Epic Idle RPG Privacy Policy
This policy explains in plain language what data Epic Idle RPG collects, why, how long we keep it and what your rights are. It covers the test version on every platform: the app from Google Play (Android), from App Store / TestFlight (iOS) (app identifier com.voidknightparadox.epicidlerpg) and the browser version of the game.
Who is responsible for your data
The data controller is Void Knight Paradox (Jakub Dobrzeniecki, an individual publishing the game under this name), Poland.
For anything about personal data, write to privacy@voidknightparadox.com. For everything else: support@voidknightparadox.com.
What data we process
| Data | Source | Why | Legal basis (GDPR) | How long |
|---|---|---|---|---|
| A random guest identifier. The key stays on your device; the server keeps only its cryptographic hash | Created by the game on first launch | Saving your progress without an account | Art. 6(1)(b) (providing the game) | For as long as the account exists |
| Your Google or Facebook account identifier and your e-mail address, if the provider shares it | Sign-in with Google or Facebook, when you choose it. In the test version this sign-in is turned off | Recognising you and moving your progress to another device | Art. 6(1)(b) | For as long as the account exists |
| Nickname, game progress (heroes, items, currencies, maps), settings, friends, guild, ranking position | Created by you while playing | Running the game | Art. 6(1)(b) | For as long as the game account exists |
| Chat messages. Other players can see them, and the server masks profanity before saving | Written by you in the game | Chat between players | Art. 6(1)(b) | General chat: no time limit, deleted on your request. Guild chat: the server keeps the last 7 days |
| Pseudonymous gameplay events (details below) | Sent automatically by the game | Game balance, development and diagnostics | Art. 6(1)(f) (our legitimate interest: a working, well balanced game) | 365 days, then deleted automatically; deleting your game account removes them at once |
| Crash reports: device model and OS, game version, error trace, time, game account identifier | Automatically, only when a technical error occurs (Sentry) | Fixing bugs | Art. 6(1)(f) | Up to 90 days |
| Security log: event type (e.g. a failed sign-in), account identifier and cryptographic hashes of the IP address and device, never the address itself | Recorded by the game server | Protecting accounts from abuse | Art. 6(1)(f) | 90 days, audit entries 365 days |
| Tester reports: report code, player ID, message text, screenshots and recordings | Sent by you voluntarily | Finding and fixing bugs | Art. 6(1)(f) | until the end of the test and for 30 days afterwards |
| The e-mail address of your Google account (Google Play tester list) or your Apple ID (TestFlight) | Given by you when we invite you to the test | Giving you access to the test version | Art. 6(1)(b) | Until the end of the test, then we delete the list |
| E-mails you send us | Written by you | Replying and handling your requests | Art. 6(1)(f), and Art. 6(1)(c) for GDPR requests | As long as needed to deal with the matter |
Gameplay events
Under a pseudonym and without your name, e-mail or nickname, the game records: when and how long you play (sessions), which screens you visit, how battles go, tutorial steps, reward claims, shop visits and purchases with test currency, in-game currency spending, items you get and upgrade, level-ups, settings changes (e.g. language), error codes and network loss. It also records the game version, device model and OS, screen size, language and a random installation identifier. The pseudonym is a hash of the account identifier that cannot be linked back to the account without the server's secret key.
What we do not collect
Gameplay events never include: e-mail, nickname, Google identifier, name, phone number, address, IP address, chat text, error message text or stack traces. The game does not collect location, contacts or data from other apps, does not use the camera or microphone, does not read the hardware identifier and shows no ads. We do not sell data.
Reports, screenshots and recordings
When you report a problem, you send us the report code from the error window or your player ID from Settings → Account → Report a problem, a description and often a screenshot or recording. A screenshot or recording can show more than you intend: your nickname, chat messages with other players' nicknames, phone notifications, the time, battery level or carrier name. Before sending, cover or crop anything you do not want us to see.
