Reckoner - privacy policy

Effective 17 October 2026 · Wersja polska

Reckoner is an online idle RPG operated by Wojciech Włodarczyk, Jaśminowa 4B, 98-100 Łask, Poland (NIP 8311643425) - the data controller (“we”). Contact for every privacy matter: support@reckonermobile.com. This page explains what data the game stores, why, who processes it and what rights you have. There are no ads, no trackers and no data is ever sold. This policy is also available in Polish.

What we collect

Account data. An account identifier, and - if you register or claim your account - your e-mail address and a password. The password is stored only as a salted cryptographic hash (argon2id), never in plain text. An account without an e-mail is anonymous and tied to your device. We also record which version of the terms was accepted on the account and when.
Device data. A per-device session token (stored hashed), the device platform, your time zone offset (so that notifications arrive at a sensible local hour), basic screen measurements (window width and height in CSS pixels, pixel density and your system text scale, plus the interface scale the game computes from them), and a push delivery token (Firebase Cloud Messaging registration token, or a Web Push endpoint in a browser). On Android the game registers for notifications when it starts - Android 13 and newer asks you first; which notifications you get is up to you in Settings. The screen measurements tell us which screen sizes the game actually has to fit; they are not a device fingerprint. We do not store your device model or operating system version in our database (but see server logs and RevenueCat below).
Game data. Your characters and their progress (saves, levels, skills, items, gold and gems, purchases made inside the game), expedition history, guild membership, guild chat messages, World Chat messages (the most recent 100) and when you last had World Chat open, friend lists, private messages between friends (the last 50 of each conversation), market offers, ranking statistics and the referral code you share.
Polls. Your answers to the in-game polls you choose to fill in, including any text you type, with your account and character.
Purchase data. When you buy something in the App Store or Google Play, we receive - through RevenueCat, see below - the store's transaction identifier, the product, the price, currency and store country, the date, and whether the purchase was later refunded. We never receive your name, card or payment details.
Shop activity. Which shop screens you open inside the game (for example the Vault or a Premium offer), when you start or finish a purchase, apply a voucher or receive the free Premium trial - with the time and your account identifier. It tells us whether the shop is clear and working; it is not used for advertising and not shared.
First minutes in the game. When you create your first character: that the screen opened, that you started typing a name (never the name itself), whether you changed the class, what happened when you tapped Create, and how long the screen was open if you left the app there; and for the first two hours after that character: that you started the training hunt and your first hunts (with their length and whether notifications are allowed), how long you kept a hunt report open, and which screen you were on when you left the app and when you came back - with the time, your platform and your account identifier. It tells us where new players get stuck; it is not used for advertising and not shared.
Reports. Bug reports you send (with technical context of the app: its version, platform and the screen you were on), player reports filed through the moderation system, and moderation cases opened by the chat filter (the flagged message, the character and account that wrote it, the account's e-mail, the chat it was written in, the IP address and time it was sent from, the identification string the app sent, and up to 30 most recent messages of that conversation, including those of the other people in it). A report about a World Chat message includes a copy of the reported player's last 20 World Chat messages.
Server logs. Standard technical logs (IP address, request path, time and the identification string your app or browser sends - on Android it names the device model and system version) kept short-term for security and abuse prevention.
Messages to support. When you write to support@reckonermobile.com, we receive your e-mail address and whatever you write.

