Privacy policy

Version 4, last changed 14 October 2026.

The short version

• Without an account, nothing about you or your games leaves your device, except the achievements you earn when you play from Steam or the Epic Games Store, and play statistics if you say yes to them.
• With an account, we keep your username, your games, and a few facts about the devices you sign in on, so your games follow you.
• We keep no real name, no exact location, and no advertising data. There are no ads. An email address is kept only if you add one to get back into your account.
• Play statistics (Google Analytics) are off until you say yes, on kingsmend.com, the wiki, the browser game and the phone apps. The Steam and Epic game never sends them.
• Crash reports are off unless you turn them on, and never hold your save or your name.
• You can delete your account, and everything in it, from the game at any time.

Who we are

Kingsmend Idle is made by Yasin Celebi, an independent developer in Türkiye, who is responsible for the information described here. Questions about this policy, or about your information: yasin@kingsmend.com.

Playing without an account

The game saves on your device. In the Steam app, Steam Cloud may also keep a copy of your saves between your own computers; that is Steam's service, under Steam's privacy policy.

When you open the Mod store, the game fetches the list of mods from play.kingsmend.com and from our cloud server. That request carries nothing about you or your games; like any visit to a website, Cloudflare, which carries it, sees your internet address. We do not keep it. Links to the wiki open wiki.kingsmend.com in your browser.

Achievements on Steam and the Epic Games Store

When you play the game from Steam or from the Epic Games Store, the game tells that store which achievements you have earned. Nothing else from your game is sent: no save, no username, no email. We keep none of it ourselves.

• Steam: Steam shows your achievements on your Steam profile, under Steam's privacy policy and your Steam privacy settings.
• Epic Games Store: the game signs you in to Epic with the account you started it from, and sends your achievements to Epic. Epic shows them on your Epic profile and may also use them for its own services, such as store recommendations, under Epic's privacy policy. For this data, Epic is a separate controller from us. Its contact for privacy questions is privacy@epicgames.com.

We send them because achievements are part of the game you started from that store, a legitimate interest (GDPR Article 6(1)(f), KVKK Article 5(2)(f)). The browser game and the phone apps send achievements nowhere.

What we keep when you make an account

• Your username, which you choose.
• Your password, only as a one-way scrambled form (a hash). We cannot read it.
• If you add a recovery email: that address, used only to send you a code when you add it or when you ask to set a forgotten password again. We never send anything else to it. You can remove it in the game at any time.
• Your games: the saves you play while signed in, their names, and a short summary (total level, coins, holdings restored). We keep up to 30 older copies of each game, so a mistake can be undone.
• Your devices: a name for each device you sign in on, such as "Chrome on Mac" or "iPhone app", and when it was last used. You can see and remove them in the game.
• If you link Steam: your Steam account's number (Steam ID), and whether that Steam account owns the game. We ask Steam for this; we never see your Steam password.
• If you buy the full game on a phone: Apple or Google handle the payment. RevenueCat, the service we use to check phone purchases, keeps the purchase record under your account's id number. We keep only whether your account has the full game.

Your internet address is used for a short time to stop abuse, such as someone guessing passwords. It is not kept.

Why we keep it

Only to run the game's cloud saves: to keep your games the same on every device you sign in on, to open the full game you bought, and to keep the service safe from abuse.

• Your username, password, recovery email, games, devices, Steam link and full-game record: because you asked for an account and these are what it needs to work (a contract with you, GDPR Article 6(1)(b), KVKK Article 5(2)(c)).
• Your internet address for a short time: to keep the service safe from abuse, a legitimate interest (GDPR Article 6(1)(f), KVKK Article 5(2)(f)).

We do nothing else with your information. The two things you choose to switch on, play statistics and crash reports, are described below.

Who else sees it

We do not sell or share your information. These services handle part of it for us:

• Contabo GmbH (Germany), which runs our cloud save server in a data centre in Europe;
• Cloudflare, which carries the traffic to our addresses (kingsmend.com), serves the game's website, and stores our encrypted backups (Cloudflare R2);
• Resend, which sends the code emails when you add a recovery email or ask for a new password (it sees the address and the email we send);
• Steam (Valve), when you link Steam or play from Steam;
• Epic Games, when you play from the Epic Games Store (your achievements, as described above);
• Apple, Google and RevenueCat, when you buy on a phone;
• Google (Google Analytics and Firebase), for play statistics, only if you say yes to them.

We are in Türkiye and the server is in Europe, and some of these services (Cloudflare, Resend, RevenueCat, Valve, Epic Games, Apple, Google) are in the United States. Your information goes to them only because the service you asked for needs it: to keep your games on our server, carry them to you, send you a code, check a purchase, link Steam, show your achievements on Steam or Epic, or count play statistics you said yes to.

