The short version
- We don't sell your data and we don't run advertising profiles on you. In the game, our own server counts gameplay milestones (no names, no chat) so we can see where new players get stuck, and Tenjin tells us which ad or store page brought you to the game (on iOS, only if you allow tracking). Our website counts visits with cookieless PostHog analytics. Only if you arrive from one of our Reddit ads and say yes, the website also loads Reddit's ad-measurement pixel.
- You can play as a guest with no email or password, or link Sign in with Apple / Google to keep your progress safe.
- We store your characters, items, and account info on our host (Railway) so your progress works across sessions and devices.
- Purchases are handled by Apple, Google, and RevenueCat. We never see your card details.
- Optional rewarded video ads (Google AdMob) are the only ads in the game, and you choose to watch them.
- You can delete your account at any time in the app, on our website, or by email, and we'll erase your data. See Delete your account.
01Who we are
Lumenfall is a free-to-play 2D side-scrolling action MMORPG for iPhone, iPad and Android phones and tablets. It's made and run by Ogen Technology (based in Israel), which is the "we," "us," and "our" in this policy. If you have a question about this policy or your data, our privacy contact is [email protected].
02What we collect
We only collect what we need to run the game, keep it fair, and support you. Here's the full list:
| Data | Why we use it | Kept for |
|---|---|---|
| Account ID, creation time, ban status | Identify your account and enforce the rules | While the account exists |
| Linked sign-in identity (Apple/Google provider ID, the email the provider shares, a display name if Apple provides one, link date) | Let you sign in, recover your account, and play on more than one device | Until you unlink or delete your account |
| Apple refresh token (Apple sign-ins only) | Solely so we can revoke Sign in with Apple when you delete your account | Until account deletion |
| Session tokens and an optional device label (e.g. "iPhone") | Keep you signed in and let you sign out of a specific device or everywhere | Until you sign out or delete your account |
| Characters, inventory, quests, and progress | Save your game so it's there next time you play | While the account exists |
| Account wallet (Lumens, Starshards), season pass progress, guild membership | Track your currencies, rewards, and social features | While the account exists |
| Market and trade listings, sales history, rankings/PvP boards | Run the player marketplace and leaderboards | See §7: trade history may continue anonymously after deletion |
| Purchase records (store transaction/receipt IDs, what was granted) | Deliver purchases, prevent fraud/replay, handle support and refunds | Up to 7 years, as required for tax, accounting, and fraud prevention |
| Chat messages, whispers, party/guild notes | Let you talk to other players; moderators review recent chat to enforce the rules | A rolling window; see §7 |
| Age confirmation (that you confirmed you're 13 or older when you first joined, and when) | Keep the game for players 13 and older, and show that we asked | While the account exists |
| Push notification tokens, your notification choices, time zone and language | Send only the notifications you turned on, never at night where you are (News & offers stays off unless you turn it on) | Until you sign out on that device, turn notifications off, or delete your account |
| Mutes and bans | Enforce our community standards | While the account exists |
| IP address | Rate limiting, abuse prevention, anti-cheat anomaly detection | Rolls over within our log retention window |
| Server logs (errors, sign-in events tied to an account ID) | Fix bugs and investigate security incidents | Rolls over within 30 days |
| Gameplay analytics (milestones such as level-ups, quests, purchases and ads watched; session length; device model, OS version and frame rate), tied to your account and character IDs only | See where new players get stuck, how often players come back, and which phones run the game badly | 180 days |
| Movement and combat validation data | Server-side anti-cheat, so play stays fair for everyone | Processed transiently for validation |
We do not collect your real name, phone number, home address, or contacts, and we don't access your location, camera, microphone, or photos. Apart from Tenjin install attribution (see §5), the game has no third-party analytics SDKs. Fonts on our website are self-hosted, and the website sets no cookies of its own. It remembers only your answer to the ad-measurement question (below), if you were asked, and keeps the Discord online count for a few minutes in your browser's session storage. To understand how people find us, the website counts visits with PostHog analytics (hosted in the EU): the page you viewed, the site that sent you there, your browser, device type and approximate country, and whether you tapped a download or Discord button. It records no names, no form contents and no session recordings, treats every page load as a new anonymous visitor, and is switched off if your browser sends Do Not Track. Reddit ads, only with your yes: if you arrive from one of our ads on Reddit, the website asks whether Reddit may count your visit. Only if you choose Allow, it loads the Reddit Pixel. The pixel sets Reddit's cookies and tells Reddit that you visited and whether you tapped a download or Discord button, so we can see which ads bring players. If you choose No thanks or ignore the question, nothing is loaded. You can change your answer any time with Ad measurement at the bottom of every page; saying no also deletes Reddit's cookies from our site. Discord: to show how many players are online in our community, your browser asks Discord's public API for the count, so Discord sees your IP address. The other outside service on the website is on the account deletion page: if you use it, it opens Apple's or Google's own sign-in window, which follows their privacy policies.