Why we collect it

To run the game: keep your progress, sync it across your devices, and power multiplayer features (rankings, guilds, friends, market). Legal basis: performance of a contract.
To send notifications about your own game - expedition alerts, rewards for your bug reports, dungeon invitations from friends and, for Premium, the daily chest reminder. Legal basis: performance of a contract; you can turn each of them off in Settings.
To send the weekend news (which monster gives bonus experience this weekend) - only if you turn it on in Settings. Legal basis: your consent, which you can withdraw at any time with the same switch.
To book what you bought and to honour refunds. Legal basis: performance of a contract and our legal obligations (accounting).
To keep the game safe: moderation, abuse prevention, debugging. Legal basis: legitimate interest.
To protect players - many of them young - from sexual exploitation, terrorism, violence and hate, by automatically checking chat messages, including private ones, and keeping the evidence of flagged messages (see below). Legal basis: legitimate interest; when we pass a message to the authorities, the vital interests of the person at risk and our legal obligations.
To make the interface fit the screen it runs on - the screen measurements above tell us which sizes to design for. Legal basis: legitimate interest.
To see whether the in-game shop is clear and working, from the shop activity above. Legal basis: legitimate interest.
To see where new players get stuck when they start, from the first minutes in the game above. Legal basis: legitimate interest.
To run the monthly Gems ladder for accounts that join it. Legal basis: performance of a contract - the ladder is off until you turn it on in Settings → Game, and turning it off removes your account from the ladder at once.
To learn what players think of the game from the polls they choose to answer. Legal basis: legitimate interest.
To answer messages to support and to handle complaints, appeals and privacy requests. Legal basis: performance of a contract, our legal obligations and legitimate interest.

We make no decisions based solely on automated processing that have legal or similarly significant effects on you, and we do not profile you for advertising. Some checks are automatic: the server refuses game results its rules do not allow (and keeps a record of such refusals for 60 days to spot cheating), and the game refuses names and private messages that break its rules and links in World Chat. A chat filter checks every message in World Chat, guild chat, guild announcements, private messages and Descent party chat: a message that clearly concerns the sexual abuse of children, terrorism, real-world violence or threats, or extreme hate is not sent, and every message it flags - also one it lets through, such as a message about self-harm - goes to a person in our moderation team together with the character and account that wrote it, the IP address it was sent from and the most recent messages of that conversation. The filter also flags attempts to move a conversation out of the game or into the real world. When players on several different accounts report your World Chat messages within a short time, your account is muted in World Chat for a short time and your recent messages there are hidden until a moderator looks at the case; you can still read it and play. Sanctions such as suspensions are always decided by a person.

Where it lives and who sees it

Game servers, the database and its backups are hosted in the European Union (Hetzner).
Push notifications on Android are delivered through Google Firebase Cloud Messaging: Google receives your push token and the content of each notification (with your character's identifier), for that purpose only.
RevenueCat, Inc. (USA) verifies purchases with the app stores on our behalf. Its software starts with the store versions of the game, so it receives your account identifier, the purchase data listed above and the technical data the app sends with each request: device model, operating system version, language, store country, app version, IP address and, on iOS, the identifier the device assigns to our apps.
Resend, Inc. (USA) sends our e-mails: account e-mails to you (verification, password reset) - it receives your e-mail address and their content - and short internal notices to us about new bug reports and player reports, with their content but without your e-mail address.
Cloudflare, Inc. (USA) runs our domain's DNS and forwards e-mails sent to support@reckonermobile.com to our e-mail service, which stores them; both handle the sender's address and the message.
Microsoft Ireland Operations Ltd (Azure Translator) translates chat messages when a player taps Translate under a message in guild chat, World Chat, a private conversation or a Descent party chat: it receives the text of that one message (without the author's name or identifier) and the target language, processes them in its data centres in Europe and does not store the text. We keep the translation only briefly in our server's memory, and save the language you choose for translations on your account. A message you write can be translated this way when someone who can see it asks for it.
Each of these providers works only on our instructions, under a data processing agreement. Transfers to the United States rest on the European Commission's standard contractual clauses included in those agreements, or on the EU-US Data Privacy Framework where the provider is certified.
Apple and Google, as the app stores, process the payment itself under their own privacy policies, as independent controllers.
Your character's name, level, class, outfit, guild and ranking stats are public in the game's rankings, which can be read without an account; your guild sees the guild chat messages you write, and every player sees the World Chat messages you write, with your character's name, level, class, outfit and guild tag. Nobody else sees your e-mail address. If you turn on the Gems ladder, the Gems your account spent in the current and the previous month are public in the same way. Friends also see what your character is doing right now (hunting, in a dungeon, in a fight).
We do not sell data. We share it only with the providers listed above, and with public authorities when the law obliges us to.
If a message flagged by the chat filter or reported by a player suggests that a child is in danger or that someone's life or safety is at risk, we may pass that message and the account details we hold to the police or other competent authorities.

