Privacy Policy

Idle Planet Defender game & player portal · Effective August 27, 2026

At a glance. We do not sell your personal data. We never store your password in readable form or your full payment-card details, and we store only a one-way hash of your IP address. The only ads in the game are rewarded ads you choose to watch, served by Google AdMob — there are no banners and no forced full-screen ads. Where the law requires it we ask for your advertising choices first, and you can change them at any time from Settings ▸ Advanced ▸ Ad Privacy in the game. We do measure how far players get — which wave a run reached, how long it lasted, whether the tutorial was finished — so we can fix what frustrates people and advertise to players who will actually enjoy the game; that measurement never reads your advertising identifier or your device identifier. You can download or delete your data at any time from the player portal.

1. Who we are

Sugomi Apps, a sole trader operated by Mert Burak Dervişoğlu ("we", "us") is the data controller for personal data processed through the mobile game Idle Planet Defender (package com.idleplanetdefender.game, Android and iOS) and through the player portal at idleplanetdefender.sugomiapps.com (together, the "Services"). You can reach us at [email protected].

This policy explains what we collect, why, how long we keep it and what rights you have. By using the Services you confirm that you have read it. Where a section applies only to one platform (Android or iOS) or only to the website, we say so.

2. What we collect

Category	What it includes	Why
Device & player identifiers	A player handle generated by the game, a persistent device identifier (Android SSAID / iOS Keychain UUID), platform, app version and approximate country	To keep your progress attached to your device, and to enforce bans
Account data	Display name; if you create an account: your email address and a one-way bcrypthash of your password (never the password itself); if you use Google Sign-In or Sign in with Apple: that provider's account identifier, the email address it shares with us (with Sign in with Apple this can be a private relay address that forwards to your inbox) and the name on that account, which becomes your display name until you choose your own. For Sign in with Apple we also keep a token Apple issues, used only to revoke the app's access when you delete your account	To create and authenticate your account across devices
Game progress	Saved progress, currencies, best wave, event scores, daily login history	Cloud save, leaderboards, events and daily rewards
Purchase records	Product, store order identifier, price, currency, date and the store receipt, plus what a purchase entitles you to (for example an ad-free entitlement or a 30-day pack window). Payment is handled by Google Play / Apple — we never receive your card details	To deliver and verify purchases with the store, restore them on a new device, prevent fraud and meet tax/accounting duties
Support data	Tickets and messages you send us, and our replies	To answer your support requests
Technical & security data	A one-way hash of your IP address (we do not store the raw IP), sign-in timestamps, and anti-cheat / ban records	Security, fraud and cheat prevention, and enforcing our Terms
Push token	A Firebase Cloud Messaging token and the Firebase installation identifier that belongs to it — only if you allow notifications when your device asks. Turning notifications off in your device settings stops them	To send the notifications you asked for
Crash & diagnostics data	Sent by Firebase Crashlytics (Google) when the game crashes or hits an error: the error and its stack trace, your device model, operating system, graphics chip and memory, the app version and build, and a Firebase installation identifier. We attach the game context we need to reproduce the fault — your player handle, the wave, tier and world you were on, and what the game was doing at the time. It is sent when something goes wrong, not while you play normally	To find and fix crashes and errors that we cannot reproduce on our own devices
Gameplay analytics	Sent by Google Analytics for Firebasewhile you play: which wave and tier a run started and ended on, how long it lasted and whether it ended in defeat or because you left, a one-time marker the first time you clear wave 10, whether you began or skipped the tutorial, and Google's own standard app events (first open, session start, screens viewed, time engaged, notification received). It carries a Firebase installation identifier and general device information such as your model, country and language. It does not read your advertising identifier or your Android device identifier — we switched both of those off	To see where players get stuck or stop playing, and to tell our advertising campaigns to look for people who enjoy the game rather than people who only install it
Advertising data	Processed by Google AdMob when you watch a rewarded ad: your device advertising identifier (Android Advertising ID; on iOS the IDFA only if you allow tracking), IP address and the coarse location derived from it, device and app information, and ad-interaction data (ad requests, impressions, completions, clicks). We receive only the aggregate performance reports AdMob shows us — never a per-player ad profile	To show, cap, measure and pay for the rewarded ads that keep the game free
Advertising choices	Your consent choices, stored on your device by Google's consent SDK (and, on iOS, your App Tracking Transparency answer, stored by the operating system)	To remember your choice and to serve personalized or non-personalized ads accordingly
Bot-protection data	When you use a sign-in or password form on the website, Google reCAPTCHA processes your IP address and interaction signals to score whether the request is automated	To stop automated attacks on player accounts and mass password-reset emails
Portal session data	One strictly necessary cookie that keeps you signed in on the website, plus short-lived hashed email-verification codes and password-reset tokens	To operate the player portal securely — see our Cookie Policy

