Privacy Policy
Last updated: September 2026
We collect as little as we can, and this page says exactly what that is. The mobile apps for iOS and Android and the desktop version on Steam carry no advertising, and nothing about you is sold or used to target ads. The browser version may show advertising, depending on the site it is played on — see Advertising below. We do collect statistics about how the game itself is played — which maps and heroes people choose, how long a session lasts, where players stop — because that is how a game this size gets better. Those statistics are described below.
Who we are. Alderun is published by Innova Inc., trading as SquirrelFM, and Innova Inc. is responsible for the data described on this page — the data controller, if you are somewhere that uses the term. “We”, “us” and “our” below mean Innova Inc.
This policy covers the game. The player forum is a separate service that publishes what you post and sets a sign-in cookie, so it has its own privacy policy and its own rules.
The website. The pages of alderun.net are shown in your browser’s language when we have
it, and in English when we do not. They set no cookies of their own but one: if you choose a
different language — with the language selector, or by following a link that names one, as
the game’s own links to this page do — your browser keeps a cookie, alderun_lang,
holding that two-letter code for a year, so the site and the forum stay in the language you
chose. Choosing your browser’s own language again deletes it. It identifies nobody and is
sent only to alderun.net.
- Playing offline collects nothing. Settings and progress stay on your device.
- Playing online as a guest collects no personal details — no email, no name you choose. You are given a temporary name such as Guest#4271.
- Only registering an account involves an email address, and only because that is how the account is recovered on another device.
- Signing in with Google is optional. If you use it, Google tells us the email address on your Google account and an identifier for it, and we store both — the same two things a registration by email gives us.
What we collect, and why
| What | Why | When |
|---|---|---|
| Email address | It is your account. We use it to send a sign-in code when you play on a new device, and a one-time confirmation link. We do not send marketing email of any kind. | Only if you register an account, or sign in with Google — in which case the address comes from your Google account instead of being typed. |
| Google account identifier | Stored so that Continue with Google reaches the same account next time. It is the identifier Google issues for this app; we do not receive your Google password, and we ask Google for nothing beyond your address and that identifier. | Only if you sign in with Google. |
| Display name (e.g. Bob#4271) | Shown to other players in lobbies, matches and chat. | Online play. |
| A random device identifier | Generated by the game. It is not your hardware ID. It keeps you signed in so you are not asked for a code every time you play. | Online play. |
| How you play (gameplay statistics) |
To understand which maps and heroes get played, how long people play for, where they stop, and whether the store works. Each record says what happened — a mission started on a map with a hero, a mission ended in victory or defeat after so many minutes, the store was opened, a purchase failed — together with the random device identifier above, your platform, operating-system version, device model, app version, language and the country your connection comes from. The country is worked out on our server from the address your device connects from, which is not stored: only the two-letter country is kept, so we can see which regions the game is played in. It is not a location — it cannot say a city, let alone a place. The record contains nothing you type and nothing you say. | Whenever the game is played, online or offline. Offline events are sent the next time the game is online. |
| Purchases | If you buy something, the store you bought through — Google Play in the app, Xsolla in the web version — tells us the purchase was made so we can unlock what you paid for and restore it on another device or after a reinstall. For a web purchase we give Xsolla your account identifier, your player name and your account’s email address (you can change the address in the checkout) so the order is linked to your account and Xsolla can send the receipt, and Xsolla tells us the order number and what was bought. The purchase is also counted in the gameplay statistics described above — what was bought, the amount and currency, and how many purchases have been made from this installation, under the random device identifier and nothing else — so we can see how much the store sells and whether it is working. We never see your card, bank or billing details — the payment happens entirely inside Google Play or Xsolla. | Only if you make a purchase. |
| IP address | Used to run the match connection, and kept briefly as a counter to stop automated sign-up abuse. We do not use it to profile or locate you. | Online play. |
Who else sees it
Our game servers are operated by us on hosting in the United States. To deliver sign-in codes and confirmation links we use email providers — Resend and Brevo — who receive the address the message is sent to and the message itself, and act only on our instructions.
