FolkIdle Privacy Policy
Last updated 10 September 2026
FolkIdle is an idle role-playing game. This page says exactly what the game stores about you, why, and how to get rid of it. It describes what the software actually does rather than what it is permitted to do.
What is stored
| What | Why | When it is collected |
|---|---|---|
| Email address | Signing in, and resetting a forgotten password | Only if you create a full account. Guest accounts have none. |
| Password, hashed | Signing in | Only if you create a full account. Stored as a PBKDF2-SHA256 hash at 210,000 iterations. The password itself is never stored. |
| A device identifier | Letting a guest account survive a browser restart without a password | Generated by your own device on first use. It identifies the install, not you. |
| Display name | Leaderboards, guilds, chat, the market | When you choose one. Other players can see it. |
| Your game progress | It is the game | Continuously, because the simulation runs on the server. |
| Chat and mail you send | Delivering it, and moderation | When you send it. |
| Support tickets | Answering them | When you send one. |
| Purchase records | Granting what you bought, refusing a receipt twice, and handling refunds | When you buy something. We store the store's transaction identifier and the product; we never see your card. |
| A push notification token | Sending the notifications you asked for | Only if you turn notifications on, in Settings, on a phone. Turning them off in your device settings stops it being used. |
| Your IP address | Rate-limiting sign-in attempts, so somebody cannot guess passwords indefinitely | At each sign-in attempt. It is used for counting and is not stored alongside your account. |
| Gameplay timing data | Detecting automation, so that people who do not cheat are not competing with people who do | While you play. |
What is not collected
- No advertising identifiers, and no advertising.
- No third-party analytics or tracking SDKs.
- No location data.
- No contacts, photos, microphone or camera.
- Your payment details never reach us; Google and Apple handle them.
Who it is shared with
Nobody, except the services that are needed to run the game: the database host, the notification service that delivers a push message to your phone, and the app store that processes a purchase. Your data is not sold, and it is not shared for advertising.
Other players see what you would expect them to see: your display name, your standing on a leaderboard, your guild membership, and anything you type into chat.
How long it is kept
For as long as the account exists. Delete the account and it goes - see below.
Deleting your account
In the game: Settings, then the last section, "Support · About · Delete account". You will be asked to type a confirmation phrase, because it cannot be undone.
Without the game: see the account deletion page.
Deletion removes your account record, your characters, your village, any market listings you had open, and your registered notification devices. Purchase records are kept where tax and refund law requires it, with the account they belonged to already removed.
Children
FolkIdle is not directed at children under 13, and we do not knowingly collect anything from them. If you believe a child has created an account, use the contact address below and it will be removed.
Your rights
If you are in the UK or the EU, you have the right to access a copy of your data, to correct it, to have it deleted, and to object to how it is used. Deletion is available in the app immediately; for anything else, write to the address below.
Contact
folkidle.support@gmail.com
Changes
If this policy changes in a way that affects what is collected, the date at the top changes and the game will say so on your next sign-in.