Privacy
Policy

This Privacy Policy explains how MikSoftware, the independent developer brand of Minh Nguyen ("Developer", "we", "us", or "our") collects, uses, processes, and protects your information when you use our mobile game Idle Dino: Dinosaur Evolution (or "Idle Dino", "the Game", "the Application"), available on Android (Google Play Store) and, when released, iOS (Apple App Store) under the bundle identifier and package name com.minhnguyen.idledino.

By downloading, installing, or playing Idle Dino, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Application.

1. Information We Collect

A. Information Stored Locally on Your Device

All your dinosaur levels, unlocked species, virtual currencies (Bones, DNA, Amber, Meat), collection books, and battle progress are saved directly on your local device storage (user://idle_dino_farm.save). We do not store or transmit your raw gameplay saves to any private external game server. A copy may be kept in your own platform account as described in section C below. The only gameplay data we receive on our own server is the limited leaderboard data described in section E below.

B. Information Collected Automatically by Third-Party SDKs

When you play Idle Dino, certain third-party software development kits (SDKs) integrated into the game automatically collect technical, diagnostic, and pseudonymous identifier data:

• Device & Network Information: Device manufacturer, model, operating system version, system language, screen resolution, carrier, internet connection type, and approximate general location (country/city derived from anonymized IP address).
• Pseudonymous Identifiers:
  • Google Advertising ID (GAID) on Android devices.
  • Identifier for Advertisers (IDFA) on iOS devices (collected only if you explicitly grant permission via Apple’s App Tracking Transparency prompt).
  • Vendor Identifier (IDFV) on iOS devices.
  • Anonymous RevenueCat App User ID generated automatically to manage your purchased entitlements across app launches.
• Monetization & Purchase Data: Transaction timestamps, purchased product identifiers (e.g., remove_banner_ads, starter_pack), store receipt tokens, and active entitlement statuses.
  Note: We never collect, process, or store your credit card, debit card, bank account, or financial billing credentials. All transactions are securely processed directly by Google (Google Play Billing) or Apple (Apple In-App Purchase / StoreKit).
• Product Analytics & Crash Data (Google Firebase): With your consent where required by law, Firebase Analytics records how the Game is used: a Firebase installation (app-instance) ID, anonymous gameplay events (for example reaching a stage milestone, unlocking a feature, using an upgrade, watching or failing to load a rewarded ad, completing a purchase), device and app information (model, operating system version, Game version, language, country), and general engagement such as session counts and duration. Firebase Crashlytics collects crash reports with a stack trace, device state, and the Game's progress at the time of the crash. We do not use this data to identify you, and we do not allow Firebase to use it for advertising personalization. With your consent, install and in-game milestone events (for example first launch or returning on a later day) may also be shared with Google Ads so we can measure how well our own advertising campaigns bring in players; this measurement is not used to personalize the ads you see.
• Ad Interaction & Diagnostic Data: Ad impression metrics, ad view duration, clicks, placement keys (e.g., Rewarded boss multipliers, combat banners), and application performance/crash logs.

C. Cloud Save in Your Platform Account

So that you do not lose your progress when you reinstall the Game or change devices, Idle Dino automatically tries to sign you in to your platform's game service when it starts and keeps a copy of your save file there:

• On Android: Google Play Games Services (Saved Games), linked to your Google Play Games profile.
• On iOS: Apple Game Center saved games, stored in your iCloud account.

On iOS, Apple's iCloud sync can deliver a save late, so Idle Dino also keeps a second copy of your save file on the small server operated by us described in section E (Cloudflare Workers with a Cloudflare D1 database). To link that copy to you without an account, the Game asks Apple's Game Center for a signed proof of your Game Center player ID; our server checks Apple's signature and stores your Game Center player ID next to a compressed copy of your save file (the game data described in section A) and its time of last update. We use it only to give your progress back after you reinstall the Game or change devices; we do not use it for advertising or analytics.

The platform copy contains only the game data described in section A. It is stored in your Google or Apple account under their privacy policies; we cannot access it from outside the Game. You can decline or cancel the sign-in prompt and keep playing normally, in which case your save stays only on your device. On Android, the operating system may also include the save file in your device's Google backup if you have enabled device backup.

D. Network Time Check

To keep time-based rewards (offline earnings, daily rewards, seasons) fair, the Game reads the current time from the standard Date header of a small HTTPS request to a public Google endpoint (google.com), or to Cloudflare (cloudflare.com) as a fallback. This happens when the Game starts or returns from the background. No game data, identifiers, or personal information are included in this request. As with any internet request, the receiving service can see your device's IP address. If no network is available, the Game simply uses your device's clock and remains fully playable offline.

E. Leaderboard

On Android and iOS, Idle Dino connects to a small server operated by us (hosted on Cloudflare Workers with a Cloudflare D1 database) to show leaderboards. This happens automatically; you do not create an account, and we do not ask for your name, email address, or phone number. The server receives and stores:

• A randomly generated player ID and a secret access token (stored by us only as a one-way hash) that identifies your installation to the leaderboard.
• A display name that the server generates for you automatically (for example Ranger 1234).
• Your country, which Cloudflare derives from your IP address when you first connect. We do not store your IP address in our database.
• Your platform (Android or iOS), the Game version, and the highest stage you have reached in each game mode, which the server checks before it is ranked.

Other players can see your display name, country, and highest stage on the leaderboard. We do not publish anything else. You can keep playing normally without opening the leaderboard, but the Game sends the data above in the background whenever it has a network connection.

F. Notifications and Review Prompts

If you allow notifications, the Game schedules reminders (for example, when your offline earnings are full or your daily rewards have reset) locally on your device through the operating system; no data is sent to us for this, and you can turn them off in the Game's Settings or in your device settings. The Game may occasionally invite you to rate it using the standard Apple or Google review sheet; we do not receive your rating or your account details from that sheet.

2. Third-Party Service Providers

Idle Dino relies on trusted industry-standard third-party partners to provide advertising, mediation, purchase fulfillment, cloud save, and network time services. These third parties have their own privacy policies governing their processing of data:

3. How We Use Your Information

The collected data is used exclusively for the following lawful purposes:

• Game Operation: Delivering smooth gameplay mechanics, saving and restoring your local game state.
• Cloud Save: Restoring your progress from your Google Play Games or Game Center account after reinstalling the Game or changing devices.
• Fair Play: Verifying the time so that changing the device clock cannot be used to collect time-based rewards early or repeatedly.
• Leaderboard: Ranking players by the stages they have reached, showing the ranking to other players, and checking that submitted results are legitimate.
• In-App Purchases: Validating purchases and permanently maintaining your entitlements (such as Remove Banner Ads, Remove All Ads, and Special Dino Packs) even after reinstalling the app.
• Advertising: Serving banner ads and rewarded video ads that reward players with in-game boosts.
• Security & Fraud Prevention: Detecting illegal bots, fraudulent ad clicking, and unauthorized payment tampering.
• Analytics: Understanding how players progress through the Game, where they stop playing, and how features, ads, and purchases are used, so that we can balance and improve the Game.
• Stability & Performance: Debugging software crashes and optimizing framerates across different mobile device models.

4. Legal Bases for Processing (EEA / UK GDPR)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, our processing of your personal data is grounded in the following legal bases under the General Data Protection Regulation (GDPR):

• Consent (Art. 6(1)(a) GDPR): Where required by law, we obtain your explicit consent for personalized advertising, product analytics, and tracking through Google’s User Messaging Platform (UMP) consent dialog and Apple’s App Tracking Transparency (ATT) framework. You can review or withdraw your consent at any time in the Game under Settings → Privacy Settings (shown where required, for example in the EEA and the UK), or through your device settings described in section 6.B.
• Performance of a Contract (Art. 6(1)(b) GDPR): Delivering in-app purchases and digital goods that you requested, keeping your game progress through cloud save, and running the leaderboard feature.
• Legitimate Interests (Art. 6(1)(f) GDPR): Preventing fraud, securing our mobile application, keeping time-based rewards and leaderboard results fair, and understanding aggregated crash diagnostics.

5. Children’s Privacy (COPPA & GDPR-K)

• We do not knowingly collect, solicit, or maintain personally identifiable information from children under 13 (or under 16 where applicable).
• In accordance with Google Play's Families Policy and the Children's Online Privacy Protection Act (COPPA), our ad requests flag child-directed treatment in accordance with platform standards when applicable.
• If we become aware that personal information has been inadvertently collected from a child under the relevant age without verified parental consent, we will take immediate steps to delete that data from our and our service providers’ records.
• Parents or legal guardians with questions or concerns may contact us at: contact@miksoftware.com.

6. Your Rights and Choices

A. Access, Portability & Deletion

You have the right to request confirmation of whether we process your data, access a copy of the data, and request the permanent deletion of your data. Because we do not require account registration or store personal email addresses in a game database, data deletion primarily involves:

1. Deleting the application from your device (which erases all local save files).
2. Deleting the cloud save copy, which is not removed by uninstalling the Game: on Android through the game data settings of Google Play Games, and on iOS through your iCloud storage settings. On iOS, the backup copy on our server (section C) is deleted when you email us, including your platform and, if possible, the Game Center player name you use.
3. Resetting or deleting your device’s Advertising Identifier via system settings.
4. Emailing us to delete your leaderboard entry. Please include the Game version and your platform, and, if you can, the display name shown on the leaderboard (for example Ranger 1234) so we can find it. We will remove the entry and its stored data from our server.
5. Submitting a deletion request for any associated anonymous purchase records by emailing us with proof of purchase, such as your Google Play order number or your Apple receipt or order ID, so that we can pass your request on to RevenueCat.

B. Opting Out of Targeted / Personalized Advertising

• On Android Devices: Open Settings → Google → Ads. Tap Delete advertising ID or enable Opt out of Ads Personalization.
• On iOS Devices: Open Settings → Privacy & Security → Tracking. Toggle off Allow Apps to Request to Track or deny tracking permission for Idle Dino.
• In the Game: Where Google's consent form applies to you (for example in the EEA and the UK), open the Game's Settings → Privacy Settings to review or change your choices, including analytics, at any time. Where no consent form is required, you can ask us to delete your analytics data by emailing us as described in section 6.A.

C. California Consumer Privacy Rights (CCPA / CPRA)

If you reside in California: We do not sell your personal information for monetary consideration. To the extent that third-party advertising SDKs share pseudonymous online identifiers for cross-context behavioral advertising, you have the right to opt out at any time using the device settings described above and, where it is offered to you, the in-Game Settings → Privacy Settings option.

7. Data Retention & International Data Transfers

• Gameplay Saves: Stored locally on your device indefinitely until you clear application cache or uninstall the Game. The cloud save copy remains in your Google Play Games or Game Center/iCloud account until you delete it there. On iOS, the backup copy on our server is kept until you ask us to delete it, or until it has not been updated for 24 months.
• Leaderboard Data: Kept on our server for as long as the leaderboard feature runs, or until you ask us to delete it as described in section 6.A.
• Analytics and Crash Data: Firebase Analytics event data is kept for up to 14 months and Firebase Crashlytics reports for a shorter period set by Google (typically 90 days), after which they are deleted automatically.
• Network Time Check: We do not store anything from this request. Google and Cloudflare may keep standard request logs under their own policies.
• Third-Party Purchase & Ad Records: Maintained by RevenueCat, Google, and Apple in accordance with their regulatory, tax, accounting, and anti-fraud retention policies (typically up to 5–7 years for purchase receipts).
• International Transfers: Our third-party partners, including Cloudflare, operate servers globally, including in the United States, utilizing Standard Contractual Clauses (SCCs) to protect cross-border data.
• Users in Vietnam: We handle personal data of users in Vietnam in line with applicable Vietnamese personal data protection law, and you may exercise the rights in section 6 by contacting us.

8. Security of Your Information

We implement reasonable administrative and technical security measures to protect the integrity of the Application. While we strive to protect any data processed in connection with the Game, no wireless transmission or electronic storage method can guarantee 100% absolute security.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our operational, legal, or regulatory practices. Any modifications will become effective immediately upon posting the updated policy with a revised "Effective Date" at the top of this document.

10. Contact Us