If, and only if, you tap Continue with Google, your device contacts Google to sign you in, so Google knows you signed in to Alderun. That is a service you are choosing to use, under Google’s own privacy policy; if you never tap it, the game never contacts Google.
The gameplay statistics described above are also processed by GameAnalytics, which presents them to us as charts. They receive the random device identifier, the gameplay records and the purchase record described above — never your email address, your name, or anything you type — and act only on our instructions. Your device does not contact them: the records go to our own server first.
If, and only if, you buy something in the web version, the checkout is run by Xsolla, which sells the item to you as the merchant of record: it takes the payment, handles tax and sends the receipt, under Xsolla’s own privacy policy. It receives the account identifier, player name and email address described above; the card or other payment details you enter go to Xsolla alone.
That is the complete list for the iOS and Android apps and the Steam version: we do not sell personal data, we share none of it with advertisers, and those versions have no advertising partners. In the browser version an advertising network can be a further recipient, as described next.
Advertising
The iOS app, from the App Store, shows no advertising of any kind, contains no advertising library and uses no advertising identifier. The Android app installed from Google Play is the same. A copy of the Android app installed from somewhere other than Google Play shows a message of ours pointing to the official listing; that is not an advertisement and involves no other party. The desktop version on Steam shows no advertising of any kind either.
The browser version may show advertising, and this policy makes no promise that it does not. What is shown depends on the site the game is played on and on what we have configured for that site: when the game starts and after a match it may show a message of ours, or an advertisement from an ad network, delivered through Google’s advertising libraries (IMA, AdSense) or GameDistribution’s. When an ad network supplies the ad, your browser contacts that network, which receives the address of the page and your IP address and may set cookies, under that network’s own privacy policy (Google’s, or GameDistribution’s). The edition published on GameDistribution’s portals shows their advertising throughout; if you decline tracking there, the game sends us no statistics from that session either.
We do not choose or target these ads by anything we know about you: the game hands a network nothing beyond the address of the site. Whenever a message or an ad is shown, the game records that it was shown, the site it was shown on (on Android, the name of the app that installed the game) and how it ended, as part of the gameplay statistics above. For a sponsored message of ours, views and clicks are counted on our server by day and site only, with no identifier of any kind.
Chat and match data
Chat messages are relayed between players to make chat work and are not kept afterwards. Match data — orders and game state — exists only to run the match and is discarded when it ends.
How long we keep it
Account data is kept for as long as the account exists. Delete the account and the email address and account record are removed. Abuse-prevention counters expire automatically. A failed delivery may keep an email address on a suppression list for up to three months so we stop mailing an address that bounces.
Gameplay statistics are kept in detail for up to 90 days, after which only totals remain — counts and averages that describe no individual player.
Our servers also keep ordinary connection logs, which include IP addresses, for up to 14 days for security and troubleshooting, after which they are deleted automatically. The gameplay statistics described above are collected without an IP address being stored alongside them.
Your choices
You can play without giving us an email at all, as a guest. If you do register, you can change your name, change your email address, or delete your account — all from the Account screen inside the game. Deleting is immediate and permanent. If you are in the UK, EU or a similar jurisdiction you also have the right to request a copy of your data or to object to how we use it; write to us using the address on our contact page.
That includes the gameplay statistics: if you would rather we did not count how you play, write to us with your player name or device identifier and we will exclude you and delete what we already hold for you. On sites whose rules require it (Newgrounds), the game also asks when it starts: choose Turn off and it sends no statistics or crash reports from that browser, and nothing is sent until you have answered.
Children
Alderun is not intended for children under 13, and accounts may not be created by anyone under 13. We ask for your age when you register and do not allow registration below that age. Younger players can still play the game as a guest, which involves no email address and no name you provide.
We do not knowingly collect personal information from children under 13. If you believe a child has registered an account, contact us using the address on our contact page and we will delete it.
Changes
If this policy changes, the new version will be published on this page with a new date.