This policy explains what information the LuckForge mobile game (“the Game”) and the website luckystudiosgaming.com (“the Site”) collect, why, who we share it with, and the choices you have.
1. Who we are
LuckForge is developed by Kfir Shlomi, an individual developer based in Canada, under the name Lucky Studio Gaming (“we”, “us”). Contact: support@luckystudiosgaming.com · 135 Roseheath Drive, Maple, Ontario L6A 1Z4, Canada
We are the controller of the personal data described here.
2. The short version
- You play without an email address or password. The Game gives you an anonymous player ID.
- If you choose Sign in with Apple or Sign in with Google, we receive only an account identifier from them, never your name, email or password.
- Your progress is saved in the cloud so it is not lost.
- Chat messages are delivered live and are not kept as a history by the Game.
- We never see your payment card. Apple handles every payment.
- Ads may be personalized only if you allow tracking in Apple’s prompt.
- You can delete your account and data at any time from inside the Game.
- We do not sell your personal information.
3. Information we collect
3.1 Information created when you play
| What | Why we use it | Legal basis (EU/UK) |
|---|---|---|
| Anonymous player ID (created by Unity Authentication when you first open the Game; no email, phone or password) | To identify your saved game and your account | Performance of our contract with you (providing the Game) |
| Game progress: heroes, gear, skills, relics, perks, chests, currencies, missions, levels, rewards, the player name and avatar you choose, and the list of players you blocked | To save and restore your progress across sessions and devices | Contract |
| Sign-in link (only if you choose Sign in with Apple or Sign in with Google): the account identifier Apple or Google gives the Game, linked to your player ID. We ask Apple and Google for no name and no email | So the same Apple or Google account brings back your progress after a reinstall or on a new device | Contract |
| Purchase records: product ID and the store’s transaction ID | To deliver what you bought, exactly once, and to restore lifetime purchases | Contract; legal obligation (tax and consumer law) |
| Consent records: which version of this Privacy Policy and of the Terms of Service you accepted, when (by our server’s clock), how you entered the Game (guest, Apple or Google), the app version and the platform. The last 20 acceptances are kept. In Europe, also your answer to the ad-consent question | To show we have your agreement and respect your choice | Legal obligation; legitimate interest |
3.2 Chat
The Game has text chat rooms (a world chat, and a room for each guild).
- When you use chat, your player name, player ID and the messages you send are passed through Unity Vivox to the other players in that room who are online.
- Chat is text only. The Game never turns on or asks to use your microphone.
- The Game does not store a chat history: the chat starts empty every time the Game is opened.
- Messages are limited to 50 characters, English letters only, and pass through a word filter.
If you report a player, the report goes to Unity’s moderation service so we can review it. It includes the reported player’s ID, the reason you chose (one of six, such as spam or hate speech), the chat room, and your own player ID. The text of messages is not included.
Legal basis: contract (providing chat); legitimate interest (keeping players safe).
3.3 Advertising
The Game shows ads through Unity LevelPlay and the ad networks it works with (today: Unity Ads and the ironSource Exchange). LevelPlay also includes the ironSource Ad Quality SDK, which checks the ads that are shown for quality and safety.
These partners may collect:
- your device’s advertising identifier (IDFA);
- device type and operating system;
- IP address and approximate location derived from it;
- language;
- how you interact with ads.
On iPhone, the advertising identifier is shared only if you allow it in Apple’s “Allow app to track your activity” prompt (App Tracking Transparency). If you decline, you still see ads, but they are not personalized using that identifier. You can change your choice at any time in iPhone Settings → Privacy & Security → Tracking.
In the EU, the EEA, the UK and Switzerland, the Game asks before ads start whether ads may be personalized. If you say no, you see only non-personalized ads, and Apple’s tracking prompt is not shown. You can change this choice at any time in the Game under Settings → Ad Choices.
Buying AD Remove stops interstitial ads. Rewarded ads are then skipped and their reward is given directly.
Legal basis: consent for personalized advertising; legitimate interest for non-personalized ads and measurement.
3.4 Support requests
When you contact us by email (support@luckystudiosgaming.com), we receive your email address and what you write.
The Support screen in the Game does not send anything by itself: it opens your own email app with a message already written, and you decide whether to send it. That message contains:
- the type of problem you chose;
- your player ID;
- the app version, and your device model and operating system version;
- what you write.
Email sent to support@luckystudiosgaming.com is forwarded by Cloudflare Email Routing to our support inbox at Google (Gmail), where it is kept.
We use this only to answer you.
