EN
Tiếng Việt English
Get the game
HomeLegal

Privacy Policy

What Daily Forge collects, why, who can see it, and how you stay in control.

Effective 10 November 2026

In short

  • We collect only what we need to run the game, handle purchases and keep accounts safe.
  • No ads. We do not sell your data.
  • Your player name, avatar, guild, saved heroes and rankings are public in the game.
  • You can delete your account at any time, in the game or on this website.

Contact: [email protected]

1. Who is responsible

Daily Forge (“we”) decides how your data is processed in the game and on playdailyforge.com. Send any privacy question to [email protected].

This policy goes together with our Terms of Service.

2. What we collect

  • Account: your Player ID; your email if you sign up with email, or the email Apple or Google share (Apple may only share a private relay address); and the identifier that links your Apple or Google sign-in. We never receive your Apple or Google password. Email passwords are stored in hashed form by our sign-in provider, Supabase; we cannot read them.
  • Game profile: player name, avatar, frame, title, language and settings such as sound, haptics and battle speed.
  • Gameplay: your daily hands, forged and saved heroes (including names you give them), discovered skills, inventory, Gem balance and history, VIP, battle results and history, rankings, Infinite Tower and World Boss progress, in-game mail and redeemed gift codes.
  • Friends and guilds: your friends list, friend requests, guild, guild role and guild war team.
  • Purchases: store (Apple or Google), product ID, transaction ID, the receipt used for verification, purchase time and what you received. We do not receive card numbers or payment details.
  • Technical: when you were last active, and server logs (IP address, time, request type, errors) used to run and secure the Service.
  • Support: whatever you send us by email.

We do not collect your contacts, location, photos, microphone or device advertising ID.

3. Analytics and crash reports

The current version of the game does not send analytics or crash data to any third party. We plan to add Google's Firebase Analytics and Firebase Crashlytics. When we do:

  • Crashlytics sends a report when the game errors or crashes: error details, device model, operating system, game version and a random installation ID.
  • Analytics records how the game is used: screens opened, modes played, session length, approximate country, device model and a random installation ID. We only look at aggregated numbers to fix bugs and improve the game.
  • We do not use this data for advertising, and we turn off Firebase's advertising data sharing.
  • Where the law requires it (such as in the EU and UK), the game will ask before turning Analytics on.

We will update this page when these features go live.

4. How we use data

  • Create accounts, sign you in and save your progress.
  • Run battles, matchmaking, leaderboards, guilds, friends, mail and rewards.
  • Verify purchases and deliver Gems and VIP.
  • Detect cheating and abuse, and protect accounts.
  • Fix bugs, balance and improve the game.
  • Answer you when you contact us.

Where the law requires a legal basis (such as the GDPR), we rely on: performing our agreement with you (running the game and delivering what you buy); legitimate interests (security, fraud prevention, improving the game); legal obligations (keeping purchase records); and your consent (Analytics, where required).

5. What other players see

When you play, other players can see:

  • Your player name, avatar, frame and title.
  • Your guild and your role in it.
  • Heroes you have saved, with their names, skills and stats.
  • Your rankings, battle results and place on Victor's Stand.

Your email, full Player ID and sign-in details are never shown to others.

6. Sharing

We do not sell or rent personal data. We share it only with providers that help run the Service, who may use it only on our behalf:

  • Supabase: sign-in and database, hosted in Singapore.
  • Railway: game servers.
  • Cloudflare: hosting for playdailyforge.com.
  • Apple and Google: sign-in, stores and payments, under their own privacy policies.
  • Google Firebase: analytics and crash reports, once enabled.

We may disclose data when the law requires it, or when needed to protect players and the Service from fraud or attacks.

7. International transfers

Your data is stored in Singapore and may be processed in other countries where the providers above run servers, which may differ from where you live. For data leaving the EU, UK or places with similar rules, we rely on the standard contractual clauses our providers offer.

8. How long we keep data

  • Account and gameplay data: while your account is active.
  • When you delete your account: personal details are removed straight away; remaining gameplay data is anonymised (see the next section).
  • Purchase records: up to 7 years, for tax, accounting, refunds and fraud prevention.
  • Server logs: normally no more than 30 days.
  • Backups: overwritten on our providers' normal cycle, normally within 30 days.
  • Support emails: up to 2 years after the request is resolved.

9. Deleting your account

You can delete your account in the game (Profile → Settings → Account → Delete Account) or at playdailyforge.com/en/delete-account. When you do:

  • Your email, player name, avatar, frame and title are removed or reset, and the account is permanently locked.
  • You leave your guild. If you are the leader, the longest-serving member becomes leader; if you are the only member, the guild is deleted.
  • Your friends, friend requests and ranked standing are deleted.
  • Your sign-in account (email, Apple, Google) is deleted from Supabase.

Forged heroes, battle history and purchase records are kept but no longer linked to your email or name. Names you gave heroes may still appear in battles other players fought against them. Deleting your account does not cancel or refund purchases, and does not delete your Apple or Google account.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your data, to restrict or object to processing, and to withdraw consent.

You can change your name and avatar, or delete your account, in the game yourself. For anything else, email [email protected] from the address linked to your account, or include your Player ID. We reply within 30 days and may ask for more information to confirm the account is yours. Never send us your password.

You also have the right to complain to the data protection authority where you live. We do not sell personal data or share it for cross-context behavioural advertising.

11. Children

Daily Forge is for people aged 18 and over. We do not knowingly collect data from children. If you know someone underage has created an account, tell us at [email protected] and we will delete it.

12. Security

Connections between the game, the website and our servers are encrypted (HTTPS). Access to the database is restricted. No system is perfectly secure; if an incident affects your data, we will notify you as the law requires.

13. This website

playdailyforge.com uses no advertising cookies or trackers. When you delete your account on the web, the page keeps only a temporary sign-in session in the open tab and clears it when you leave.

14. Changes to this policy

When we change this policy, we update the date at the top of the page. For important changes we will tell you in the game before they apply.

Related pages

Terms of ServiceDelete your account
← Back to home