Privacy Policy

1. Scope and who we are

This Privacy Policy explains how Ithoro LLC, referred to as Ithoro, we, us, or our, handles information in connection with Degen Idle. This includes the game, website, mobile applications, accounts, multiplayer features, purchases, support, and related services that link to this policy, collectively called the Services. Ithoro LLC is the controller of personal information covered by this policy.

An app store, identity provider, payment provider, or device platform may independently process information under its own privacy notice. This policy does not control an independent third party's practices.

2. Information we collect

Account and identity information

• Name, email address, account identifiers, account creation date, verification status, and profile image.
• Login method, linked Apple, Google, or Steam identifiers, legacy authentication identifiers, verification requests, account linking records, and session information.
• Password credentials in protected, hashed form. We do not store your password in readable form. If you use a passkey, we store the public credential and related technical information, not the private key.
• Your communication and notification preferences.

Character and gameplay information

• Character names, appearance, class, level, statistics, skills, progression, achievements, tasks, inventory, equipment, pets, cosmetics, game currency, location in the game world, and settings.
• Combat, dungeon, arena, boss, market, trade, guild, party, referral, collection, ranking, reward, and other game activity.
• Game events and audit records needed to save progress, calculate results, balance the game, investigate errors, prevent duplication or abuse, and enforce game rules.

Social, moderation, and player content

• Guild messages, character and guild names, in game mail, profile content, and other material you submit or make visible to players.
• Friend, party, guild, trade, block, report, moderation, suspension, ban, and appeal information.
• Poll responses and other community participation. We do not use game polls for political advertising.

Purchases and entitlements

• Product, price, currency, platform, transaction and customer identifiers, purchase date, subscription term, entitlement, renewal, expiration, cancellation, refund, reversal, and chargeback status.
• We do not receive or store complete payment card numbers. Stripe, Apple, Google, or Valve processes payment credentials under its own privacy notice.

Support and communications

• Support ticket category, subject, message, replies, status, and any screenshot or file you choose to attach.
• Account, character, game state, platform, application version, and technical context reasonably needed to investigate and answer a request.
• Email delivery and reply information for verification, security, purchase, and support messages.

Device, network, analytics, and security information

• Internet Protocol address and subnet, browser or user agent, platform, operating system, device model, application and client version, language, locale, time zone, screen dimensions, graphics processor, processor count, connection timestamps, and login success or failure details.
• A randomly generated installation identifier and a server generated hash based on installation and device attributes. We use these records, related account connections, and network observations to detect fraud, bots, account farms, unauthorized access, and rule evasion.
• Analytics events such as screens viewed, features used, purchase flow activity, game events, session activity, and pseudonymous account or installation identifiers. Our first party analytics pipeline keeps aggregate counters and approximate unique totals instead of a general purpose raw event history. Current mobile application versions may also send account, usage, device, Internet Protocol address, and approximate location information to the mobile analytics provider identified below.
• Error reports, request traces, service logs, crash and diagnostic information, and information included in an error or request context.
• Push notification token, device platform, application version, notification preferences, delivery status, and, for older application versions, provider account tags and an email address.

Information we do not want

Please do not put your real name, contact details, government identifiers, financial account numbers, precise location, health information, or other sensitive information in a character name, guild message, public profile, support ticket, or attachment unless we specifically request it for a lawful purpose.

3. Where information comes from

We collect information from the following sources:

• You. When you create an account, play, make a purchase, communicate, or choose a setting.
• Your device and use of the Services. Through application storage, local storage, network requests, authentication sessions, logs, analytics events, and similar technologies.
• Platforms and providers. Apple, Google, Valve, Stripe, RevenueCat, identity providers, app stores, analytics providers, and notification providers may give us identity, transaction, entitlement, device, or delivery information.
• Other players. When another player interacts with you, includes you in game content, or submits a report.
• Security analysis. We create risk signals and account connection inferences from device, network, and activity information.

