Idle Hero Ascension currently uses only essential cookies and local browser storage required to run the game, keep accounts secure and remember basic game interface choices.
We use essential session cookies for login, guest accounts, account security and form protection. A random first-party browser security ID is also used to help enforce the one-account-per-person rule. Without these cookies, the game cannot keep you signed in, process game actions safely or reliably investigate account abuse.
Your browser may store small interface preferences such as chat state, notification settings or cached HUD values. These are used to make the game feel smoother and are not used for advertising.
We do not currently use advertising cookies, third-party tracking cookies or analytics cookies. If this changes later, optional tracking will require a separate choice before it is used.
Account names, email addresses, character progress, items, guild activity, market listings, chat messages, feedback posts, referral relationships and completed Crystal or QoL Token purchase records are stored so the game and its reward systems can function.
Crystals spent on visible Server Buff purchases appear as a total in the public Server Buff Supporters ranking. Purchases announced anonymously are excluded from that ranking and its titles. Completed live Shop purchases can unlock supporter titles, but payment amounts and a payment ranking are not public; a title is shown only when the player activates it.
PayPal components are loaded only when PayPal Checkout is available. When you start a payment, PayPal processes payment, account, device and network data under PayPal's Privacy Statement. We store the PayPal order and capture identifiers, package, amount, currency and payment status. We do not receive your PayPal password or full funding details.
Completed payments, refunds and reversals are retained as required for accounting, security, fraud prevention and the correct delivery of purchased Crystals and referral rewards.
To protect accounts and the game economy, unusually frequent commands, failed security checks and required human verifications may be recorded for review. Sign-in activity may be associated with network addresses and a random first-party browser security ID to detect accounts operated together. The browser ID and browser-type signatures are stored only as one-way keyed hashes; no hardware fingerprint or third-party advertising identifier is created. Authorized administrators may compare these limited signals with referrals, Guild membership, direct messages, transfers and Market trades. These signals support manual review and never ban an account automatically.
Provider and contact information can be found on the Impressum page.