IdleVoid — Privacy Policy
Summary
IdleVoid is an idle/incremental game. To let your progress follow you across devices and to run features like tournaments, leaderboards and purchases, we store your account and game data on our servers. We do not sell your data. We show rewarded video ads through Google AdMob in native apps and Google AdSense in web browsers, which you choose to watch. You can ask us to delete your account and all associated data at any time; see Data deletion request.
What we collect
You provide directly:
- Account: your email address and a password. The password is stored only as a salted hash by our authentication system, never in plain text. You may also sign in as a guest, in which case no email is collected until you choose to register.
- Display name: an optional username shown on leaderboards and in tournaments.
Created as you play, and stored on our servers:
- Your game progress and state: waves reached, currencies (Galaxy Credits, Tech Energy, Stellar Cores, Void Shards), upgrades, research, relics, station modules, collection and tournament results.
- A ledger of in-game currency changes, and records of blocked or flagged actions, used to keep the game economy fair.
Collected automatically by third parties on our behalf:
- Purchases: when you buy or restore an in-app product, our payments partner RevenueCat and Google Play Billing process the purchase and report the entitlement back to the game. This includes a pseudonymous app-user identifier (which is your account ID), purchase history for this app, IP address and basic device information.
- Rewarded ads: when you choose to watch a rewarded video ad in a native app, Google AdMob serves the ad and performs server-side verification of the view. AdMob processes your device advertising identifier, IP address and general device/ad-interaction information. For browser rewards, Google AdSense serves the ad and the game credits the reward to your signed-in account after the H5 ad completion callback. We do not send your account ID to Google for browser ads. See Google’s policy for how Google handles this data.
- Web game ads: when ads are available in the browser or Home Screen web app, Google AdSense may process your IP address, device and browser information, and ad interactions to select and measure ads. We do not send your game account ID to AdSense. Google’s certified consent tools apply where required. See Google’s policy for details.
- Discord reward (optional): if you choose to claim the Discord community reward, we ask Discord to confirm you are a member of our server. This uses your Discord user ID for that one check; we do not store your Discord profile.
Stays on your device only: a local cache of your most recent game state so the game works offline, and your settings.
How we use it
- To run the game: saving and restoring your progress, resolving offline progress, and keeping your state consistent across devices.
- To authenticate you and keep you signed in.
- To operate leaderboards, tournaments, guilds and seasonal events.
- To grant purchased items and ad rewards to the correct account, and to prevent fraud and abuse of the in-game economy.
We do not use your game data to profile you or make automated decisions beyond anti-cheat checks, and we do not combine it with data from other sources. Google may use information it collects through browser ads to select and measure ads under your consent choices and Google settings.
Who we share it with
| Provider | Purpose | Data involved |
|---|---|---|
| Self-hosted Supabase (Postgres, Auth) on our own server infrastructure | Database and authentication | All account and game data above |
| RevenueCat, Inc. | Purchase entitlement management | App-user ID, purchase history, IP, device info |
| Google Play Billing | Processing payments | Handled by Google under Google’s own policy |
| Google AdMob | Serving and verifying rewarded ads | Advertising ID, IP, device/ad-interaction info, account ID |
| Google AdSense | Serving and measuring browser game ads, including optional rewarded placements | IP address, device/browser information, ad interactions |
| Cloudflare, Inc. | Network delivery and protection for our servers | IP address, request metadata |
We disclose data if required by law, to protect our rights, or to a successor entity in a merger or acquisition. We do not sell personal data.
International transfers
Our servers are located in the European Union. Google and RevenueCat may process data in the United States under their respective safeguards.
Retention
We keep your data for as long as your account exists. When you delete your account, your game state, wallet, ledger, collection, tournament entries and login credentials are permanently removed from our database. Deletion cannot be undone.
Your rights
Depending on where you live (including under UK GDPR / EU GDPR) you have the right to access, correct, export, restrict or delete your data, and to object to processing. To exercise any right, or to complain to a supervisory authority (in the UK, the ICO at ico.org.uk), contact us at [email protected].
Data deletion request
To delete your IdleVoid account and all associated data, email [email protected] with the subject “Delete my account”:
- If your account has an email: send the request from that address.
- If you play as a guest: include the Account ID shown in Settings in the game, so we can find the right account.
We will complete the deletion within 30 days and confirm by reply. Settings → Delete my data in the game opens this section. Resetting your progress in the game is not the same as deleting your account: the account and its data remain until you ask us to delete them.
Deletion removes your profile, game state, currency wallet and ledger, collection, tournament and guild records, and your login credentials. Purchase records held by Google and RevenueCat are retained by those providers as required for financial and tax purposes.
Children
IdleVoid is not directed to children under 13. We do not knowingly collect data from anyone under 13 (or the minimum age in your country). The game contains advertising and in-app purchases.
Security
Data is transmitted over TLS. Access to the production database is restricted to the operator. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
Changes
We may update this policy; material changes will be reflected by the “last updated” date above and, where significant, noted in the game.