Privacy Policy

DAW: An Idle Adventure · Last updated: 11 August 2026

DAW: An Idle Adventure ("the Game") is operated by Pileus Solutions LLC ("we", "us"). This policy explains what personal data the Game processes, why, and what you can do about it.

What we collect

• Your email address. It is the only way you sign in: we email you a one-time code. We do not use passwords.
• Your game data. The characters you create (name, race, statistics, progress, in-game gold, position in the game world), your inventory and professions, and your quest progress.
• Match records. Results and statistics of the battles you play, which are used to run the leaderboard.
• A push notification token, but only if you allow notifications on your device. It identifies the device, not you, and is used solely to tell you when a timed action has finished.
• Your IP address, processed while you are connected in order to rate-limit requests and prevent abuse. It also appears in short-lived server access logs.

What we do not collect

The Game contains no advertising identifiers, no third-party analytics or tracking SDKs, and no advertising networks. We do not request your device location, contacts, photos, microphone or camera. The Game is free and has no purchases of any kind, so we hold no payment data at all. Should that ever change, payments would be handled entirely by Apple or Google and we would still never see your card details. We never sell personal data.

Why we are allowed to process it

Your email and game data are processed to perform our contract with you. Without them there is no account and no game. Your IP address is processed under our legitimate interest in keeping the service available and free of abuse. Push notifications are processed on the basis of your consent, which you can withdraw in your device settings at any time.

Who else sees it

We use a small number of service providers, who process data only on our instructions:

• Twilio SendGrid delivers the sign-in code emails. It receives your email address.
• Contabo GmbH (Germany) hosts the game servers and the database.
• Google Firebase Cloud Messaging delivers push notifications, and only if you have enabled them. It receives the device token, not your email.

Other players see the parts of your game data that the game is built around: your character's name, race and level, and the results of the battles you take part in. These appear on the public leaderboard and in the shared battle log. Your email address is never shown to anyone.

We also disclose data if the law requires it. There are no other recipients.

Where your data is stored, and who reaches it

The game servers and the database are located in Germany, inside the European Economic Area.

We are a company established in the United States. Our own team administers the service and reaches your data from there, so your data is accessed from outside the European Economic Area even though it is stored inside it.

Two of the providers above are also based in the United States, and a limited amount of data reaches them: Twilio SendGrid receives your email address in order to send the sign-in code, and Google Firebase Cloud Messaging receives your device token if you have enabled notifications. Both providers are certified under the EU-U.S. Data Privacy Framework and the transfers are additionally covered by the European Commission's Standard Contractual Clauses.

We may add servers in other regions as the game grows. If we do, we will update this page before the change takes effect, as described under Changes.

Automated decisions

We do not profile you and we make no automated decisions that produce legal or similarly significant effects. Battles are resolved by the game's rules, not by any assessment of you as a person.

How long we keep it

Your account and game data are kept for as long as your account exists. Expired sign-in sessions are deleted automatically by a scheduled job. When you delete your account, everything belonging to it (characters, inventory, progress, match records and sessions) is permanently erased from the database immediately; there is no soft-delete and no recovery period.

Your rights

The first two are buttons in the app, under Settings. For the rest, write to support@2appo.com from the address you sign in with, and we will answer within one month, as the law requires.

• Get a copy of your data. Settings has a button that saves a file with everything we hold about you: your account, characters, resources, professions, match records and quests. You can also ask us and we will send it.
• Delete your account. One button in the app, effective immediately, as described above.
• Correct your data. Tell us what is wrong and we will fix it.
• Object or restrict. Tell us what you object to and we will explain what we can do.

If you are in the EU/EEA or the UK, you also have the right to lodge a complaint with your national data protection authority.

Children

The Game is not intended for children under 13, and you must confirm that you are at least 13 when you sign in. We do not knowingly collect data from children under 13. If you believe a child has created an account, write to support@2appo.com and we will delete it.

Security

All traffic between the app and our servers is encrypted with HTTPS. Sign-in sessions are stored only as irreversible hashes, never in readable form. Because we use one-time email codes, there is no password of yours for anyone to steal from us.

Changes

If we change this policy we will update the date at the top of this page. Material changes will be announced in the app before they take effect.