4. How and why we use information

• Provide the Services. Create and authenticate accounts, save progression, calculate game results, operate social features, deliver content, process purchases, restore entitlements, and provide requested support.
• Protect players and Degen Idle. Secure accounts, check new passwords against known breach data, detect bots, cheating, exploits, account farms, fraud, harassment, and unauthorized access, enforce our Terms, and investigate reports and disputes.
• Maintain and improve the game. Diagnose errors, measure feature performance, understand how players use the Services, balance gameplay, test changes, and maintain reliability.
• Communicate with you. Send verification codes, security and service messages, purchase and subscription notices, push notifications you allow, support updates, and responses to your requests.
• Comply with law and protect rights. Meet legal, tax, accounting, consumer protection, platform, safety, and regulatory obligations and establish, exercise, or defend legal claims.

Where a legal basis is required, we process information to perform our agreement with you, comply with law, pursue legitimate interests such as service security, support, analytics, and improvement, or with consent. We consider the effect on your rights before relying on legitimate interests. You may withdraw consent at any time, but withdrawal does not affect processing that was already lawful.

We use automated systems to calculate gameplay outcomes, identify unusual security patterns, prioritize fraud signals, and assist with support. We do not use automated processing to make decisions that produce legal or similarly significant effects about you.

5. How we disclose information

• Service providers. Companies that help us provide hosting, databases, caching, network security, storage, authentication, analytics, monitoring, payments, subscriptions, push notifications, email, and support. They receive information for the services they perform for us.
• Platforms. App stores, operating system providers, identity providers, and payment platforms when needed to authenticate you, distribute the game, process purchases, verify entitlements, handle refunds, prevent fraud, or support platform features.
• Other players and the public. Information you make visible through social and multiplayer features.
• Legal and safety reasons. Authorities, regulators, courts, or other parties when we reasonably believe disclosure is required by law or needed to protect people, rights, property, accounts, or the integrity of the Services.
• Business transactions. A buyer, investor, adviser, insurer, or successor in connection with financing, due diligence, a merger, acquisition, reorganization, sale of assets, bankruptcy, or a similar transaction, subject to appropriate protections.
• At your direction. A party you ask us to involve or when you give valid consent.

We do not sell personal information for money. We do not share personal information for cross context behavioral advertising, and we do not use personal information for targeted advertising. We have not done so during the preceding 12 months.

6. Service providers

The game repository uses the following providers or provider groups for the purposes described here:

Providers and features can change as the Services evolve. We require providers acting for us to handle information only for authorized purposes and with appropriate protections. Links above explain each provider's own privacy practices.

7. Public and social features

Character and guild names, profile images, cosmetics, levels, equipment, achievements, rankings, market activity, guild membership, and some multiplayer results may be visible to other players or the public. Guild messages and other communications are visible to their intended participants and may be reviewed for moderation, safety, and support. Other people may save or redistribute information you make visible, and we cannot control what they do with it.

8. Your choices and controls

• Account information. You can review certain account and character information in the game.
• Push notifications. Use the game settings and your device settings to control notifications.
• Marketing email. If a separate marketing program is offered, use its unsubscribe control or contact us. Transactional and security messages are not marketing.
• Analytics storage. The web game uses local storage for analytics identifiers and respects supported browser Do Not Track settings. Clearing site data resets locally stored identifiers.
• Global Privacy Control. We treat a supported Global Privacy Control signal as a request to opt out of sale or targeted advertising where required. We do not currently perform either activity.
• Public content. Choose character, guild, and message content carefully. Contact support if you need help with content you cannot remove yourself.

9. Retention and deletion

We retain each category only for as long as reasonably necessary for the purpose for which it was collected, including providing the Services, maintaining an accurate game economy, meeting legal obligations, resolving disputes, and protecting players. Retention depends on the sensitivity of the information, the game feature, the risk of harm, and legal, platform, tax, accounting, security, and operational requirements.