A report goes wherever you send it: to the conversation in which you received the invitation (it then also passes through that messaging provider) or to our e-mail address (a Google Workspace mailbox). Reports are viewed by the person running the test, solely to find and fix the bug. We may use the AI assistant Claude (Anthropic) to analyse a bug; it then sees the report text and the screenshot. We never publish reports, screenshots or recordings.
We keep them until the end of the test and for 30 days afterwards, then delete them. You can ask us to delete them earlier at any time at privacy@voidknightparadox.com. How to take and send a screenshot is explained in the test rules.
Friends and family test
During the test the game records, under a pseudonym and without your name, e-mail or nickname, when and how long you play, which screens you visit, how battles and maps go, which errors occur, and your phone model and game version, solely to improve and balance the game. The test version has no separate consent switch for these events; by accepting the test rules you acknowledge them. Before the public release the game will get a switch in its settings.
If you join through Google Play, your Google account address is added to the tester list in Google Play Console. If you join through TestFlight, your Apple ID address is added to the tester list in App Store Connect. Both lists are used only to give you access to the test, and we delete them when the test ends.
Session recordings in test builds
In Friends & Family (F&F) and staging test builds, we use Sentry Session Replay to reproduce errors and understand where the game causes difficulty. A recording includes interactions, screens visited, technical data and game canvas images, at up to two frames per second. Page text and form inputs are masked; network request and response bodies are not recorded. Page masking does not cover text drawn inside the game: player nicknames and chat messages may be visible in the images. A recording may be linked to your game account ID, without attaching your e-mail or Google identifier. Recordings are used only to improve the game and are not published. Sentry retains them according to our plan, for up to 90 days (the exact period must be confirmed before approving this text). Session Replay is disabled in production builds; developers may enable it locally for diagnostics.
Who we share data with
- Hetzner Online GmbH (European Union): game server and database.
- Cloudflare, Inc.: domain name service and protection of the connection to the game server. On every connection the game server and Cloudflare see your IP address, as any server on the internet does.
- Functional Software, Inc. (Sentry): crash reports, processed in the European Union data region (Germany). The game does not attach your IP address or cookies to a report; how Sentry handles the connection address is described in its privacy policy.
- Google: app distribution in Google Play and the tester list, Google sign-in (when turned on), our Google Workspace mail.
- Apple: app distribution in the App Store and TestFlight, the tester list.
- Meta Platforms Ireland Ltd.: only for Facebook sign-in (when turned on).
- Anthropic: when we use the AI assistant Claude to analyse a report (reports).
- RevenueCat: only once we launch real purchases. Today it receives no data (purchases).
Google, Apple and Meta also process data as independent controllers under their own privacy policies. We share data with no one else unless the law requires it.
Transfers outside the EEA
Some providers (Google, Apple, Meta, Cloudflare, Sentry, Anthropic) are based or have servers outside the European Economic Area. Such transfers rely on the mechanism the provider uses under the GDPR: a European Commission adequacy decision or standard contractual clauses.
Deleting your account
In the game, open Settings → Account → Delete account. Deletion is irreversible. It immediately removes: your game account with its progress, heroes and items, your ranking entries, your reward history and your gameplay events.
After deletion the server still holds: the basic sign-in record (sign-in type and the hash of the guest key or the provider identifier), messages you sent in chat, guild membership and entries on other players' friend lists, the security log until its retention ends, and crash reports until the Sentry retention ends. If you want us to delete these too, write to privacy@voidknightparadox.com with your player ID. We will do it within 30 days. Database backups expire with their rotation cycle.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on our legitimate interest. Write to privacy@voidknightparadox.com; we will reply within one month. You may also lodge a complaint with a supervisory authority, in Poland the President of the Personal Data Protection Office (uodo.gov.pl).
Purchases
The test version has no payments. A "test purchase" of diamonds charges nothing, and the test currency has no value. Before we launch real purchases, we will update this policy.
Children
The game and the test are for people aged 16 or older. We do not knowingly collect data from younger people. If you believe a child has given us data, write to privacy@voidknightparadox.com and we will delete it.
Changes to this policy
Every version has a number and a date in the footer. New versions are published at the same address, and when they change, the game shows the "Before you play" window on the next launch and asks you to accept again.