Privacy Policy for Daydream Hero

The Short Version

• •You never sign up with an email, phone number, or social account. You play as a guest.
• •Your progress is saved on your phone and backed up to our game server (Talo) so it survives a reinstall.
• •Leaderboards show a randomly generated hero name, never your real name.
• •Ads are optional rewarded videos from Google AdMob. Where the law requires it, we ask for your consent first.
• •Purchases go through Google Play or the App Store; RevenueCat keeps track of what you own. We never see your card details.
• •You can delete your data from Settings → "Delete account & data", or by emailing us.

1. Information We Collect

1.1 Stored only on your device

• •Game save: coins, diamonds, items, talents, stage progress, DreamPass progress, and settings such as music volume
• •Consent choices: the ad consent choices you made, so we don't ask again every launch

1.2 Sent to our game server (Talo)

• •Guest game ID: on Android, a one-way scrambled (SHA-256 hashed) version of your device's Android ID, so the same phone finds its save again after a reinstall. The original Android ID is never sent. On iOS, a random ID created on your phone.
• •Cloud save: a copy of your game save, so your progress survives a reinstall
• •Transfer code (optional): if you create a transfer code to move to a new phone, the code and a password you choose (stored hashed by Talo)
• •Leaderboard entries: your scores and your randomly generated hero name
• •Gameplay events: DreamPass progress (experience earned per run, tiers reached, whether the premium pass was bought), used to balance the game
• •Connection data: like any server, Talo receives your IP address and basic request details when the App connects. The App also asks Talo's server for the current time so daily rewards can't be skipped by changing the phone clock.

1.3 Purchases

In-app purchases are handled by Google Play or the Apple App Store. RevenueCat receives a record of your purchases (product, price, currency, date, store transaction ID) linked to your Talo player ID, so we can unlock what you bought and restore it on a new phone. We never receive your name, card number, or billing address.

1.4 Ads

Google AdMob shows rewarded video ads that you choose to watch (for example, to revive or to collect free coins). To serve and measure ads, AdMob may collect your device's advertising ID, IP address, approximate location derived from it, device and app information, and how you interacted with the ad. On Android the App declares the advertising ID permission for this purpose.

1.5 When you contact us

The "Support" button in Settings opens an email that includes your player ID so we can find your save. If you email us, we receive your email address and whatever you write.

1.6 What we don't collect

• •Your name, email address, phone number, contacts, photos, or precise location (unless you email us)
• •Payment card details
• •Free-text chat or user-written names: hero names are generated by the game

Share cards (the world-card images you can share from the Bag) are made on your phone and only leave it when you pick an app to share them with.

2. How We Use Information

• •Back up your progress and move it to a new phone
• •Run the leaderboards
• •Unlock and restore purchases, including Ad-Free
• •Show rewarded ads and give you the reward
• •Balance the game and fix bugs
• •Answer your support requests

We do not sell your personal information for money.

3. Who Processes Your Data

We use these services to run the App. Each processes data under its own privacy policy:

• •Talo (game backend: guest ID, cloud save, transfer codes, leaderboards, gameplay events): trytalo.com/privacy
• •RevenueCat (purchase records): revenuecat.com/privacy
• •Google AdMob and Google's User Messaging Platform (ads and ad consent): How Google uses information from apps that use its services
• •Google Play and the Apple App Store (downloads and payments): Google Privacy Policy, Apple Privacy Policy
• •Vercel (hosts this website and receives standard web request data such as IP address)
• •Google Analytics (website visits and button taps, cookies only with your consent; see section 10)

These providers may store data outside your country, including in the United States and the European Union.

4. Your Ad Choices

• •Consent: in the EEA, the UK, Switzerland, and other places where it's required, the App asks for your consent through Google's consent form before any ad is requested. You can change your choice at any time from Settings → "Privacy options."
• •iPhone and iPad: the App asks for tracking permission (App Tracking Transparency). If you decline, ads are not personalized using your advertising ID.
• •Android: you can reset or delete your advertising ID in your device settings (Settings → Privacy → Ads).
• •Ad-Free: buying Ad-Free removes the need to watch ads for rewards.

Ads in the App are not child-directed and are limited to content suitable for teens.

5. Data Retention

• •Your cloud save, guest ID, leaderboard entries, and gameplay events are kept while you play, and deleted when you ask us to delete them (see section 6).
• •Weekly leaderboards reset every Monday; all-time leaderboards keep your best score until you ask us to delete your entries.
• •Purchase records are kept by RevenueCat and the app stores for as long as needed for refunds, restores, and tax and accounting law.
• •Support emails are kept for as long as needed to help you, then deleted.
• •Ad data is kept by Google under its own retention policy.

6. Deleting Your Data

In the App, open Settings → "Delete account & data." This deletes the save on your phone and your cloud save on Talo. If you created a transfer code, it also deletes that account.

To also remove your leaderboard entries and gameplay events, or if you no longer have the App, follow the steps on our Delete Account page. We complete requests within 30 days.

7. Children's Privacy

Daydream Hero is rated for ages 13 and up and is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has used the App and you want their data deleted, contact us and we will delete it.

8. Security

The App talks to Talo, RevenueCat, and Google over encrypted connections (HTTPS). Transfer-code passwords are stored hashed, and your Android ID is hashed before it leaves the phone. No online service can be guaranteed 100% secure, but we limit what we collect so there is less to protect.

9. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or get a copy of your personal data, and to object to or restrict how it's used. Email us with your player ID (Settings → "Support" includes it) and we'll respond within 30 days.

9.1 EEA, UK, and Switzerland (GDPR)

We rely on these legal bases: performing our contract with you (saves, purchases, leaderboards), our legitimate interest in keeping the game working and balanced (gameplay events, bug fixing), and your consent (personalized ads). You can withdraw consent at any time from Settings → "Privacy options," and you can complain to your local data protection authority.

9.2 California (CCPA / CPRA)

We do not sell personal information for money. Personalized ads from Google AdMob may count as "sharing" for cross-context behavioral advertising under California law. You can opt out by turning off ad personalization in your device settings or by declining personalized ads in the App, and you can ask us to know or delete your data by email. We will not treat you differently for using these rights.

11. Changes to This Policy

We may update this Privacy Policy, for example when the App adds or removes a service. The current version always lives at daydreamhero.app/privacy-policy with its Effective Date at the top. If a change affects how we use data you already gave us, we'll tell you in the App.

12. Contact Us

For questions or requests related to this Privacy Policy, please contact us:

📧 daydreamhero.app@gmail.com