03Accounts and guests
You can play Lumenfall in two ways:
- Guest: we create an account on our server identified only by a random session token stored on your device. There's no email or password. If you lose your device or clear its app data without linking a sign-in method first, we have no way to recover that account. There's no identity for us to verify it against.
- Signed in: you can link Sign in with Apple and/or Sign in with Google to your account (you can link both). This lets you play on multiple devices and recover your progress if you get a new phone.
04How we use your data
We use the data above to: run and save your game; process purchases and grant what you paid for; keep chat, trading, and guilds working; detect and stop cheating, botting, and abuse; moderate chat and enforce bans; respond to support and privacy requests; and keep the service secure and reliable. We do not build advertising profiles of you ourselves, and we do not sell your personal data to anyone.
06Our legal bases (GDPR)
If you're in the EU, UK, or a similar jurisdiction, we rely on these legal bases to process your data:
- Contract: processing needed to provide the game you asked to play.
- Legitimate interests: security, anti-cheat, fraud prevention, and moderation.
- Consent: personalised advertising and install attribution where required (App Tracking Transparency on iOS; Google's consent form in the EEA, UK and Switzerland), News & offers notifications, and Reddit ad measurement on our website.
- Legal obligation: keeping transaction records for tax, accounting, and fraud prevention.
Under CCPA/CPRA (California), we don't sell your personal information and we don't share it for cross-context behavioural advertising ourselves, except Reddit ad measurement on our website, which only runs if you opt in; AdMob's ad personalisation and Tenjin attribution can be limited in your device settings as described in §5.
07How long we keep data
We keep your account and game data for as long as your account exists. When you delete your account (see §8), we immediately delete your characters, wallet, linked identities, sessions, and sign-ins, and revoke your Apple sign-in token. A few things are kept longer, for reasons required by law or fairness to other players:
- Completed marketplace sales history is kept as an anonymous record (no longer linked to you), because other players' trade history depends on it.
- Purchase and transaction records are kept for up to 7 years for tax, accounting, fraud prevention, and refund handling, as required by law.
- Server logs roll over within 30 days, and backups are purged within 30 days.
- Inactive guest accounts (never linked to Apple/Google) may be removed after 24 months of inactivity.
08Deleting your account and data
You can request deletion of your account and personal data at any time, in whichever way is easiest for you:
- In-app: go to Menu›Settings›Account›Manage›Delete account (also reachable from the Account button on the character-select screen).
- On our website: visit https://lumenfallgame.com/delete-account/ and sign in with Apple or Google to confirm it's your account.
- By email: write to [email protected] from an address we can use to verify you, and we'll process the deletion.
Deletion is immediate for your characters, wallet, linked identities, sessions, and sign-ins, and we revoke Apple's sign-in token so it can no longer be used against your account. As explained in §7, anonymous trade history and legally-required purchase records are the only things that may outlive the deletion.
09Your rights
Wherever you live, you can ask us to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your data (see §8).
- Export a copy of your data (portability). Email us and we'll send it to you.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
To exercise any of these, email [email protected]. We aim to respond within 30 days. If you're in the EU/UK, you also have the right to lodge a complaint with your local data protection supervisory authority.
10International transfers
Our servers and processors, including our hosting provider Railway, may process data in the United States or other countries outside your own. Where required, we rely on appropriate safeguards such as standard contractual clauses for these transfers.
11Security
We use encryption in transit (TLS), random and revocable session tokens, restricted access to production data, and audited admin actions. No method of transmission or storage is 100% secure, but we work to protect your data appropriately.
12Children's privacy
Lumenfall is not directed at children under 13. When you first join, you tick a box to confirm that you are 13 or older (and agree to our Terms and this policy); no account is created without it. We do not knowingly collect personal data from children under 13, or under the minimum age required in their country (for example, 16 in parts of the EU without parental consent). If we learn that we've collected personal data from a child in violation of this policy, we'll delete it. Parents or guardians who believe we may have a child's data can contact us at [email protected].
13Changes to this policy
If we make material changes to this policy, we'll update the "last updated" date above and notify players in-game. We encourage you to review this page from time to time.