• Verification codes and incomplete authentication requests expire on short operational schedules.
• Authentication sessions expire or are removed when no longer valid.
• Account and gameplay information is generally kept while your account is active.
• Support tickets, messages, and attachments are kept as reasonably needed to answer requests, maintain support history, and resolve disputes.
• Purchase and entitlement records may be kept as required for accounting, tax, refunds, chargebacks, platform obligations, and fraud prevention.
• First party analytics unique-count sketches expire from active analytics storage within 400 days. Daily aggregate rollups do not contain names, email addresses, raw account identifiers, or a raw event history and may be retained in deidentified form for long-term product measurement.
• Security, moderation, audit, device, network, ban, and account deletion records may be kept longer when needed to prevent abuse, preserve the integrity of the game, enforce rules, or establish legal claims.

You can delete your account from the Account or Settings screen in the game. Account deletion removes or deidentifies associated account and character data from active systems, subject to the exceptions above. Protected backups are deleted on their scheduled cycle. We may retain deidentified information that cannot reasonably be linked to you. Deleting Degen Idle does not cancel a subscription billed by Apple, Google, or another platform. Cancel it in that platform's subscription settings before deleting your account.

If you cannot access the game, email support@degenidle.com to request account and associated data deletion. Tell us the account email and that the request concerns Degen Idle. We will verify the request before acting.

10. Your privacy rights

Depending on where you live, you may have the right to request access, correction, deletion, restriction, objection, or portability of personal information. You may also have a right to withdraw consent, opt out of certain processing, appeal a denied request, or complain to a data protection authority.

To make a request, email support@degenidle.com. Describe the request and identify the account involved. We may ask you to verify your identity. An authorized agent may submit a request where permitted, but we may request proof of authority and verification from the account holder. We will respond within the period required by applicable law.

We will not discriminate against you for exercising a privacy right. A request may be limited where an exception applies, including security, fraud prevention, legal compliance, protection of other people, or information we cannot reasonably verify belongs to you. If we deny an appealable request, our response will explain how to appeal.

11. Regional notices

United States state privacy notice

In the preceding 12 months, we collected the categories described in Section 2: identifiers; customer records; commercial and transaction information; Internet or electronic network activity; approximate location inferred from an Internet Protocol address; account login credentials; player content; and inferences used for security and fraud prevention. We collect these categories from the sources in Section 3, use them for the purposes in Section 4, and disclose them to the recipient categories in Sections 5 and 6. Retention criteria are in Section 9.

If an applicable state law gives you rights to know, access, correct, delete, obtain a copy of, or opt out of certain uses of covered information, you may exercise them as described in Section 10. We use account login credentials only to provide and protect accounts. We do not use or disclose sensitive personal information to infer characteristics about you. We do not offer financial incentives for personal information.

European Economic Area, United Kingdom, and Switzerland

The purposes and legal bases for processing are described in Section 4. The recipient categories, international processing, retention criteria, and rights are described in Sections 5, 6, 9, 10, and 13. You may lodge a complaint with the data protection authority where you live or work. When we rely on legitimate interests, you may object and may ask for information about our assessment.

12. Children

Degen Idle is intended for a general audience aged 13 and older. It is not directed to children under 13, and children under 13 may not create an account or use the Services. If local law requires a higher minimum age for us to provide the Services without parental permission, that higher age applies. A player under the age of legal majority must have a parent or legal guardian review and agree to the Terms of Service.

If we learn that we collected personal information from a child under 13 without legally valid permission, we will take reasonable steps to delete it. A parent or guardian who believes a child provided information should contact support@degenidle.com.

13. International processing

Ithoro LLC is based in the United States. We and our service providers may process information in the United States and other countries whose laws may differ from those where you live. Where required, we use recognized safeguards for international transfers, such as contractual protections, and honor applicable local rights. Contact us if you want more information about an applicable transfer safeguard.

14. Security

We use administrative, technical, and organizational measures designed to protect information. These include protected credential storage, encrypted transmission, access controls, scoped service credentials, account security monitoring, and abuse detection. No system or transmission is completely secure, so we cannot guarantee absolute security. Use a unique password, protect your device and account, and contact us promptly if you suspect unauthorized access.

15. Changes to this policy

We may update this Privacy Policy as the Services or legal requirements change. We will post the revised policy and update the date above. If a change materially affects your rights, we will provide additional notice when reasonably possible and obtain consent when required by law.

16. Contact us

Contact us with privacy questions, rights requests, or account deletion requests: