## Privacy Policy

**Last updated:** 2026-02-01  
This Privacy Policy explains what data we handle when you use the game (the Service).

### 1. Data We Handle
- **Account identifiers:** Information from authentication (e.g., your Firebase user ID and associated account email or provider data).
- **Gameplay data:** Character and progression data such as level, inventory, stats, daily limits/counters, achievements, and in-game currency balances.
- **Activity logs:** Gameplay activities (such as adventures, dungeons, raids, tower runs, and enchant attempts) are logged for analytics, monitoring, and anti-cheat purposes. Logged data includes timestamps, player names, activity types, rewards earned (items, currency, gems), and enchantment outcomes. User IDs and account identifiers are not included in public logs.
- **Device/service metadata:** Basic technical data that the hosting and authentication providers log (for example, general request or error logs). We do not intentionally collect precise location.
- **Device fingerprint data:** On login, we collect device characteristics such as IP address, browser user agent, screen resolution, timezone, language settings, hardware information (CPU cores, device memory, touch capability), and device identifiers on mobile platforms. This data is used to detect and prevent multi-account abuse in accordance with our Terms of Service.
- **Payment data (via processors):** If you make a purchase, payment details are handled by processors (e.g., Stripe, Google Play Billing). We receive purchase metadata (e.g., product, amount, timestamps, and your user ID) to fulfill entitlements but do not store full card data.

### 2. How We Use Data
- To provide and operate the Service (save/load progress, apply daily limits, enable features like dungeons/raids/tower).
- To maintain security and integrity of accounts, including detecting and preventing cheating or exploitation.
- To monitor gameplay patterns and analyze game balance through activity logs.
- To fix bugs and improve stability.

### 3. Sharing
- We do not sell your data.
- Data is stored and processed via third-party infrastructure needed to run the Service (e.g., Firebase Authentication and Firestore/Cloud Functions, Google Sheets for activity logging). Those providers may process limited metadata as part of their services; see their policies for details.
- Payment processing is handled by Stripe and/or platform billing (e.g., Google Play). Those processors receive payment method details and transaction metadata to complete purchases; see their privacy notices for more information.

### 4. Data Retention
- We retain gameplay data for as long as your account is active. If you request deletion of your account, associated gameplay data will be removed, subject to any technical or legal retention requirements.
- Activity logs may be retained for analytics and anti-cheat purposes. Logs may be periodically archived or anonymized.

### 5. Security
- We use reasonable technical measures (such as Firebase Auth and Firestore security rules) to protect stored data, but no system is perfectly secure.

### 6. Your Choices
- You can stop using the Service at any time. If you want your account and related gameplay data deleted, contact support using your in-game account identifier or the email tied to your login method.

### 7. Children
- Do not use the Service where prohibited by applicable law. If you are a parent or guardian and believe a minor has used the Service without consent, contact us to request removal of their data.

### 8. Changes to This Policy
- We may update this Privacy Policy periodically. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

### 9. Contact
- For privacy questions or deletion requests, contact us at `markhorvath20@icloud.com` or via the Discord server (invite link in the app); you can DM Discord user ID `883834059850129429`.