Privacy Policy
Effective Date: August 26, 2026 • Last Updated: August 26, 2026
1. Introduction & Overview
Welcome to Idle Reaper ("we," "our," or "us"), operated by Techtronic Games, located at Flat 22, Building 35G, Road 31, Block 931, Bahrain. We are committed to protecting your privacy and ensuring you have a positive, transparent experience while playing our cross-platform idle MMORPG.
This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and informs You about Your privacy rights and how applicable laws (including GDPR, CCPA/CPRA, and Google Play Developer Policies) protect You.
By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
2. Interpretation & Definitions
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
- Account: A unique account created for You to access our Service or parts of our Service.
- Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement): Refers to Techtronic Games, Flat 22, Building 35G, Road 31, Block 931, Bahrain.
- Country: Refers to the Kingdom of Bahrain.
- Application / Service: Refers to Idle Reaper, the software game client (mobile, web, desktop) and server infrastructure provided by the Company.
- Device: Any electronic device that can access the Service, such as a computer, mobile smartphone, or digital tablet.
- Personal Data: Any information that relates to an identified or identifiable individual.
- Usage Data: Data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, server latency or session duration).
- You: The individual accessing or using the Service, or the company or legal entity on behalf of which such individual is accessing or using the Service.
3. Information We Collect
We only collect data necessary to provide a persistent, secure, and authoritative multiplayer gaming experience. The categories of data collected include:
A. Account & Authentication Data
When you create an account or sign in, we collect your email address, chosen username, unique player public ID, and a cryptographically salted password hash (using bcrypt; we never store plain-text passwords). If you authenticate using third-party single sign-on (such as Google Play Games / Google Sign-In, Apple ID, Steam, or Discord), we receive unique OAuth provider tokens and identifier strings solely to authenticate your account.
B. Gameplay & Progress Telemetry
To ensure state persistence across devices, our authoritative game server logs your in-game activity, including character stats, level, inventory items, skill tree masteries, equipment sockets, market trades, guild affiliations, combat logs, and achievement records.
C. Device & Diagnostics Data
We collect technical information including your operating system version, device model, client build version, IP address, connection latency, and crash stack traces. This data is used solely for server-client synchronization, diagnosing errors, and preventing unauthorized exploits.
D. In-App Purchases & Virtual Currency
When purchasing in-game virtual currency (such as Divine Tokens) or premium items, all transactions are processed exclusively through Google Play In-App Billing or relevant platform payment processors. We do not collect, process, or store your credit card or financial billing details. We only receive purchase tokens, Order IDs, and validation receipts to credit items to your account and maintain an audited transaction ledger.
4. How We Use Your Information
- Gameplay Persistence: Authoritatively syncing game state, skill timers, and inventory in real time across mobile and web platforms.
- Authentication & Security: Verifying user identity, protecting account access, and preventing session hijacking.
- Anti-Cheat & Fair Play: Detecting unauthorized automation (bots), speedhacks, memory tampering, or protocol exploits to protect the game's economy.
- Transactional Accounting: Auditing virtual currency balances and fulfilling purchased in-game items.
- Customer Support: Responding to player inquiries, bug reports, and account recovery requests.
- Service Diagnostics: Identifying crash anomalies and maintaining server infrastructure stability.
5. Third-Party Services & Data Sharing
We do not sell, rent, or monetize your personal data. We only share data with essential third-party service providers bound by strict confidentiality and security requirements:
- Google Play Services & Billing: For secure authentication and in-app purchase validation on Android devices.
- Cloud & Database Infrastructure: Dedicated hosting providers (PostgreSQL, Redis) utilizing encrypted storage and private networking.
- Discord Integration (Optional): If you choose to link your Discord account for community rewards and profile sync.
- Legal & Regulatory Authorities: We may disclose information if required by law, subpoena, or to protect the vital rights and security of our users.
6. Data Security & Storage
We implement industry-standard administrative, physical, and technical safeguards:
- All network communication between your client and our servers is strictly encrypted using TLS 1.3 / HTTPS and secure WebSockets (WSS).
- Passwords are stored using salted one-way bcrypt cryptographic algorithms.
- Database access is locked down behind zero-trust firewalls with strict role-based access controls.
7. Children's Online Privacy (COPPA & GDPR-K)
Idle Reaper is designed for a general audience and is not directed to children under the age of 13 (or under 16 for residents of the European Economic Area). We do not knowingly collect or solicit personal information from children under these ages.
If we discover that personal data from a child under the minimum age has been collected without verifiable parental consent, we will promptly delete that information from our servers. Parents or guardians who believe their child has provided us with personal information may contact us at [email protected].
8. Data Retention & Deletion Rights
We retain your personal information only for as long as your account remains active or as needed to provide you with Game services.
Under GDPR, CCPA, and Google Play Data Safety policies, you have the right to request the permanent deletion of your account and associated personal data at any time:
- In-App Deletion: You can permanently delete your account directly inside the Game by navigating to Settings → Danger Zone → GDPR / Account Deletion.
- Web & Email Requests: You can visit our Account & Data Deletion Portal or email us at [email protected].
Upon confirmed deletion, all PII, emails, passwords, OAuth mappings, and character progress are permanently erased. Anonymized transaction records may be retained strictly as mandated by applicable tax and accounting laws.
9. Your Rights (GDPR & CCPA/CPRA)
Depending on your jurisdiction, you have the right to:
- Access & Portability: Request a copy of the personal data we hold about you.
- Rectification: Correct inaccurate or incomplete personal information.
- Erasure (Right to be Forgotten): Request the permanent deletion of your personal data.
- Restriction or Objection: Restrict or object to the processing of your data.
To exercise any of these rights, please contact our data protection team at [email protected].
10. Contact Information & Legal Entity
If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at: