Idle Hero Ascension currently uses only essential cookies and local browser storage required to run the game, keep accounts secure and remember basic game interface choices.
We use essential session cookies for login, guest accounts, account security and form protection. A random first-party browser security ID is also used to help enforce the one-account-per-person rule. Without these cookies, the game cannot keep you signed in, process game actions safely or reliably investigate account abuse.
Your browser may store small interface preferences such as chat state, notification settings or cached HUD values. These are used to make the game feel smoother and are not used for advertising.
We do not currently use advertising cookies, third-party tracking cookies or analytics cookies. If this changes later, optional tracking will require a separate choice before it is used.
If you enable Mobile Push for a device, we store its Push endpoint and the public encryption material supplied by your browser. Selected game notifications are encrypted and delivered through the Push service operated by your browser or device provider. Push is optional, can be disabled per device at any time and is not used for advertising or tracking.
Account names, email addresses, character progress, items, guild activity, market listings, chat messages, player content reports, moderation records, feedback posts, referral relationships and completed Crystal or QoL Token purchase records are stored so the game and its reward systems can function.
Crystals spent on visible Server Buff purchases appear as a total in the public Server Buff Supporters ranking. Purchases announced anonymously are excluded from that ranking and its titles. Completed live Shop purchases can unlock supporter titles, but payment amounts and a payment ranking are not public; a title is shown only when the player activates it.
You can request deletion of your account and associated game data from the Account Deletion page. You must sign in to verify ownership. Payment, refund, fraud-prevention, moderation and security records may be retained where required by law or needed to protect players and the game.
PayPal components are loaded only when PayPal Checkout is available. When you start a payment, PayPal processes payment, account, device and network data under PayPal's Privacy Statement. We store the PayPal order and capture identifiers, package, amount, currency and payment status. We do not receive your PayPal password or full funding details.
The Idle Hero Ascension Android app uses the same game account, character and progress as the website. Inside the Google Play app, PayPal is not loaded. Digital purchases are processed by Google Play under Google's Privacy Policy.
To verify and deliver a purchase, Google Play provides a temporary purchase token and purchase details such as the product, order identifier, purchase state, region and test-purchase status. The token is sent securely to our server for verification with Google and is stored only as a one-way hash. We retain the order identifier, purchased product, verification status and relevant timestamps for fulfillment, accounting, refunds, fraud prevention and duplicate-delivery protection. We do not receive your Google password, card number or full payment credentials.
Completed payments, refunds and reversals are retained as required for accounting, security, fraud prevention and the correct delivery of purchased Crystals and referral rewards.
To protect accounts and the game economy, unusually frequent commands, failed security checks and required human verifications may be recorded for review. Sign-in activity may be associated with network addresses and a random first-party browser security ID to detect accounts operated together. The browser ID and browser-type signatures are stored only as one-way keyed hashes; no hardware fingerprint or third-party advertising identifier is created. Authorized administrators may compare these limited signals with referrals, Guild membership, direct messages, transfers and Market trades. These signals support manual review and never ban an account automatically.
Website and app traffic is protected with HTTPS. Passwords are stored as one-way password hashes, and administrative access to account, moderation and payment records is restricted. We do not sell personal data or use it for advertising. Data is shared only where needed to provide a requested feature, such as payment processing, optional Push delivery, Steam authentication or legal and security obligations described above.
Provider and contact information can be found on the Impressum page. You can request removal of your game account on the Account Deletion page.