Privacy Policy

Last updated: April 19, 2026

1. Who We Are

Idle Dash is operated by Daniel Bick, trading as Bytemix Studios — a sole proprietorship under German law. This privacy policy explains how we collect, use, and protect your personal data when you use the game and website at idle-dash.com.

2. Data We Collect

Account Data

When you play as a guest, we generate an anonymous guest token stored in your browser and linked to a player record on our server. When you sign in with Google, we additionally receive and store:

• Your Google account's stable unique identifier (sub)
• Your Google email address
• A display name (derived from your Google account, or chosen by you)

Game Data

• Player progress (chapter, stage, skills, stats)
• Inventory, equipment, currencies
• In-game actions needed to run the game loop

Usage Data

• Session timestamps (connect / disconnect)
• WebSocket connection metadata

Connection Data

• IP address — used for connection handling and abuse prevention. Auto-deleted after 30 days.

3. Data We Do Not Collect

We do not use any third-party analytics, tracking scripts, or advertising services. Beyond the Google sign-in data listed above, we do not collect email addresses. We do not persist chat messages, we do not share data with third parties, and we do not use fingerprinting or cross-site tracking.

4. Local Storage & Cookies

Idle Dash uses your browser's local storage, not cookies, to keep a few small items:

• Session token (JWT): authenticates you with our server so you don't have to sign in every visit.
• Audio preferences: master/music/SFX volumes and mute state.

We do not use third-party, tracking, or advertising cookies.

5. Third-Party Services

If you choose to sign in with Google, your browser communicates directly with Google's OAuth servers, which is governed by Google's Privacy Policy. We receive only the identifiers listed in Section 2.

6. How We Use Your Data

Data is used exclusively to:

• Authenticate your account and maintain your session
• Save and load your game progress
• Prevent cheating and abuse
• Monitor server health

7. Data Storage & Security

All data is stored in Germany on self-hosted servers. Connections use HTTPS/WSS. Server access is restricted. However, no system is completely secure — we cannot guarantee absolute safety.

8. Data Retention

Account and game data is retained for as long as your account exists. IP addresses are retained for 30 days, then auto-deleted. You may request deletion of your account at any time (see Section 9).

9. Your Rights (GDPR)

If you are an EU resident, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data
• Data portability
• Object to processing

Contact us via the Discord server or email (see the Imprint). We aim to respond within 30 days. On account deletion, your account is deactivated immediately and personal data removed.

10. Children's Privacy

Idle Dash is not intended for children under the age of 13. Players aged 13–16 require parental consent. Accounts found to be in violation of these requirements will be deleted.

11. Changes to This Policy

Material updates will be communicated via the game or Discord. Continued use after an update indicates acceptance.

12. Contact

Privacy inquiries should be directed to our Discord server or via email (see the Imprint).