What our analytics does and does not do. There is no third-party attribution SDK and no player-profiling SDK. The measurement we run is Google Analytics for Firebase, and it records the short, named list of gameplay events in the table above — progress through waves, how a run ended, whether the tutorial was finished. It is about the game, not about you: we have switched off its collection of your advertising identifier and your Android device identifier, so those are never read. Firebase Crashlytics remains a separate, fault-only channel: it wakes up when the game crashes or errors and records nothing while you play normally. The only Google components active in the app are the ones listed above: AdMob for rewarded ads, Firebase Cloud Messaging for push if you turn notifications on, Firebase Crashlytics for crash reports, Google Sign-In if you choose it, and Google Play billing. On iPhone and iPad you can also choose Sign in with Apple, and purchases are handled by the Apple App Store. We do not collect your precise location, contacts, photos, microphone or camera data.

3. Legal bases (EEA / UK)

If you are in the EEA or the UK, we rely on these bases under the GDPR / UK GDPR:

Contract (Art. 6(1)(b)) — running the game, your account, cloud save, purchases and support.
Consent (Art. 6(1)(a), and Art. 5(3) ePrivacy for storing or reading information on your device) — advertising identifiers and personalized advertising, push notifications and, on iOS, tracking through App Tracking Transparency. You can withdraw consent at any time (see §4).
Legitimate interests (Art. 6(1)(f)) — security, anti-cheat, abuse prevention (including bot protection on our sign-in forms), fraud prevention on purchases, frequency capping and measuring that ads worked, and keeping the Services stable — which includes receiving a crash report when the game fails, so we can fix the fault for everyone it affects.
Legal obligation (Art. 6(1)(c)) — keeping purchase and tax records.

4. Advertising: what we show, and your choices

Idle Planet Defender is free to play and is paid for by optional purchases and by rewarded ads. Rewarded ads are the only ad format in the game: you tap a button (for example to spin the Prize Wheel, double a run reward or claim free Gems), watch a video, and get the reward. There are no banner ads, no ads between waves and no ad you did not start yourself. Ads are served by Google AdMob, which acts as an independent controller for the ad data described in §2.

Consent in the EEA, the UK and Switzerland

Before ads are personalized, we show you a Google-certified consent message (Google's User Messaging Platform) that asks for your choice. If you decline, you will still see rewarded ads, but they are non-personalized — selected from context rather than from an advertising profile. Non-personalized ads still involve limited processing (such as frequency capping and click fraud prevention) as Google describes in its advertising privacy information.

iOS: App Tracking Transparency

On iOS, the operating system asks you separately for permission before any app may access the advertising identifier (IDFA) or track you across apps. If you say "Ask App Not to Track", we and AdMob do not access the IDFA and ads are non-personalized; measurement then relies on Apple's privacy-preserving attribution (SKAdNetwork), which does not identify you. You can change this answer at any time in iOS Settings ▸ Privacy & Security ▸ Tracking.

Changing your mind

In the game: open Settings ▸ Advanced ▸ Ad Privacy to reopen the consent message and change or withdraw your advertising consent.
On Android: Settings ▸ Google ▸ Ads lets you delete or reset your advertising ID and opt out of ad personalization.
On iOS: Settings ▸ Privacy & Security ▸ Tracking (and Apple Advertising) control tracking and personalization.
Buying Ad-Free: the Ad-Free purchase and the ad-free window included in a Command Pack mean the game stops asking you to watch ads — the bonuses that needed an ad are simply granted. Withdrawing advertising consent has the same effect on personalization as it would otherwise; buying Ad-Free is a convenience purchase, not a data-protection setting.

Withdrawing consent does not affect processing that already happened, and it does not switch off rewarded ads themselves — it switches them to non-personalized.

