Privacy Policy

Last updated: June 4, 2026

Crystal Idle is operated by an independent developer ("we", "us", "our"). This Privacy Policy explains what data we collect when you use Crystal Idle at crystalidle.com, how we use it, and what rights you have.

1. Data Controller

Crystal Idle is operated by an individual developer. For all privacy-related requests, contact us at support@crystalidle.com.

2. What We Collect

We collect only what is necessary to run the game:

• Account data - username and hashed password. We do not collect your real name or email address.
• Game data - progress, inventory, skills, combat history, and other in-game state.
• Chat messages - messages sent in global, guild, party, and private message channels, stored to provide in-game chat history.
• Technical data - IP address, browser type, and device type, recorded automatically in server logs.
• Analytics data - session timestamps and in-game events, collected via Yandex.Metrica (see Section 5).

We do not collect real names, email addresses, phone numbers, or payment card details. We have no way to contact you by email and do not send any emails.

Publicly Visible Information

The following information about you is visible to other players:

• Your display nickname - shown in chat, market listings, leaderboards, party lists, and guild rosters.
• Guild membership and rank.
• Skill levels and leaderboard rankings.
• Items you have listed on the market.
• Messages you send in global chat (visible to all players); messages in guild chat are visible to guild members only.
• Your referral leaderboard ranking (if you appear in the top 50).

The following is not visible to other players: your account login username, IP address, password, and the content of your private messages (visible only to you and the recipient).

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we process your data on the following legal bases:

• Contract performance - account data and game data are processed to provide the service you signed up for.
• Legitimate interests - technical data and security logs are processed to protect the integrity of the service and prevent abuse.
• Consent - analytics data is collected only where your browser or device settings permit cookies from third-party analytics tools. You may withdraw consent by blocking those cookies.

4. How We Use Your Data

• To operate and maintain your game account and progress.
• To improve gameplay, balance, and features based on aggregate usage patterns.
• To prevent cheating, abuse, and unauthorized access.
• To respond to your support requests.

We do not sell your personal data to third parties. We do not use your data for advertising profiling.

5. Third-Party Services

• Yandex.Metrica - web analytics. Yandex may set cookies and collect visit data subject to their own privacy policy: yandex.com/legal/privacy.
• Google Fonts - typefaces loaded from Google's CDN. Google may log your IP address when fonts are served.

When paid features are available, purchases are processed by a third-party payment provider. The payment provider handles all transaction and card data directly under their own privacy policy; we do not receive or store full card numbers, CVV codes, or other sensitive payment credentials. We receive only a transaction confirmation and the amount paid.

6. Cookies and Network Requests

We use a first-party session cookie to keep you logged in. Yandex.Metrica may set its own cookies for analytics purposes. Google Fonts loads typeface files from Google's servers - this is a network request, not a cookie, but Google may log your IP address as part of serving those files. You can block or delete cookies in your browser settings; doing so will log you out and may affect analytics but will not otherwise break the game.

7. Data Storage and Security

Game data is stored on servers operated by our hosting provider. Passwords are stored as salted hashes - never in plain text. All connections to the game use HTTPS encryption. We apply reasonable technical and organisational measures to protect your data. No transmission or storage method is 100% secure; we cannot guarantee absolute security.

8. Data Retention

Account and game data are retained for as long as your account is active. Server logs (including IP addresses) are typically retained for up to 90 days for security purposes, though our hosting provider's own retention policies may apply. Chat messages are retained for the lifetime of your account and are removed when we process your account deletion request. Anonymised and aggregated statistics (such as aggregate gameplay patterns containing no personally identifiable information) may be retained indefinitely. To permanently delete your account and all associated data, contact us at support@crystalidle.com.

9. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access - request a copy of the data we hold about you.
• Correction - ask us to correct inaccurate data.
• Deletion - ask us to delete your account and personal data.
• Objection / restriction - object to or ask us to restrict certain processing.
• Portability - request your data in a machine-readable format (where applicable under GDPR).

To exercise any of these rights, email us at support@crystalidle.com. We aim to respond within 30 days.

10. Children's Privacy

Crystal Idle is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.

11. International Data Transfers

Your data may be processed on servers located outside your country of residence. By using the game you acknowledge this.

12. Links to Other Sites

Our game may contain links to external websites or services not operated by us. If you click a third-party link, you will be directed to that site. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the game after the updated Policy is posted constitutes your acceptance of the changes.