Privacy Policy

Last updated 21 September 2026.

DragonScape Idle is a free browser game made by Loopix Games, a sole trader based in Finland. This policy covers the game at dragonscapeidle.com, the wiki at wiki.dragonscapeidle.com, and the Android app on Google Play, which is a wrapper around the same website and collects nothing of its own.

The short version: you can play the whole game without giving us anything. If you make an account so your progress follows you between devices, we store your progress and the identifier your sign-in provider gives us. We do not sell your data, we do not show advertising, and we do not share your data with data brokers.

1. Playing without an account

You can open the game and play immediately. In that mode your progress is saved in your own browser storage on that device only. We do not receive it. If you clear your browser data, that save is gone and we cannot recover it.

Even without an account, your browser still loads the game files from our host and sends analytics events. Those are covered in sections 4 and 5.

2. Accounts and sign-in

Accounts are handled by Google Firebase Authentication. We offer three ways in:

• Guest account. An anonymous identifier with no personal data attached. It exists so a cloud save can be created before you decide whether to sign in.
• Sign in with Google. Google gives us your account identifier, your email address, your display name and your profile picture URL. We use the identifier to find your save, and the email address to recognise you and to contact you about your account if we have to.
• Email and password. We receive your email address. The password itself is handled by Firebase Authentication. We never see it and we never store it.

We do not post anything anywhere on your behalf, and we never ask for a password belonging to another service.

3. Game saves

If you are signed in, your save is stored in Google Cloud Firestore against your account identifier. The save holds your character progress: levels, experience, items, quests, settings and similar game state. It also holds two fields that are not game progress:

• A random device identifier we generate, used to work out which of your devices wrote last so that two devices do not overwrite each other.
• A record of how you first arrived, meaning the campaign tags in the link you clicked and the website that referred you. This tells us which places we posted about the game actually bring in players. It is recorded once, on your first visit, and never updated.

We keep short term backups of your save so that we can restore it if a bug loses progress.

4. Analytics

We use Google Analytics 4 through Firebase, with the results exported to Google BigQuery. It records game events such as starting a session, levelling a skill, completing a quest and opening a tab, along with the usual technical details a web request carries: approximate location derived from your IP address, device type, browser and language.

Analytics events are tied to a pseudonymous identifier created by Google Analytics, not to your name or your email address. We do not send your email address or your display name into analytics.

5. Data stored on your device

The game uses your browser storage rather than tracking cookies. It holds your local save if you are playing as a guest, your settings, the device identifier described above, your notification preference, and the record of how you first arrived. Clearing your browser data for this site removes all of it.

Google Analytics sets its own identifier in the same storage.

6. Optional extras

• Discord and Patreon linking. Entirely optional, and used only to work out whether you qualify for a community reward. If you use it, the provider asks your permission first, and we store your username on that provider and your membership tier. We never receive your password, and we never gain the ability to act on your account.
• Notifications. Off unless you turn them on and your browser or phone grants permission. They are generated on your own device. You can revoke the permission at any time in your browser or system settings.

7. Payments

The game currently has nothing to buy and we take no payments. If that changes, payment details will be handled by the payment provider and never by us, and this policy will be updated before any purchase is possible.

8. Who else sees your data

That is the whole list. We do not sell personal data, we do not share it for advertising, and no advertising network runs in the game.

9. Where your data is held

Our Google Cloud services store data in the United States. If you are in the European Economic Area, that means your data is transferred outside it. Google provides the standard contractual clauses that cover those transfers.

10. How long we keep it

• Saves and account records: for as long as your account exists. Accounts that have not been played for a long time may be removed.
• Save backups: a rolling window of recent copies, then deleted.
• Analytics: Google Analytics retains event level data for up to 14 months. The BigQuery export we read keeps raw events for 60 days. Beyond that we keep only daily totals, which cannot be traced back to a person.

11. Your rights

If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to ask for a copy of your data, to have it corrected, to have it deleted, to object to how it is processed, and to complain to your national data protection authority. In Finland that is the Office of the Data Protection Ombudsman.

We process your save and account data in order to provide the game you asked for, which is the contract basis. We process analytics on the basis of our legitimate interest in understanding whether the game works and where players come from.

To get a copy of your data, or to have your account and save deleted, email gabor.szenasi@loopix.games from the address on the account. We answer within 30 days. Deletion removes your account, your save and your backups, and it cannot be undone.

12. Children

The game is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, email us at the address above and we will delete it.

13. Security

Sign in and storage run on Google Firebase. Traffic uses HTTPS. Saves are readable only by the account that owns them, enforced by server side rules. No system is perfect, and we do not claim otherwise.

14. Changes

If this policy changes in a way that matters, we will update the date at the top and announce it in the game news. Continuing to play after a change means that you accept it.

15. Contact

Loopix Games, Finland. gabor.szenasi@loopix.games