Play subscription notifications. These records support verification, restoration, subscription changes, and retries when purchase acknowledgement has not completed.

Purchase tokens and related records may identify a particular purchase or be linkable to a purchaser. We do not treat a token as anonymous merely because it has been hashed or does not contain a name or email address.

Cloudflare processes verification requests and connection information, which can include IP addresses, request timestamps, and technical request details, to deliver and protect the service. Worker logging is enabled for operational information about requests and processing. The information retained in those logs depends on the service and logging configuration. Google receives the purchase token when we check a purchase through its developer API.

We do not directly collect or store the full payment-card details used for Google Play purchases. A purchase does not create an email-based account with us. Our website does not accept payments.

Gameplay statistics and platform diagnostics

Centuries sends optional gameplay statistics to our Cloudflare service to understand usage and improve the game. Events cover active days, lives started and ended, heir continuation, share-card use, store views, completed purchases, and weekly challenges. Depending on the event, fields include the chosen era and reality setting, character age and broad cause of death, play time, tap and completed-life counts, product or challenge ID, and type of shared moment. Each event also carries app version, installation date, days since installation, and whether the installation predates statistics. The server adds a two-letter country code. Events do not contain player or character names, free text, purchase tokens, or a persistent player, account, or device identifier. Cloudflare receives connection information to deliver and protect the service; IP addresses used for rate limiting are not saved in our gameplay-statistics database. Centuries does not integrate Firebase Analytics, Firebase Crashlytics, or Sentry.

The Google Play Games Services SDK integrated into the app has its own processing. Google's published SDK documentation describes service analytics and diagnostics used to improve SDK stability and products, as well as player and achievement information used by the connected features. This processing is separate from our Cloudflare entitlement database and from developer-operated gameplay analytics.

Google Play, Google Play services, and Android may also process account, technical, diagnostic, purchase, and service information under their own terms and settings. Using a Google-provided integration does not remove our responsibilities for how Centuries accesses or transmits information through that integration.

Website hosting, security, analytics, and fonts

We use Cloudflare to host and protect our website, Cloudflare Web Analytics to understand website visits and performance, and Cloudflare Turnstile to help prevent automated abuse of inquiry forms. Hosting and security services process connection and request information, such as IP addresses, browser and device information, requested pages, timestamps, and verification results.

Cloudflare Web Analytics provides measurements such as page views, referring sites, browser and device categories, and page performance. Cloudflare describes Web Analytics as not using cookies or local storage to track visitors across visits. This does not mean that separate hosting, security, or form-processing services receive no personal information.

Our website loads fonts from Google Fonts. Your browser connects to Google's font servers to request these resources, which involves network and request information such as your IP address and browser details. Google's handling of these requests is described in its privacy information.

Support, testing, and business inquiries

When you contact us, report a problem, participate in testing, or submit a website-project inquiry, we receive the information you provide. This can include contact details, correspondence, screenshots, recordings, diagnostic files, purchase references, and project details such as business information, location, budget, requested features, and timing. Website inquiry details are stored using Cloudflare D1. Support correspondence and attachments may also be held by the communications services used to handle your request.

Only provide information relevant to your request. Do not send passwords, authentication codes, raw purchase tokens, complete payment-card numbers, or unnecessary sensitive information.

3. How we use information

We use local game information to run Centuries and preserve progress on your device. We use connected Play Games information to display the connected profile and synchronize achievements. We use purchase records to verify, provide, and restore paid access, process subscription changes, and address purchase problems. Optional gameplay statistics help us understand which features are used, whether players return, and how updates affect play.

We use website information to deliver pages, understand visits and performance, prevent abuse, and handle inquiries. We use support information to investigate and respond to requests. We also use relevant information to maintain necessary business records, meet legal obligations, prevent fraud, enforce our terms, and establish or defend legal claims.

Purchase verification automatically compares purchase information with Google Play's records and determines the associated entitlement. An unverified, pending, refunded, revoked, or expired purchase may not unlock the relevant paid features. Contact support if you believe a purchase has been handled incorrectly.

We may send purchase, security, support, or service-related communications where you have provided contact details. Any optional promotional communications must comply with applicable consent and opt-out requirements. Accepting our Terms is not consent to unrelated marketing or tracking.

4. Information other players can see

Centuries does not operate its own public player profiles, leaderboards, Connected Lives, or shared gameplay service. We do not make your saved games available to other players.

Google Play Games may display your Google-managed profile, achievements, or related platform information according to its features and your settings. If you independently share a screenshot, exported file, or game information outside our Services, the recipient or platform handles that copy under its own practices.

5. When we disclose information

Service providers. We use Cloudflare for website hosting, Web Analytics, form verification, inquiry storage, purchase verification, gameplay-statistics storage, operational logging, and entitlement database storage. We also use providers supporting communications and customer support. Providers process information needed for their respective services, subject to applicable service terms and data-protection arrangements.

