Privacy Policy — Idle Nebula Drift

Effective date: June 26, 2026 Last updated: June 26, 2026

Idle Nebula Drift ("the Game," "we," "us," "our") is published by PaintedChaos. This policy explains what data the Game processes, why, and the choices you have. By playing, you agree to this policy.

If you have questions, contact us at dev.anchorapp@gmail.com.

TL;DR

• You play with no sign-in. The Game automatically creates an anonymous account (a random ID, no personal info) so your progress can be backed up to the cloud and you can appear on the leaderboard under a screen name you choose.
• Adding an email + password is optional — it only lets you recover your account on a new device. You never have to.
• The Game shows opt-in rewarded ads (Google AdMob) — you only ever see an ad if you choose to watch one for a reward. Ads may use an advertising identifier.
• The Game offers optional in-app purchases (via Apple/Google). Payment details are handled by the stores, not by us.
• You can delete your account and all its data any time from in-game Settings.
• The Game is not directed to children under 13.

1. Data we process

a) Game progress and your account

Your game save is stored locally on your device and, so it isn't lost, backed up to our cloud (hosted on Supabase). To do this the Game automatically creates an anonymous account identified by a random ID — it contains no name, email, or other personal information unless you choose to add one. We store your game progress and a screen name you set (which is shown publicly on the leaderboard) linked to that ID.

We read your device's local clock to run the in-game day/night cycle — this happens on-device only and is not collected, transmitted, or used to determine your location.

a2) Optional account email (account recovery)

You may optionally add an email address and password in Settings so you can recover your account on another device. We store your email only if you choose to add it; it is used solely for account login/recovery, never for marketing. You can play, save to the cloud, and appear on the leaderboard without ever providing an email.

a3) Leaderboard (public)

If you appear on the weekly leaderboard, the screen name you chose and your score are visible to other players. Choose a screen name that doesn't reveal personal information. Players can report objectionable names; we may reset a reported name.

b) Advertising

The Game shows opt-in rewarded ads through Google AdMob — you choose to watch an ad for a reward; no ads are forced or shown automatically. Ads may use advertising identifiers and similar technologies. Where required (EEA, UK, and similar regions) we present a consent prompt before any personalized ads, and on iOS we request App Tracking Transparency (ATT) permission before any tracking that uses the device advertising identifier. You can decline; you may then see non-personalized ads. Google processes ad data under its own policies — see "Third-party services" below.

c) Purchases

In-app purchases are processed by the Apple App Store or Google Play and managed through RevenueCat. We receive records of which products/entitlements you bought (to grant them and restore purchases) but we do not receive or store your payment card or billing details — those stay with the app store.

d) Analytics & crash reports (only if enabled in your build)

Some builds may include PostHog (pseudonymous usage events such as starting a run or completing tutorial steps) and/or Sentry (crash and error diagnostics: device model, OS version, stack traces) to help us fix bugs and improve the Game. If the version you installed does not have these enabled, no such data is collected. We do not use this data to identify you personally.

2. Why we process data (purposes)

• Provide core gameplay and save your progress on your device.
• Show opt-in ads to support a free-to-play game.
• Operate, grant, and restore in-app purchases.
• Diagnose crashes and improve stability, balance, and features (where analytics/crash reporting is enabled).

Legal bases (where GDPR applies): performance of a contract (gameplay, purchases), consent (personalized ads, optional analytics where required), and legitimate interests (security and product improvement).

3. Third-party services

We share data only as needed with the providers that run the Game. Each has its own privacy policy:

• Supabase — backend hosting for your anonymous account, cloud save, optional account email, and the leaderboard.
• Google AdMob (Google) — advertising. See Google's privacy policy and "How Google uses information from sites or apps that use our services."
• RevenueCat — purchase/entitlement management.
• Apple App Store / Google Play — app distribution and payment processing.
• PostHog — product analytics (only if enabled in the installed build).
• Sentry — crash/error reporting (only if enabled in the installed build).

We do not sell your personal information.

4. Data retention

• Local save: remains on your device until you clear it or uninstall the Game.
• Account, cloud save, leaderboard: kept until you delete your account in-game (which removes your account, cloud save, leaderboard entries, and any reports), or until removed for inactivity/abuse.
• Advertising data: processed by Google/AdMob per their retention policies.
• Analytics/crash data (if enabled): retained per the provider's defaults for the period needed to improve the Game.

5. Your choices and rights

• Play without giving personal info — your anonymous account holds no name or email unless you choose to add one for recovery.
• Delete your account and data — Settings → Account → Delete account removes your account, cloud save, leaderboard entries, and reports. (You can also uninstall to remove the local save from your device.)
• Set or change your screen name — Settings → Account.
• Ads/tracking — manage consent via the in-app prompt and your device's privacy/ad settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Privacy → Ads, where you can reset or delete your advertising ID).

Depending on where you live (e.g., EEA/UK GDPR, California CCPA/CPRA), you may have rights to access, correct, delete, or port your data and to object to or restrict certain processing. You can delete your account and its data directly in-app; for requests about data held by our providers, contact dev.anchorapp@gmail.com.

6. Children

The Game is not directed to children under 13, and we do not knowingly collect personal information from them. Our age rating, ad-content settings, and data-safety declarations are set for a teen/adult audience. If you believe a child has provided us personal information, contact dev.anchorapp@gmail.com and we will address it.

7. Security

We use reasonable technical measures and rely on the security controls of our providers (Supabase, Google, Apple, RevenueCat) to protect data. Access to your cloud save and account is restricted to your own account. No method of transmission or storage is completely secure.

8. International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

9. Future features

A future version may add optional sign-in methods (such as Sign in with Apple or Google) for account recovery. If and when those launch they are opt-in, and we will update this policy to describe the additional data they involve before they go live.

10. Changes to this policy

We may update this policy as the Game evolves. We will update the "Last updated" date and, for material changes, provide notice in-app or at our store listing.

11. Contact

PaintedChaos dev.anchorapp@gmail.com

Governing law: Ontario, Canada.