Privacy

Privacy policy

This policy explains exactly what TokenForge TD collects, why, and what you can do about it. It is written from what the game actually does, and it is updated whenever that changes.

Effective: 14 August 2026

TokenForge TD is a mobile game in active development. Playing it means creating an account on our game server, which is what saves your progress and lets you play against other people. We collect what the game needs to work and what tells us whether it is any good — nothing that exists to profile or advertise to you.

Details

What we collect, and why

Data What it is Why
Account identifiers A device identifier is sent to our game server to create and sign you back into your account, which is stored as a random ID. Your chosen display name is stored on the server so friends and opponents can see who they are playing. Signing you in, keeping your progress, and multiplayer.
Email address If you enter one during account setup, it is saved in the game's own save file on your device. It is not currently sent to our servers and is never shared. Account recovery and contacting you about your account.
Game progress Your card collection, saved decks, currency balances, hero progression, competitive rating, match results, and friends list. Saving your game and running multiplayer and rankings.
Gameplay analytics Events describing how you move through the game — screens opened, tutorial steps, decks saved, matches started and finished, waves reached, and summary counts from a match such as towers built and cards played. Each event is linked to your account ID. Understanding where players get stuck or stop playing, so we can fix it.
Device & technical data Collected automatically by Google Analytics for Firebase: an app-installation identifier, device model, operating system version, language, country (from IP address), app version, and session timing. Your IP address is also visible to our servers when the game connects to them. Diagnosing crashes and performance problems, and basic usage reporting.
Push notification token If you allow notifications, the device token issued by Firebase Cloud Messaging is stored against your account. Telling you when a friend invites you to a match.

Limits

What we don't do

  • We do not show ads, and the game contains no advertising or ad-attribution SDKs.
  • We will never sell your personal information, or share it for advertising or cross-app tracking. This is not a policy we intend to revisit.
  • We do not collect your contacts, photos, precise location, microphone, or camera.
  • We do not send anything you have written — your display name aside — to our analytics. Deck names, and any other text you type, stay on your device.

Analytics

A note on gameplay analytics

We use Google Analytics for Firebase to see how players move through the game — how many finish the tutorial, which wave people stop on, whether a deck ever gets built. It is how a two-person project finds out that something is broken or unfair without waiting for someone to report it.

Analytics is on whenever you play; there is currently no in-game switch to turn it off. If you would rather not take part, you can request deletion of your data and uninstall the game. Google's own handling of this data is covered by its privacy policy.

Sharing

Who else handles your data

We will never sell or trade your data. It is handled by the service providers below purely so they can run the game on our behalf, under their own privacy terms.

These providers operate servers outside your country, so your data may be processed elsewhere. We may also disclose data if the law requires it, or to investigate cheating, fraud, or abuse.

Your choices

What you can do

Delete everything

You can ask us to permanently delete your account and player data at any time. We action verified requests within 30 days.

Delete your data

Other controls

  • Turn off notifications for the game in your device settings at any time.
  • Uninstalling removes the save file, and the analytics data held on your device.
  • Depending on where you live, you may have the right to access, correct, or export your data, or object to how we use it. Email us and we will help.

Also worth knowing

Retention, children, and changes

How long we keep it

Account and progress data is kept while your account exists, and deleted when you ask us to. Analytics data is retained on Google's servers under the retention period set for our Firebase project, after which it is deleted or kept only in aggregate.

Children

TokenForge TD is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us personal data, email us and we will delete it.

Changes to this policy

The game is in active development, so what it collects will change as features ship. We will update this page and move the effective date above whenever it does.

Contact

Questions about your data

Get in touch

Email privacy@tokenforge.example.com with any question about this policy, or to make a request about your data.

Email us