3.5 Technical information
- No analytics or crash reporting. Unity Analytics, Unity crash reporting and performance reporting are turned off in the Game. If you have chosen to share analytics with app developers in your iPhone settings, Apple may share crash reports with us under Apple’s own privacy policy.
- On your device, the Game keeps your saved game and its backup, your sound, control and display settings, and a small clock-sync value. The Unity, Vivox and LevelPlay components also keep their own technical data on the device.
- The Site is hosted by Cloudflare. Cloudflare processes your IP address and the pages you open, for security and delivery.
- Optional website cookies (analytics and marketing) are used only if you accept them in the cookie banner. See the Cookie Policy.
3.6 What we do not collect
We do not collect:
- your name, email or phone number (unless you write to us);
- contacts, photos, microphone or camera;
- precise location;
- payment card details.
The Game does not send push notifications.
4. Who receives your information
| Recipient | What for |
|---|---|
| Unity Technologies, including its ironSource business (Authentication, Cloud Save, Cloud Code, Vivox, Moderation, LevelPlay, Unity Ads, ironSource Exchange) | Accounts, cloud save, server logic, chat, reports, ads |
| Apple | App Store payments, purchase restoring, app distribution, and Sign in with Apple if you choose it |
| Sign in with Google if you choose it | |
| Our support inbox (Gmail), where support emails are kept | |
| Ad networks working through LevelPlay | Showing and measuring ads (section 3.3) |
| Cloudflare | Hosting the Site, and forwarding emails sent to our support address (Cloudflare Email Routing) |
| Authorities | Only when the law requires it |
Each of these companies handles data under its own privacy policy. We do not sell personal information, and we do not share it for money.
5. International transfers
Our service providers process data on servers in other countries, including the United States, outside Canada, Israel and the European Economic Area. Where the law requires it, these transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses.
6. How long we keep it
| Data | How long |
|---|---|
| Account, progress, purchase records | Until you delete your account |
| Chat messages | Not kept by the Game. Unity Vivox may keep technical records under its own policy. |
| Reports | As long as needed to handle the report and protect players |
| Support emails | Up to 24 months after the conversation ends |
| Records we must keep by law (for example tax) | As long as the law requires |
7. Deleting your account
In the Game, while connected to the internet: Settings → Account Delete, then type DELETE and tap Confirm.
This erases:
- the saved game on your device;
- its copy in the cloud (Unity Cloud Save);
- your Unity player account, together with its link to Sign in with Apple or Sign in with Google.
You can also remove LuckForge’s access from your Apple ID (Settings → your name → Sign in with Apple) or your Google Account (Security → Third-party apps and services).
This cannot be undone. Purchases are not refunded by deleting the account, and lifetime purchases can be restored later with Settings → Restore, using the same Apple ID.
Deleting needs an internet connection to erase the cloud copy and your Unity account. If you delete while offline, or cannot open the Game, email support@luckystudiosgaming.com from the address you want us to reply to, with your player ID (shown in Settings) if you have it.
8. Your rights
Depending on where you live (for example under the GDPR in the EU and UK, PIPEDA in Canada, the Israeli Privacy Protection Law, or the CCPA/CPRA in California), you may have the right to:
- access a copy of your data;
- correct your data;
- delete your data;
- object to or restrict some uses of your data;
- receive your data in a portable format;
- withdraw consent at any time (for tracking: iPhone Settings → Privacy & Security → Tracking);
- complain to your data-protection authority. In Canada: the Office of the Privacy Commissioner of Canada. In Israel: the Privacy Protection Authority.
To use any of these rights, email support@luckystudiosgaming.com with your player ID. We answer within 30 days.
California residents: we do not sell personal information. We do not “share” it for cross-context behavioral advertising unless you allow tracking in Apple’s prompt.
9. Children
The Game is meant for players 13 and older. We do not knowingly collect personal information from children under 13.
In countries where the age of digital consent is higher (up to 16 in parts of the EU), players under that age need a parent’s or guardian’s permission.
If you believe a child under 13 is using the Game, contact us and we will delete the account.
10. Security
Data is sent over encrypted connections (HTTPS/TLS) and stored with our service providers, who protect it with industry-standard measures. No system is perfectly secure, so we cannot guarantee absolute security.
11. Changes to this policy
When we change this policy, we update the version number and the date at the top. If the change is important, the Game asks you to review and accept the new version.
12. Contact
support@luckystudiosgaming.com Kfir Shlomi, 135 Roseheath Drive, Maple, Ontario L6A 1Z4, Canada