Privacy Notice

1. Who we are

Idle Crawler is operated by Henrik Hansen, who acts as the data controller for the personal data processed in connection with the game. This means Henrik Hansen determines how and why your personal data is used.

2. Data we collect

• Account data — email address, login credentials, and your chosen character name, used to create and secure your account.
• Game data — your character progress, items, purchases of digital goods, and gameplay activity, used to provide the game and deliver what you buy.
• Support data — messages you send through the in-game feedback and bug-report features, used to respond to you and improve the game.
• Usage and device data — IP address, device and browser identifiers, and basic telemetry, used for security, fraud prevention, and product improvement.

3. Purposes and legal basis

We process personal data to:

• Create and manage your account and provide the game (performance of a contract).
• Deliver digital goods you purchase and keep related records (performance of a contract and legal obligations).
• Keep the Service secure and prevent fraud and cheating (legitimate interests).
• Improve and develop the game based on aggregated usage (legitimate interests).
• Respond to support requests (legitimate interests).
• Meet legal, tax, and accounting obligations (legal obligation).

Payment card and billing details are collected and processed directly by our Merchant of Record, Paddle; we never see or store your full card details.

4. Who we share data with

• Service providers — hosting, database, and authentication providers that process data on our behalf.
• Paddle (Merchant of Record) — for the sale of our products, subscription and order management, payments, tax compliance, and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to do so by law.

5. International transfers

Some of our service providers process data outside the EU/EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses approved by the European Commission.

6. Retention

We keep your personal data for as long as your account is active and as needed to provide the Service. Order and transaction records are kept as required by tax and accounting law. When data is no longer needed, it is deleted or anonymised.

7. Your rights

Under the GDPR you have the right to access, rectify, or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your supervisory authority (in Sweden: Integritetsskyddsmyndigheten, IMY). We respond to requests within one month. To exercise your rights, contact us through the in-game feedback button.

8. Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit and access controls limiting who can access personal data.

9. Cookies

The Service uses essential cookies and local storage only — to keep you signed in and to remember your game session. We do not use analytics or marketing cookies, so no cookie consent banner is required. You can clear these through your browser settings, but signing in will no longer persist.