How long we keep it

As long as your account exists. When you delete your account, your username, recovery email, games and devices are deleted at once. An emailed code stops working after 15 minutes and is deleted. Backups of the server (at Cloudflare R2, and a daily copy on the server) are kept for at most 7 days, so the last copies are gone within a week.

Deleting your account

In the game, on the title screen: Cloud saves, then Devices, then Delete the cloud account. Games on your devices stay on them. You can also write to yasin@kingsmend.com from any address, and we delete the account named in your message once we know it is yours.

Mods

Mods you install run inside the game with the game's own access. A mod can read what the game can, including your cloud sign-in. Install only mods you trust.

If you send a mod to the Mod store, we keep the mod file and the author name you give it, and link it to your account. Once we approve it, the mod and its author name are public in the store. If you delete your account, approved mods stay in the store under their author name, no longer linked to any account; write to us if you want them removed.

Crash reports (optional)

They are off unless you turn on "Send crash reports" in Settings. Then, when the game hits an error, it sends a short report to our own crash server. A report holds the error text and where in the game's code it happened, the game version, the kind of device (browser, Steam, iPhone or iPad, or Android) and its operating system, your language, the ids of the mods you use, and a random id made for this install. It never holds your save, your account name, your email or anything you typed.

Our server takes your internet address off every report before storing it, so no address is kept; the connection itself passes through Cloudflare, as every page of the game does. Reports are stored only on our own server (GlitchTip, run by us on the same Contabo server in Germany) and are deleted automatically after 30 days. Turning the setting off stops all reports and deletes the random id on your device; reports already sent are deleted when their 30 days are over. We use them only to find and fix errors, a legitimate interest (GDPR Article 6(1)(f), KVKK Article 5(2)(f)), and only once you turn them on.

Play statistics (optional)

On kingsmend.com, wiki.kingsmend.com, the browser game and the phone apps, we ask once whether we may count how people use them. Nothing is counted until you say yes. You can change your answer at any time: "Cookie settings" at the bottom of the website and the wiki, and "Share play statistics" in the game's Settings. On the website, the wiki and the browser game the answer is kept in a cookie (km_consent) on kingsmend.com, so one answer covers all three. The game for Steam and the Epic Games Store never sends play statistics.

If you say yes, we use Google Analytics (on the phones, Google Analytics for Firebase). It counts:

• which pages and game screens you open, and the links you follow from them (for example to the game, the wiki or Discord);
• what happens in the game: a skill level reached, a place found, taken or restored, a quest done, the work you start, how long you were away, the end of the story, signing in or making an account, and buying the full game. These are counts with the game's own names for skills, places and quests; never your save, your username, your email, mod names or anything you typed;
• which game version, edition (demo or full), language and platform (browser, iPhone or Android) you use;
• facts Google Analytics reads itself: the kind of device, browser and operating system, screen size, and your rough location (country and city) worked out from your internet address. Google Analytics does not store the internet address itself.

To tell visits apart it keeps a random id: in the _ga cookies on the website, the wiki and the browser game (kept for up to 13 months), and as an app id in the phone apps. It is not linked to your cloud account or to your name. We turned off Google signals and advertising features, so the data is not used for ads or joined with your Google account. Google keeps the data for us for 14 months, then deletes it.

We use it only to see how people find and play the game, so we can make it better. The reason is your consent (GDPR Article 6(1)(a), KVKK Article 5(1)), and you can take it back at any time; saying no or switching it off stops all counting, removes the cookies, and on the phones resets the app id. Google (Google Ireland Limited in the European Union, Google LLC elsewhere) handles this data for us and may move it to the United States.

Your rights

You can ask us what we keep about you, ask us to correct it or delete it, ask for a copy of it, or object to or limit how we use it. Write to yasin@kingsmend.com; we answer within 30 days. If you live in the European Union or the United Kingdom, you can also complain to your data protection authority. In Türkiye, write to us first; if we do not answer within 30 days, or you disagree with the answer, you can complain to the Personal Data Protection Authority (KVKK).

On your device

The game keeps its saves and settings on your device (in the browser's own storage, or in a folder on your computer or phone). It uses no advertising tools. Cookies are used only for play statistics, and only after you say yes (see Play statistics above).

Children

The game does not ask for any personal details beyond a username. An account is never needed to play. Cloud accounts are not for children under 13. In the European Union, a child under 16 needs a parent's permission for an account. If you think a child made an account without it, write to us and we delete it.

Changes

If this policy changes, this page changes, with the date at the top.