Privacy Policy
Idle Plinko & forgegamestudio.com · last updated October 19, 2026
Idle Plinko is a single-player idle game. You never need an email address or password to play. When you pick a player name, the game creates an online game identity for you automatically (a random key kept on your phone; see "What is sent to our server"), and you can delete it any time with "Delete online data" in Settings. A Forge account is optional; you only need one to use the Forge Web Store on this website.
What the game stores on your phone
Your progress, settings and the player name you choose are saved on your device. You can back up or reset them in Settings.
What is sent to our server
Only if you have picked a player name and are online, the game sends: the player name you chose, a random key created by the game on your phone (we store its hash as a game identifier linked to your chosen player name and game records), your level, total stars and minutes played for the world rankings, and a backup copy of your game save (sent every 10 minutes while you play, when you leave the game, and when you tap "Save online"). We do not collect your real name, email, contacts, location or device identifiers. Your player name and scores are shown publicly in the world rankings. The automatic backup includes your game progress and records of which one-time purchases you own, but not payment details. New online backups are encrypted using a key derived from your phone's private key; the new backup process does not store that private key on our server. Older backups may remain unencrypted until a new upload replaces them. We keep your name, scores and online save until you delete them (see below).
World events. The game sends the number of balls you land during world events, linked to your scrambled player key, so they can be added to everyone's total and you get your rewards. We keep these counts until you delete your online data. Other players only see the event's overall total and how many players joined.
Rare pet roll feed. If you have a player name and roll a pet skin at 1 in 250,000 or rarer, the game posts it to the world feed automatically: your player name and #number, the pet, its rarity and when you rolled it are shown publicly to other players. We keep the newest 500 feed posts.
Anonymous gameplay statistics. If "Share anonymous gameplay stats" is on (Settings > About; it is off unless you turn it on), the game sends anonymous statistics about how the game is played: which game screens and steps are reached (for example the first upgrade, levels and Ascensions), session length, whether the app closed unexpectedly, whether optional reward videos were watched, and purchase outcomes (started, completed, cancelled; never payment details). They carry a random number made by the app for this purpose only. They are not linked to your player name, your player key, your online save or Game Center, are not used for advertising or tracking, and are not shared with anyone. We keep them for 90 days and then delete them. You can turn them off at any time in Settings > About; turning them off deletes any statistics not yet sent and the app's random number.
The game also downloads the current world event and the feed; those requests don't include your player name or key.
To stop abuse, our server keeps salted hashes of the network address used to create a new player, rather than the address itself. For IPv6, network portions are used. These registration records are deleted after about 24 hours. For world event limits, the server keeps a network hash and that hour's ball count. For rare pet roll feed limits, it keeps a network hash, request type and time. These rate-limit records are not linked to your player and are deleted after about 2 hours.
Ads (optional)
Watching a rewarded ad is optional. Ads may be loaded before you choose to watch. Google AdMob may collect device and account identifiers where applicable, approximate location inferred from your IP address, app interactions and diagnostic information to provide and measure ads and prevent fraud, as described in Google's policy. The game checks Google's consent status before requesting ads and shows a consent form when Google's consent system requires one. Where available, you can change your choices using Ad privacy choices in Settings. On iPhone, you can manage tracking permissions in Settings. On Android, you can reset or delete your advertising ID in Settings, usually under Privacy > Ads. These advertising-ID controls do not delete your online game identity or previously collected data.
Purchases and Game Center
In-app purchases are handled by Apple on iPhone and by Google Play on Android; we do not receive your payment-card or bank-account details. If you use Game Center (iPhone only), Apple handles your Game Center profile.
Forge accounts and the Web Store (optional)
If you make a Forge account on forgegamestudio.com/store, we store your email address (to send sign-in codes and to identify your account), your birth year (you must be 13 or older; if you're under 13 we refuse the sign-up and store nothing), when the account was made and last used, and, if you link your game, which game player it's linked to. Sign-in codes and sign-in tokens are stored only as hashes. Sign-in emails are sent through our email provider (Resend).
If you buy on the Web Store, payment is handled by Stripe, which collects your card and billing details under Stripe's privacy policy; we never see your card number. We keep an order record: what you bought, the price, the date, the order status, Stripe's payment reference, the game player it was delivered to, and whether you confirmed a parent's OK (under 18). We also keep the rewards waiting for your game until it collects them, and which weeks you claimed the free web gift. To stop abuse, the server keeps short-lived rate-limit records (hashed email or network, deleted after about a day).
We use this only to run your account, deliver what you bought, handle support, refunds and chargebacks, and keep the sales records the law requires. We don't sell it, and we don't use it for advertising.
This website
forgegamestudio.com doesn't use analytics, trackers or advertising cookies. The only cookie is a sign-in cookie for invited web store testers. Like any website, our hosting provider (Cloudflare) processes basic request data such as IP addresses to deliver and protect the site.
Deleting your data
In the game, open Settings and tap "Delete online data" to remove your name, scores, online save, world event contributions and rare roll feed posts from our server immediately. Balls you already added stay in an event's overall total, which isn't linked to you. Your player name stays on your phone, but the game stays offline (no rankings, online save or world events) until you set your player name again in Settings or your Profile; doing that signs you up as a new player. Anonymous gameplay statistics are not linked to you, so they can't be looked up or deleted per player; they are deleted automatically after 90 days, and you can stop them in Settings > About. Deleting the app removes everything stored on your phone. You can also email us and we'll delete it for you.
Forge account: on the store page you can unlink your game or delete your Forge account at any time. Deleting it removes your email, birth year, sign-ins, link and any gifts or purchases not yet collected, right away. "Delete online data" in the game also unlinks your account. We keep order records (without your email or account) for as long as the law requires for sales records, usually 7 years.
One exception, to stop cheating: if an account posts scores that are impossible, we keep its hashed game identifier, the time it was flagged and the reason (no name, score or address) after deletion, so the same account can't reappear on the rankings by deleting and signing up again.
Children
The game does not knowingly collect personal information from children. Forge accounts are for people 13 and older, and under-13 sign-ups are refused without storing anything.
Changes
If this policy changes, we'll update the date at the top of this page.