How long we keep it

Account and game data: until you delete your account. An account with no e-mail attached is deleted automatically after 365 days in which no device of yours signed in - such an account can only be reached from the device that made it, so after a year of silence nobody can return to it.
Backups: daily database backups are kept for 14 days, so deleted data can stay in backups for up to 14 days before it is gone everywhere. If the backup system ever stops working, its last good copies are kept until it works again.
Private messages: only the last 50 of each conversation are stored. When either side removes or blocks the other, or deletes their character or account, the conversation disappears from the game at once, and a copy of those messages is kept for 30 days solely for handling player reports, then deleted; a copy attached to a player report stays with that report.
World Chat: only the most recent 100 messages are stored; older ones are deleted as new ones arrive, and your messages are deleted at once with your character or account. When you last had World Chat open is deleted after 12 hours without opening it. A copy attached to a player report stays with that report.
Polls: until you delete your account.
Shop activity: 180 days.
First minutes in the game: 180 days.
Records of refused game results: 60 days.
Bug reports, player reports and cases opened by the chat filter: up to 2 years after the case is closed; a bug report with a reward you have not claimed yet stays until you claim it.
Codes we e-mail you (verification, password reset): 30 days after they expire.
Server logs: overwritten by rotation and never kept longer than a few weeks.
Messages to support: as long as needed to handle your matter and any claim connected with it.

What stays after you delete your account:

records of store purchases and of what Gems bought - product, price, currency, store country, date, the store's transaction identifier and the former identifier of your account or character, with no name, e-mail or payment details - for as long as a refund or a re-sent receipt is possible and our accounting requires, so that nothing is booked twice;
RevenueCat's own customer record under your former account identifier, for RevenueCat's retention period; we no longer have an account it could point to;
bug reports and moderation cases, without any link to your account (a report about you keeps the character name it was about), for up to 2 years after the case is closed; a case opened by the chat filter keeps its evidence (the account identifier, e-mail, IP address and time, and the copied messages) for the same time, so that it can still be passed to the authorities;
shop activity and first-minutes records, without your account identifier, until their 180 days run out;
if another player used your referral code, or you used theirs, the record of that link, which keeps the character name and level the other player saw, so that their referral list still adds up; it holds no e-mail or account identifier;
guild war records, which keep the identifiers of the accounts that fought in a war.

Your rights

You have the right to access your data and get a copy of it, to have it corrected, deleted or its processing restricted, to receive the data you gave us in a portable form, to object to processing based on legitimate interest, and to withdraw a consent at any time (for the weekend news: the same switch in Settings) without affecting what was done before. Most of this you can do yourself: your e-mail and password in Settings → Account, deletion in Settings → Account → Delete account or at reckonermobile.com/delete-account. For anything else write to support@reckonermobile.com; we answer within one month. You can also lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with the authority in the country where you live.

Deleting your account

You can delete your account and all its data at any time:

in the game: Settings → Account → Delete account, or
on the web: reckonermobile.com/delete-account.

Deletion is immediate and irreversible: characters, progress, the items and Premium you bought, friends and offers are removed, and your e-mail address is freed. What we keep after deletion is listed under “How long we keep it”.

Children

Reckoner is for players aged 13 and over. It is not directed at children under 13 and does not knowingly collect data from them; if you learn that a child under 13 has an account, write to us and we will delete it.

Changes and contact

If this policy changes, the new version will be published at this address with a new effective date. Questions and privacy requests: support@reckonermobile.com. The rules of the game itself are in the terms of service.

Previous versions: 16 October 2026 · 1 October 2026 · 24 September 2026 · 23 September 2026 · 21 September 2026