Alenir Idle - Privacy & Data Safety Policy

1. Who We Are and What This Policy Covers

Alenir Studio ("we") operates Alenir Idle on the web (aleniridle.com) and as an Android app (package com.alenir.idle). This policy covers the game, our game servers, the in-game community features and the website.

2. Offline-First Play and Local Storage

Alenir Idle is designed as an offline-capable RPG. By default, your character progress, inventory, settings and game state are stored on your own device using Web Storage (localStorage, key alenir_idle_save). Exporting a save creates a local .aid file or Base64 string under your control. You can play the whole game without an account or an internet connection.

3. Optional Google Sign-In and Cloud Sync (Astral Vault)

Cloud sync is optional. When you sign in with Google, Firebase Authentication processes your Google User ID, email address and display name to authenticate you and link your Astral Vault. We do not use these identifiers for advertising or profiling.

Cloud saves and the records that make them work are stored on our own game servers (a database run by us at a third-party hosting provider), not in a Google database. They include:

• your cloud save (the progress, inventory and settings of your hero) and your Astral Vault ID;
• a link record that ties your Google account to your vault, with the vault passkey stored only in encrypted form, and the hero name you claimed;
• a random pseudonymous installation identifier, used only for account safety, spam prevention and multi-account abuse detection. It is never used for advertising and is never shared with third parties. Clearing local storage creates a new one.

Backups of our database are encrypted and kept on separate storage.

4. Online Features and Community Content

If you use online features (Hall of Fame leaderboards, World Boss raids, chat channels, the Astral Tavern forum, Unions and Union chat, player trading, the Marketplace and the Auction House), the following is stored on our servers and shown to other players where the feature requires it: your hero name, title, level, class, combat power, messages, forum posts and replies, votes, listings, offers and bids.

• Items you share in chat or put up for trade are sent to our servers so that other players can see them and so that duplicated or tampered gear can be detected.
• We keep a ledger of trades and auctions for fairness, support and dispute handling.
• Staff may review, hide or remove messages and posts, and players can report content. Do not share real names, contact details or other personal information in chat.
• Your email address and real-world identity are never shown to other players.

5. Fair Play and Security Checks

To keep the game fair, our servers run automated checks on cloud saves (for example, whether progress is consistent with play time, and signs of tampering).

• We keep short-term save history metrics (progress totals, play time and timing) for 60 days to detect cheating and bugs.
• A one-way hashed form of your IP address is kept for about one day to limit mass creation of new vaults.
• A flagged save is reviewed by staff and can limit leaderboard entries or cloud sync until reviewed. Moderation records (warnings, mutes, bans, notices and staff notes) are kept to enforce the rules.
• Our servers and hosting providers may process IP addresses and request data in technical logs for security and reliability.

6. Purchases (Google Play Billing)

Ascendant Passes and Supporter Packs are bought through Google Play Billing. Google processes the payment; we never receive your card or payment details. Our server verifies each purchase with Google Play and stores the purchase token and product identifier with your vault, to unlock what you bought, prevent one purchase from unlocking several vaults, and handle refunds. A purchase made in the Android app can unlock the same benefits in the web version for your linked vault.

7. Bug Reports and Community Bounties

When you submit a bug report, your hero name, hero level, Astral Vault ID, game version, platform (web or Android), the active page and your report text are sent to our servers to help us fix the problem and to reward Aetherium Crystals. Full save files and personal device identifiers are never sent with bug reports. Reports and the related reward records are kept for issue tracking, reward verification and game stability.

8. Android App Services

• Google AdMob (rewarded ads, optional): when you choose to watch an ad, the Google Mobile Ads SDK may process pseudonymous advertising identifiers, coarse IP location and ad interaction data under the Google Privacy Policy. There are no forced banner or auto-playing ads, and the web version loads no advertising scripts. You can change your consent choices in Settings.
• Firebase Analytics: the Android app may send usage statistics and diagnostics (such as app opens, device model and an app instance identifier) to Google to help us understand stability and usage.
• Google Play Games Services: if you use Play Games features, achievements and leaderboard scores for your Play Games account are shared with Google Play Games Services.

9. Who We Share Data With

We do not sell your personal data. We share data only with:

• service providers that work for us: Google (Firebase Authentication and Hosting, Google Play Billing, Play Games, AdMob and Analytics) and the hosting and backup providers of our game servers;
• other players, but only the public community data described in section 4;
• authorities or other parties when the law requires it, or to protect the safety and rights of players and the game.

10. How Long We Keep Data

• Local data stays on your device until you erase it.
• Cloud records stay while your vault and hero exist, and until deleted at your request.
• Save history metrics are kept for 60 days and hashed IP records for about one day.
• Trade ledger and moderation records may be kept longer where needed for fairness, fraud and abuse prevention.
• Deleted data may remain in encrypted backups for a limited time until the backups rotate out.

11. Security

Our connections use HTTPS, vault passkeys are stored encrypted, backups are encrypted and access to our systems is limited to authorised staff. No system is perfectly secure. If a data breach affects you, we will notify affected players and the competent authorities as required by applicable law.

12. International Transfers

Our servers and the providers named above may be in different countries from you, and Google and other providers process data in other countries. By using online features you understand that your data may be transferred and processed outside your country, and we choose providers that apply the protections required by law.

13. Your Choices and Rights

• Local data: erase your progress with "Reset Game" in Settings, or by clearing app storage.
• Google account: sign out or unlink your Google account at any time in Settings.
• Advertising consent: change your choices in Settings (Android).
• Access, correction and deletion: email primaybr@gmail.com to ask which data we hold about your vault, to correct it, or to delete your cloud vault, link record, leaderboard entries, bug reports and community posts (we delete or anonymise them). We respond within 30 days.

We may keep the minimum records needed to meet legal duties, prevent ban evasion and fraud, and keep trade records consistent. Depending on where you live (for example Indonesia, the European Union or the United Kingdom), you may have further rights under your local data protection law, and we will honour them as required.

14. Children's Privacy

Alenir Idle is not directed to children under 13 and we do not knowingly collect personal data from them. If the law where you live sets a higher age for using online services, accounts or chat, you need the permission of a parent or guardian. If you believe a child has given us personal data without permission, contact us and we will delete it promptly.

15. Changes to This Policy

When we change this policy, we update the date above and, for material changes, mention it in the in-game changelog.

16. Contact

Questions or requests about this policy or your data: email developer support at primaybr@gmail.com.