Google services. Google receives information through Google Play purchases and verification, Google Play Games integration, Google Fonts requests, and any Google-provided device backup you use. Google may act independently for its own platform and account services. Our use of its integrations and our own copies of information remain subject to this policy and applicable law.

Legal, safety, and professional purposes. We may disclose relevant information to professional advisers or authorities when reasonably necessary to comply with law or valid legal process, investigate fraud or abuse, protect people and the Services, or establish, exercise, or defend legal claims.

Business transfers. Information may be disclosed during a proposed or completed merger, acquisition, financing, reorganization, or sale of relevant business assets, subject to applicable legal requirements and confidentiality protections.

At your direction. We may disclose information when you request a particular disclosure or give valid consent.

For provider information, see Google's Privacy Policy, Google's Play Games Services data-disclosure information, and Cloudflare's Privacy Policy.

6. Sale of information and advertising

Centuries and our company website do not display advertisements. We do not sell or rent personal information, share personal information for cross-context behavioral advertising, or use it for targeted advertising. Centuries does not use an advertising identifier for our advertising or attribution.

The operational disclosures described in this policy, such as handling support requests, synchronizing achievements, or verifying purchases, are separate from advertising uses. If our practices change, we will update the relevant disclosures and obtain consent or provide other required choices before introducing practices that require them.

7. Local storage and privacy controls

Centuries uses local storage for saved progress, preferences, achievement synchronization, and queued gameplay statistics. The Settings switch "Share anonymous gameplay statistics" stops new event recording and deletes queued events when turned off. A request already in progress may finish. Statistics lack a persistent player identifier, so we may be unable to locate an individual player's past events; contact us about privacy requests. Our website and demonstrations may use browser storage for functionality. Hosting, fonts, security, and form-processing services also process connection information.

You can manage browser storage, app permissions, Google Play Games settings, and device backup through the relevant browser, app, Google account, or device controls. Clearing local storage does not delete information already transmitted to Google, Cloudflare, or us, and removing app data may permanently remove saved progress.

To ask about processing, request deletion, or exercise a consent-withdrawal right that applies to you, contact support@pentecostsoftware.com. Reading this policy or accepting our Terms does not replace any separate consent required by law.

8. How long we retain information

We retain personal information for the purposes described in this policy, not indefinitely simply because it might be useful later. Retention depends on the category, purpose, applicable requirements, and whether identifiable information remains necessary. Raw gameplay-statistics events are retained for 90 days, then combined into daily totals and deleted. The totals are retained for usage comparisons. Unsent events on your device expire after 14 days, and the statistics queue is excluded from Android backup.

Purchase and entitlement records are retained while reasonably necessary to verify or restore paid access, manage subscriptions and purchase acknowledgements, handle refunds or disputes, and meet applicable accounting, tax, security, fraud-prevention, or legal requirements. Cancellation of a subscription does not itself require immediate deletion of every transaction record. A need to retain a transaction record does not automatically require retaining every associated field or operational log for the same period.

Support and website inquiries are retained while handling the request and for a relevant follow-up, dispute, project, or business-record period. The sensitivity and relevance of attachments are considered separately from the correspondence they accompany.

Operational and security logs are retained for the period reasonably needed to deliver and protect the Services, troubleshoot problems, investigate abuse, or meet applicable requirements. Cloudflare's configured retention and deletion cycles also affect copies held in its systems.

Local saves and cached achievements remain on your device until removed or replaced through the app, device, or storage controls. Google-managed achievements and device backups are subject to Google's or the relevant provider's retention and deletion controls; we do not administer those independent copies.

We do not use one fixed retention period for all categories. When identifiable information under our control is no longer needed, we delete it or render it anonymous. Information that remains linkable through a persistent identifier is not treated as anonymous merely because its name, email address, or raw identifier has been removed.

9. Data deletion requests

To request deletion of personal information associated with Centuries or our website, email support@pentecostsoftware.com with the subject "Centuries data deletion" or "Privacy request." Describe the information or interaction involved, such as a support message, website inquiry, or Google Play purchase reference. No Pentecost Software account is required, and you do not need to reinstall the app or wait for a subscription to expire.

We may request information reasonably necessary to locate relevant records, verify your authority, and prevent unauthorized deletion. A purchase or order reference may help us locate a record, but possession of a reference does not automatically establish authority to delete it. We will explain any additional verification needed. Do not email passwords, authentication codes, raw purchase tokens, or full payment-card details.

We delete personal information from systems under our control and address deletion with relevant service providers as required by applicable law. This can include support correspondence, website inquiries, and identifiable purchase or entitlement records that no longer have a lawful retention basis. Where a legal exception applies, we may retain the limited information necessary for the permitted purpose and will explain the relevant reason. Deleted information may remain temporarily in restricted backups until the applicable deletion or overwrite cycle completes.

Deleting purchase information is different from canceling a subscription, requesting a refund, or deleting Google's own records. Google may require a separate request for information it independently controls. This does not remove our responsibilities for copies under our control.

