Privacy Policy

This policy explains what personal data DBO Idle collects, why, and what choices you have. We collect as little as we need to run the game safely.

What we collect

• Account data: email address, a display name, a hashed password (if you sign up with email), and, if you use Google sign-in, your Google account id, name and profile picture URL.
• Game data: characters, levels, items, balances, market activity, chat messages and settings.
• Payment data: Solana wallet addresses and transaction signatures involved in your deposits and withdrawals, and the amounts. Blockchain transactions are public by nature.
• Security data: IP address and browser user agent of your sessions, timestamps, and records of moderation and admin actions.

We do not collect payment card data, government ids or precise location. We do not sell personal data.

Why we use it

• To create and secure your account, keep you signed in and prevent abuse (legal basis: performance of a contract, legitimate interest in security).
• To run the game, process purchases and withdrawals and keep an accurate ledger (contract, legal obligations).
• To moderate chat and enforce the Rules (legitimate interest).
• To send service emails such as email confirmation, password resets and withdrawal updates. We do not send marketing email without consent.

Cookies

We use strictly necessary cookies only: a session cookie that keeps you signed in and security cookies used during sign-in. We do not use advertising or cross-site tracking cookies.

Sharing

We share data only with service providers that help us run the Service, under appropriate agreements: hosting, email delivery, Solana RPC providers (which see the public addresses and transactions we query) and Google when you choose Google sign-in. We may disclose data when required by law or to protect players and the Service.

Retention

Account and game data are kept while your account exists. Financial records (deposits, withdrawals, ledger) and moderation logs may be kept for up to 5 years for accounting, fraud-prevention and legal reasons, even after account deletion. Chat messages are kept for up to 12 months.

Your rights

Depending on where you live (for example under the GDPR or Brazil's LGPD) you can ask to access, correct, export or delete your data, object to some processing, or withdraw consent. Email [email protected] from the address on your account. You can also complain to your local data protection authority.

Security

Passwords are hashed, sessions are protected with secure cookies, all game logic runs on our servers, and staff actions are logged. No system is perfectly secure; tell us about any vulnerability at [email protected].

Children

The Service is not directed at children under 13, and minors must not make purchases. If you believe a child has given us personal data, contact us and we will delete it.

Changes

We will post updates here and notify you in game for material changes.

Template provided for the project; have it reviewed by a privacy professional for your jurisdictions.