This policy covers Ironbound on Steam and Ironbound: Relics on the App Store and Google Play, and the servers they connect to. Secret Level SRL runs the game and is responsible for the data described here. You can reach us at contact@ironboundgame.com.

In short: we keep what the game needs to run your account, your matches and your purchases. We do not show ads, we do not track you across other apps or websites, and we do not sell your data.

What we collect

• Your account. When you start playing we create an account with a random player ID. If you register it, we also store your email address, your password (only as a one-way hash, never in readable form) and the hero name you choose. Your hero name is public: other players see it in matches, lobbies and on the ladder.
• Your game. Your collection, gold, hero builds, progress, quests, ranking and match results, and records of the matches you play, which we use to run the ladder and balance the game.
• Your purchases. What you bought, when, and the store's transaction ID. Payment is handled entirely by Apple, Google or Steam; we never see your card or payment details. On iPhone and iPad, the game sends us the App Store receipt, which we check with Apple before granting the item.
• Lobby chat. Messages you type in a private game lobby are passed through our servers to the other player in that lobby. We do not store them with your account.
• Technical logs. Like most online services, our servers record connections, including IP addresses, in logs used to keep the game running and to investigate problems. These are not linked to your account and are deleted regularly.
• Bug reports you send. The in-game Report bug button opens an email to us with the game's log attached, which includes your account's email address. Nothing is sent unless you choose to send that email.

What we do not collect

No advertising identifiers, no device identifiers, no location, no contacts, and no analytics or advertising SDKs. On iPhone and iPad, Game Center achievements are handled by Apple and nothing from Game Center is sent to our servers.

Why we use it

To run your account and sign you in, to match you with other players and run the ladder, to deliver what you buy, to answer you when you write to us, to keep the game secure and fair, and to balance the game. Under the GDPR, we rely on the contract with you (providing the game) and on our legitimate interest in running a secure, fair service.

Who we share it with

Only the service providers the game runs on: our server host (Hetzner, in Germany), the service that sends our account emails, and the store you bought from (Apple, Google or Valve), which we contact to confirm your purchases. They process the data for us and for no other purpose. We do not sell or rent personal data, and we do not share it with advertisers or data brokers.

How long we keep it

We keep your account and its data for as long as the account exists. When you delete your account, we delete your email address, hero name, collection, progress and match history. We keep purchase records only as long as tax and accounting law requires.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. See Delete your account for how deletion works, or write to contact@ironboundgame.com for anything else. If you are in the EU and think we have not handled your data properly, you can complain to your data protection authority; in Romania that is the ANSPDCP.

Children

Ironbound is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has registered an account, write to us and we will delete it.

Changes

If this policy changes, we will update this page and the date below. Significant changes will also be announced in the game.

Last updated 25 September 2026.