Deletion of verification records can affect purchase recognition or restoration. Continuing to use server-verified paid features may result in new verification records being created when the app checks an entitlement again. We will explain relevant limitations rather than treating every purchase record as permanently exempt from deletion.

Deleting information we hold does not remove local saves, exported files, Google Play Games records, or device backups. Use the corresponding app, device, or provider controls for those copies. Clearing app data or uninstalling Centuries does not itself request deletion of server records and does not cancel recurring Google Play billing.

10. Your privacy rights

Depending on your location and the law that applies, you may have rights to access your personal information, obtain a copy, correct inaccuracies, request deletion, restrict processing, or receive certain information in a portable format. You may also have rights to opt out of specified processing, authorize an agent to act for you, or appeal a denied request.

Right to object: Where applicable, you may object to processing based on legitimate interests. You may object to processing for direct marketing at any time.

Where processing relies on consent, you may withdraw it without affecting processing lawfully carried out before withdrawal. Withdrawing permission necessary for an optional feature may prevent us from providing that feature.

Contact support@pentecostsoftware.com to exercise a right. We verify requests proportionately and do not collect unnecessary identity information solely to handle a request. If we cannot identify or locate your information using the details available, we will explain the limitation and what additional information may help.

We respond within the periods required by applicable law. For requests governed by the EU GDPR or UK GDPR, this is generally within one month, subject to applicable verification rules and lawful extensions. Where an extension or refusal applies, we explain the reason and available complaint rights within the legally required period. Requests are ordinarily free of charge, except where applicable law permits a fee or refusal.

You may complain to the privacy or data protection authority responsible for your jurisdiction. For the EEA, this may be the supervisory authority where you live, work, or believe an infringement occurred; for the UK, the Information Commissioner's Office; and for Switzerland, the Federal Data Protection and Information Commissioner. You do not have to contact us first before exercising a right to complain to a regulator. We do not unlawfully discriminate against people for exercising privacy rights.

11. Legal bases and international processing

Where EU GDPR or UK GDPR applies, our legal bases depend on the processing involved:

Contract and requested services: Processing necessary to provide the game and paid features you request, verify and restore purchases, handle related support, and provide connected achievement functionality you use.

Legitimate interests: Processing necessary and proportionate to secure the Services, prevent fraud and abuse, troubleshoot operational problems, handle general business inquiries, and establish or defend legal claims, where those interests are not overridden by your rights. We do not rely on legitimate interests to bypass a consent requirement.

Legal obligations: Processing necessary to meet applicable accounting, tax, regulatory, or other legal duties.

Consent: Processing for which consent is required by applicable law. Consent must be obtained through the relevant choice or mechanism; this policy and agreement to our Terms are not blanket consent to optional tracking or other unrelated processing.

Purchase verification requires the relevant purchase information. Without it, we may be unable to confirm or restore the requested paid access. Google Play Games identity and achievement information is needed for connected achievement functionality. Support requests need sufficient information to identify and resolve the issue, but do not require unrelated personal details.

We operate in the United States. Cloudflare, Google, and other service providers may process information in the United States and other countries in which they operate. Those countries may have privacy laws different from those in your country.

Where a transfer requires safeguards under applicable EEA, UK, or Swiss law, an applicable legally recognized mechanism is required, such as an adequacy decision or appropriate contractual safeguards. Cloudflare's published Data Processing Addendum includes standard contractual clauses and UK and Swiss provisions for covered transfers. The applicable mechanism depends on the service, contracting entities, and transfer involved. Contact us for information about the safeguards applicable to information we control and how to obtain relevant details. Merely using the Services does not constitute consent to an otherwise unlawful transfer.

12. Age requirements and children's privacy

Centuries is intended for players aged 18 and older. A store content rating does not replace this minimum player age or any higher age required by applicable law. A fictional character's age does not establish the real player's age or eligibility.

Our Services are not directed to children under 18, and we do not knowingly seek their personal information. If we learn that a child under 18 has provided personal information, we take appropriate steps to address the processing, remove information where required, and prevent further inappropriate collection, subject to applicable law. A parent or guardian who believes their child has provided information should contact support@pentecostsoftware.com and identify the relevant service and information.

For otherwise eligible players who are not legally adults where they live, the parental or guardian requirements in our Terms apply. Those requirements do not permit a person under 18 to use Centuries.

13. Security

We use safeguards appropriate to the information and Services involved, including HTTPS for purchase-verification connections and access controls for service administration. Access to personal information is limited to people and providers who need it for the purposes described in this policy.

No method of transmission or storage is completely secure. This does not limit any obligation we have under applicable law. Do not send sensitive credentials in support messages, and notify us if you suspect unauthorized access to information handled by our Services.

14. Changes and contact information

We update this policy when our information practices change. The revised policy will be posted on this page with an updated date. Where required, we provide additional notice and obtain consent before applying material changes to the processing of personal information.

For questions, privacy-rights requests, or data-deletion requests, contact:

Pentecost Software Co., LLC
Independence, Iowa, United States
Email: support@pentecostsoftware.com