Idle Subduer Privacy Policy

Effective date: 5 November 2026

1. Who is responsible for your data

The controller of personal data in the game Idle Subduer (the "game") and on its website idlesubduer.swistai.com is Piotr Świst AI Solutions (Tax ID / NIP 8252216904, REGON 545373182), address: Ks. Kard. Stefana Wyszyńskiego 42/18, 21-400 Łuków, Poland, e-mail: piotr@swistai.com ("we", "us"). Please write to this address about anything related to privacy.

2. Summary

The game does not require an account and does not ask for your name, e-mail or other contact details.
Your game progress is saved on your phone and, if you sign in to Google Play Games, also as a copy on your Google account (section 3.4). We do not send it to our servers and we cannot access it.
Ads are served by Google (AdMob). The game shows only rewarded ads that you start yourself. In the European Economic Area, the United Kingdom and Switzerland the game asks for your consent before the first ad; you can change your choice at any time in the game Settings.
Analytics and crash reports (Google Firebase) help us see where the game is too hard and what breaks. In the EEA, the UK and Switzerland analytics only runs after you consent (section 3.5).
Payments are handled by Google Play. We do not see your card or payment account details.
We do not sell data.

3. What data and why

3.1 Data stored on your device

The game stores on your phone: game progress (character level, items, resources, the time you last played, used to calculate offline progress), settings (language, sound, vibration, notifications) and which packs you bought. This data never leaves the device, except for the cloud copy in section 3.4, and is not available to us. You can delete it by uninstalling the game or clearing its data in your phone settings. Purchases can then be restored with the "Restore purchases" button (section 3.3).

3.2 Ads (Google AdMob)

The game shows only rewarded ads that you start yourself (e.g. "WATCH AD: +1 CHEST"). There are no banners and no full-screen ads between fights. Ads are provided by Google Ireland Limited through AdMob. To show an ad, measure it and prevent fraud, Google may process, among other things: the device advertising ID and other device identifiers, IP address (which indicates approximate location), device and operating system information, information about your interactions with ads and diagnostic data.

Legal basis: your consent (Art. 6(1)(a) GDPR) for personalised ads and for storing and accessing information on your device; where consent is not required, our legitimate interest in funding a free game with ads (Art. 6(1)(f) GDPR).
Consent: in the EEA, the UK and Switzerland we ask for it through Google's consent form (a certified consent management platform). Without consent you may receive non-personalised or limited ads. You can change or withdraw consent in the game: Settings → AD PRIVACY. Withdrawing consent does not affect processing carried out before.
"No Ads" pack: after purchase the game shows no ads and grants ad rewards instantly.
You can reset or delete your advertising ID in Android settings (Privacy → Ads).
Details: policies.google.com/technologies/partner-sites and policies.google.com/privacy

3.3 In-game purchases (Google Play)

Payments for packs ("No Ads", "Longer Offline") are processed by Google Play under your agreement with Google. We only receive a purchase confirmation from Google (product ID, order ID and status) to grant the pack and allow restoring it. We do not receive card or payment account details.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations such as tax and complaint handling (Art. 6(1)(c) GDPR).
Google Play privacy policy: policies.google.com/privacy

If you sign in to Google Play Games (the game may sign you in automatically if you use Play Games on your phone), the game stores a copy of your progress (the same save as on your phone: progress, items, resources, game settings) in Google Play Games Saved Games on your Google account, so you can load it after reinstalling or on a new phone. Google provides the game with your Play Games player ID and basic profile data (e.g. player name). The copy is stored by Google; we have no access to it outside the game on your device.

Legal basis: performance of a contract, i.e. providing the backup feature you choose to use (Art. 6(1)(b) GDPR).
You can sign out and delete game data in the Google Play Games app (Play Games account settings).
Google Play Games privacy policy: policies.google.com/privacy

3.5 Analytics and crash reports (Google Firebase)

We use Google Analytics for Firebase and Firebase Crashlytics (Google Ireland Limited) to learn on which levels and bosses players get stuck, which game features are used and what causes crashes.

Analytics processes: the app instance ID (a random identifier of the game installation, not linked to your name or e-mail), in-game events (e.g. level cleared, character level-up, quest claimed, first use of a feature, screens opened, ad reward, pack purchased or restored, return after a break), game performance measurements (smoothness, start-up time, memory use), device model, operating system and game version, language, country (derived from the IP address) and time spent in the game. Legal basis: your consent (Art. 6(1)(a) GDPR). In the EEA, the UK and Switzerland collection is off until you agree in the consent form (the same one as for ads); you can change this in Settings → AD PRIVACY.
Crash reports process: crash information (the error trace in the game code), device model, operating system and game version, device state at the time of the crash (e.g. free memory, screen orientation) and a Crashlytics installation ID. Legal basis: our legitimate interest in fixing bugs and keeping the game stable (Art. 6(1)(f) GDPR). Crash reports contain no contact details.
Details: firebase.google.com/support/privacy

3.6 Notifications

With your permission (Android system prompt) the game schedules notifications on your phone, e.g. when free chests are full. They are scheduled locally on the device without sending any data. You can turn them off in the game or phone settings.

3.7 Contacting us

If you write to us, we process your e-mail address and message to reply (Art. 6(1)(f) GDPR: legitimate interest in answering enquiries) for as long as needed to handle the matter, no longer than 12 months after it is closed. Messages about complaints are kept as long as the law requires.

3.8 The game website

The website idlesubduer.swistai.com uses no cookies, no analytics and no external fonts or scripts. It is hosted by Netlify, Inc., which records in server logs the IP address, time of the visit, the page address and browser information on every visit, to deliver the site and protect it from attacks (Art. 6(1)(f) GDPR: our legitimate interest in running the site securely).

4. Who receives data

The data described in sections 3.2–3.5 is processed by Google Ireland Limited and Google LLC as independent controllers or as our processors, under Google's terms.
The data described in section 3.8 is processed by Netlify, Inc. as our processor.

Google and Netlify may transfer data outside the European Economic Area, including to the USA, based on the European Commission's decision on the EU–US Data Privacy Framework or standard contractual clauses. We do not share data with anyone else.

5. How long

Data on the device: until you uninstall the game or clear its data.
Google Play Games cloud copy: until you delete it in the Google Play Games app.
Analytics (Firebase): data linked to the app instance ID for 14 months.
Crash reports (Crashlytics): 90 days.
Other data processed by Google: according to Google's retention rules (policies.google.com/technologies/retention).
Website server logs (Netlify): according to Netlify's rules, usually no longer than 30 days.
Purchase confirmations: for the period required by tax and accounting law.

6. Your rights

You have the right to access, rectify and erase your data, restrict processing, data portability, object to processing based on legitimate interest, and withdraw consent at any time (Settings → AD PRIVACY). As the game has no accounts and we do not know who you are, you can delete most data yourself (uninstall the game, reset the advertising ID, delete data in Google Play Games). For data processed by Google you can also use Google's tools (myaccount.google.com).

You have the right to lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or the supervisory authority in your country of residence.

7. Children

The game is intended for people aged 16 and over and is not directed at children. We do not knowingly collect children's data. If you believe a child has provided us with data, contact us and we will delete it.

8. Security

Game data stays on your device in a folder accessible only to the game. Connections to Google services and to the game website are encrypted.

9. Changes

We may update this policy, e.g. when new features are added to the game. The new version will be published at the same address with a new effective date; we will inform you about significant changes in the game.