Kosmic Dungeon Privacy Policy

Who we are

Crypto Dungeon LLC (“Crypto Dungeon,” “we,” “us”) operates Kosmic Dungeon.

The short version

• Your Apple or Google account email (and optional profile name), to create and sign you into your account. Required to play with a saved account; Apple's private relay email works fine.
• A device ID (random, generated per device), to keep your save safe, stop duplicate-save exploits, and merge progress across your devices. Automatic, and applies even to guest play.
• Purchase records (via Apple, Google, and our payment processor RevenueCat), to verify and deliver what you bought. Only applies if you buy something; we never see your card number.
• Your gameplay data (heroes, progress, guild membership, quests). This is the game — it's how your save works and syncs to the cloud. Required to play.
• Chat messages (world, guild, direct), so chat works and so we can review reports of abuse. You choose whether to chat; you can report or block other players.
• Gameplay and error events (for example: a battle finished, a shop opened, an error message), recorded on our own servers so we can fix bugs and improve the game. No third-party analytics service receives them.

We do NOT collect your precise location, contacts, photos, an advertising ID, or any data for ad targeting. We run no third-party analytics or tracking SDKs and we don't show ads. This isn't a compliance checkbox — we just don't build that into the app.

1. Information we collect

Account identity. When you sign in, we receive your email address from Apple Sign In or Google Sign In, and optionally a display name you provide. If you use “Hide My Email” through Apple, we only ever see the private relay address — that's fine, it works the same way for account purposes.

Device ID. Every device that runs Kosmic Dungeon — including guest sessions with no signed-in account — generates a random device identifier. This is not your Apple/Google advertising ID; it's a Kosmic Dungeon–specific value. We use it to protect save integrity (detect tampering or duplicate saves) and to merge your progress correctly when you play on more than one device.

Purchases. If you make an in-app purchase, Apple or Google acts as the merchant of record and processes your payment — we never receive or store your card details. We use RevenueCat as our purchase-verification processor to confirm a purchase is legitimate and deliver it to your account. What we store is the record of what you bought and when, tied to your account.

Gameplay data. Your heroes, progress, quest state, and guild membership are stored on our servers so your save works and syncs across devices (“cloud save”). This is core to how the game functions.

Chat messages. World chat, guild chat, and direct messages are stored on our servers to deliver the chat feature and to support moderation. If a message is reported, we retain a snapshot of it for review. Players can report or block other players in-app.

Gameplay and error events. The game records what happens during play (screens reached, battles fought, purchases started, errors and load times) on our own servers, tied to your account or device ID. We use it only to find bugs and improve the game; it is never sold or sent to an analytics or advertising company.

What we don't collect. We do not collect precise device location, your contacts or photo library, an advertising identifier, or data from any third-party analytics or ad SDK — because none are integrated into the app. We don't run ads in Kosmic Dungeon.

2. How we use this information

• Create, secure, and authenticate your account
• Save and sync your gameplay progress
• Verify and deliver purchases
• Operate chat and moderate abuse reports
• Protect the game's economy and prevent cheating (device ID checks)
• Provide customer support when you contact us

We do not use your information for advertising, and we do not build advertising or marketing profiles from it.

3. Who we share information with

We share information only where it's necessary to run the game:

• Apple / Google — as the platforms you sign in and pay through, and as merchant of record for purchases
• RevenueCat — our purchase-verification processor, to confirm and reconcile purchases
• Server infrastructure providers — who host our game servers and databases, under standard hosting agreements

We do not sell your data. We do not share it with advertisers or data brokers, because we don't have any advertising relationships to share it with.

4. The web version (play.dungeongames.io)

The web version of Kosmic Dungeon collects the same categories of data described above. The web version also offers optional on-chain features tied to a connected crypto wallet, for players who choose to use them. If you connect a wallet, we process the public wallet address you provide to complete that feature — we do not collect private keys, and using the web version's core game features does not require connecting a wallet.

5. Data retention and deletion

We keep your account and gameplay data for as long as your account is active, so your progress is there when you come back. You can delete your account at any time from Settings → Delete Account in the app, which removes your account from our servers. If you play as a guest (no account), you can clear your local save data by uninstalling the app or clearing app data on your device.

Reported chat messages are kept as a moderation record for review purposes even after the reported message would otherwise be deleted, so we can act on abuse reports fairly.

6. Security

We use industry-standard transport encryption (HTTPS/TLS) to protect data in transit between the app and our servers. No system is 100% secure, and we can't guarantee absolute security — but we take reasonable, standard steps to protect your information.

7. Children's privacy

Kosmic Dungeon is not directed at children, and we do not knowingly collect personal information from children in a manner inconsistent with applicable law.

8. Your rights (GDPR / CCPA)

Depending on where you live, you may have rights to access, correct, delete, or export the personal information we hold about you, or to object to certain processing. As a small, indie team, we don't have a dedicated Data Protection Officer or automated self-service portal — instead, email us at the address below and we'll respond to and honor legitimate requests directly.

9. Changes to this policy

If we change this policy in a material way, we'll update the “Last updated” date above. Continued use of Kosmic Dungeon after a change means you accept the updated policy.

10. Contact us

Questions about this policy or your data? Email us at admin@dungeongames.io.

Crypto Dungeon LLC — Dubuque, Iowa, USA.