Privacy Policy

Effective date: October 3, 2026

This Privacy Policy explains what data the mobile game Idle Monster Forge ("the App", "we", "us") collects, how it is used, and the choices and rights you have. Idle Monster Forge is developed by Mario Haesler, an independent developer based in Germany (see Imprint for full contact details). We built Idle Monster Forge to be playable without creating an account — the data described below is limited to what is needed to process purchases, show ads, deliver app updates, keep in-game timers fair and the game stable, and, once they launch, to run leaderboards and clans.

1. Data We Collect

1.1 Anonymous Player Data

To power leaderboards, clans, and cross-device features, the App generates a random, anonymous player ID on first launch and stores it — together with your in-game display name (auto-generated, editable by you), league/rank, and gameplay statistics (gold earned, prestige count, raids completed) — in our backend, provided by Supabase. This ID is not linked to your real name, email address, or any account with us; we have no login system and do not ask for personal contact information to play.

In the current version of the App, leaderboards and clans are not yet available; until they launch, no player data is uploaded to Supabase. The App does contact Supabase to read the current server time, which keeps in-game timers fair. This request only involves technical connection data such as your IP address and does not include your player ID or any gameplay data.

1.2 Purchase Data

In-app purchases (virtual currency packs, cosmetics, Battle Pass, subscriptions) are processed by RevenueCat, which receives your purchase/transaction history from Apple's App Store or Google Play, tied to a purchase-specific identifier, in order to deliver the content you bought and to support "Restore Purchases". We do not receive or store your payment card details — these are handled entirely by Apple/Google.

1.3 Advertising Data

Idle Monster Forge offers optional rewarded video ads (e.g. to double offline rewards) via Google AdMob. Showing and measuring these ads involves processing an advertising identifier (IDFA on iOS / GAID on Android), your IP address, and general ad interaction data. On iOS, this only happens after you grant App Tracking Transparency (ATT) permission; where legally required (e.g. in the EEA/UK), we first request your consent via Google's User Messaging Platform (UMP) before any personalized ad request is made. You can change or withdraw ad consent at any time in the App's Settings.

1.4 Crash & Diagnostic Data

We use Sentry to automatically collect crash reports and error logs (device model, OS version, app version, stack traces, and IP address) so we can find and fix bugs. This data is used solely for stability/debugging purposes.

1.5 Gameplay Analytics

We use GameAnalytics to understand how the game is played and to improve it — this includes your anonymous player ID, device model, OS version, session length, in-game progression and economy events (e.g. which features you use, virtual-currency flow), monetization events, and an approximate location derived from your IP address (country level only — we do not receive or store precise GPS location).

1.6 Data That Stays on Your Device

Your save game (monsters, progress, settings) is stored locally on your device. Reminder notifications (e.g. "your offline gold is ready") are scheduled entirely on-device and never sent to or processed by our servers.

1.7 App Updates

The App receives bug fixes and content updates through Expo (EAS Update). When the App starts, it contacts Expo's update servers to check for a newer version. This transmits technical data such as your IP address, the app version, the device platform and a random installation ID created by the update system, which is used to deliver updates reliably and in stages. No gameplay data, player ID or advertising identifier is shared with Expo.

2. Third-Party Service Providers

We rely on the following processors to run the App. Each has its own privacy policy governing how they handle data on our behalf:

3. How We Use Your Data

• To operate core features: purchases, offline-progress rewards, app updates and fair in-game timers, and, once available, leaderboards and clans.
• To show and measure optional rewarded ads.
• To diagnose crashes and fix bugs.
• To understand engagement and improve game balance and content over time.
• To comply with legal obligations (e.g. tax records for purchases).

We do not sell your personal data, and we do not use it for purposes unrelated to running and improving Idle Monster Forge.

4. Legal Basis for Processing (EEA/UK/GDPR)

Where the GDPR applies, we rely on:

• Consent — for personalized advertising and ATT-gated tracking (Art. 6(1)(a) GDPR); you can withdraw this at any time in Settings.
• Contract performance — for processing purchases you make (Art. 6(1)(b) GDPR).
• Legitimate interest — for crash diagnostics, non-personalized analytics, and anti-fraud/anti-cheat measures on leaderboards (Art. 6(1)(f) GDPR).

5. Data Retention

We keep anonymous player data and analytics data for as long as your player ID remains active, and for a reasonable period afterward for backups and fraud prevention. Purchase records are kept as required by tax and accounting law (typically up to 10 years in Germany). Crash reports are retained by Sentry per their standard retention window (typically 90 days) before automatic deletion.

6. Your Rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or export data we hold about you, and to object to or withdraw consent for certain processing. Because Idle Monster Forge has no login/account system, most of what we hold is tied only to an anonymous player ID stored on your device — if you'd like it deleted, contact us at mariohaesler@protonmail.com with your in-game display name (Settings screen) and we will locate and delete the associated backend records. You also have the right to lodge a complaint with your local data protection authority.

6.1 Canada (PIPEDA)

If you are located in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) gives you the right to know why your personal information is collected, to access it, and to challenge its accuracy. Contact us using the details above to exercise these rights, or contact the Office of the Privacy Commissioner of Canada if you believe your rights have not been respected.

6.2 Philippines (Data Privacy Act of 2012)

If you are located in the Philippines, the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules give you the right to be informed about how your personal data is processed, to access it, to object to its processing, to have inaccurate data corrected, to have it erased or blocked, to receive a copy of it in a portable format, and to claim damages for unlawful processing. We act as the personal information controller for the data described in this Policy. Contact us using the details above to exercise these rights; if you believe your rights have not been respected, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.

6.3 California & other U.S. residents

If applicable state privacy laws (such as the CCPA) apply to you, you may have the right to know what personal information is collected, to request deletion, and to opt out of the "sale" or "sharing" of personal information for cross-context advertising (we do not sell personal data for money; ad-identifier sharing with AdMob for ad delivery may be considered "sharing" under some definitions — you can limit this via the App's ad-consent settings and your device's ad-tracking controls).

7. Children's Privacy

Idle Monster Forge is not directed at children under 13 and we do not knowingly collect personal data from children under 13 (or the relevant minimum age in your country). If you believe a child has provided us with personal data, please contact us so we can delete it.

8. International Data Transfers

Our service providers may process data outside your country of residence, including in the United States and the European Union. Where required, we and our providers rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers. If you are in the Philippines, this means your data may be transferred outside the Philippines; we remain responsible for it in accordance with the Data Privacy Act of 2012.

9. Advertising & Tracking Consent

On first launch (and whenever required by law), Idle Monster Forge shows a consent prompt (Google UMP) before requesting personalized ads, and — on iOS — a separate system App Tracking Transparency prompt before accessing your advertising identifier. If you decline, you will still see ads, but they will be less personalized. You can review or change these choices at any time in the App's Settings, or in your device's system privacy settings.

10. Changes to This Policy

We may update this Privacy Policy as the App evolves or as legal requirements change. Material changes will be reflected by updating the "Effective date" above; continued use of the App after a change constitutes acceptance of the updated policy.

11. Contact Us