5. Who we share data with

We do not sell your personal data and we do not share it with data brokers. We share it only with the providers below, who process it for us or as independent controllers under their own policies, and where the law requires it (for example a valid legal request, or protecting our rights):

Google AdMob — rewarded advertising, ad measurement and invalid-traffic prevention (privacy policy). A current list of the advertising partners that may receive data when you consent is shown inside the consent message itself
Google Sign-In — optional sign-in method
Sign in with Apple — optional sign-in method on iPhone, iPad and this website (privacy policy). You decide whether Apple shares your real email address or a private relay address. When you delete your account we ask Apple to revoke the app's access to your Apple Account
Firebase Cloud Messaging (Google) — push notifications
Firebase Crashlytics (Google) — crash and error reports (Firebase privacy information)
Google Play (Android) and Apple App Store (iOS) — selling and processing in-app purchases, and giving us the receipt data we verify server-side
Resend — sending account emails (verification codes, password resets). Emails are sent only from our servers; the game itself never contacts the email provider
Google reCAPTCHA— bot protection on the website's sign-in and password forms (see our Cookie Policy)
Hetzner Online GmbH (Germany) — hosting for our game backend and player portal

6. International transfers

Our servers are located in the European Union. Some providers above (including Google and Apple) may process data outside your country, including in the United States. Where personal data leaves the EEA/UK we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision (including the EU–U.S. Data Privacy Framework where the provider is certified).

7. How long we keep data

Account and progress — for as long as your account exists. If you stop playing, you can ask us to delete it at any time.
Deleted accounts — after a 7-day grace period we permanently delete or irreversibly anonymize your profile, progress, sign-in identities, mailbox, tickets and scores. See Delete your account.
Purchase records — kept in anonymized form for up to 10 years where tax and accounting law requires it. They are no longer linked to an identifiable person.
Anti-cheat and ban records — kept in anonymized form to prevent ban evasion.
Advertising data — we do not store your advertising identifier on our servers; it is processed by Google under its own retention rules. Your consent choice stays on your device until you change it or uninstall the game.
Push tokens — until you turn notifications off, the token is replaced, or your account is deleted.
Crash and error reports — held by Google Firebase Crashlytics under its own retention rules. We do not copy them onto our servers, and we read them only to diagnose the fault.
Verification codes and reset tokens — stored as hashes and valid for 15 minutes and 1 hour respectively; they are single-use.

8. Security

We use encryption in transit (HTTPS), one-way hashing for passwords (bcrypt), verification codes, reset tokens and IP addresses, signed session tokens, rate limiting on sign-in endpoints, server-side verification of every store receipt, and strictly separated administrator and player systems. No method of transmission or storage is perfectly secure, but we work to protect your data and will notify you and the competent authority of a breach where the law requires it.

9. Your rights

Depending on where you live, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. You can exercise the main ones yourself in the player portal:

Access & portability — download a machine-readable copy of your data from Settings.
Correction — change your display name in the game, or your password in the portal.
Deletion — request account deletion inside the game (Settings ▸ Advanced ▸ Your data ▸ Delete account) or from Settings on the portal. Either way the request starts a 7-day waiting period you can cancel, and we confirm it by email where your account has one.
Advertising consent — change or withdraw it from Settings ▸ Privacy options in the game, as described in §4.

For anything else, contact [email protected]. We answer within 30 days. If you are in the EEA/UK you may also complain to your local data protection authority; in Türkiye you may apply to the Personal Data Protection Authority (KVKK) under Article 11 of Law No. 6698.

California and other U.S. states

We do not sell personal information for money. However, when you allow personalized advertising, your advertising identifier and ad-interaction data are made available to Google and its advertising partners for personalized ads — which California's CCPA/CPRA and several other state laws treat as "sharing" for cross-context behavioural advertising. You can opt out at any time, free of charge and without losing access to the game:

open Settings ▸ Advanced ▸ Ad Privacy in the game and decline personalized advertising, or
turn off ad personalization at device level (Android: Settings ▸ Google ▸ Ads; iOS: Settings ▸ Privacy & Security ▸ Tracking), or
write to [email protected] with the subject "Do Not Sell or Share My Personal Information".

Ads then become non-personalized. We do not knowingly process sensitive personal information, we do not use personal information for automated decisions producing legal effects, and we do not share the personal information of anyone we know to be under 16 for advertising. Residents of California, Colorado, Connecticut, Utah, Virginia and other states with comparable laws may exercise their access, deletion, correction and opt-out rights using the contact address above, and we will not discriminate against you for doing so.

10. Children

The Services are not directed to children under 13 (or the minimum age required in your country, such as 16 in parts of the EEA), and we do not knowingly collect their personal data. The game is rated for a teen-and-above audience and is not part of Google Play's Designed for Families programme or Apple's Kids Category. If you believe a child has provided us data, contact us and we will delete it and, where advertising is involved, ask our ad partner to do the same.

11. Changes

We may update this policy — for example when we add a platform, a payment option or an advertising choice. We will change the effective date at the top and, for significant changes, tell you in the game or by email. Continuing to use the Services after an update means you accept the revised policy.

Sugomi Apps · Mert Burak Dervişoğlu · [email protected]