Games LogbookGuest

Privacy Policy

Effective date: October 28, 2026 · Version 1.1

The short version

  • You can play every game without an account. Accounts are optional and free.
  • An account needs only a username and password. We don’t ask for your email, real name or birth date.
  • We don’t use advertising or analytics cookies or trackers, and we don’t sell or share personal information.
  • Profiles are private by default. You choose whether to make yours public.
  • Optional coin packs are paid on Stripe’s secure checkout. We never see or store your card number.
  • Idle Isle is for people 13 and older. We don’t knowingly collect personal information from children under 13.

Who we are

Idle Isle (“we”, “us”) runs this website and the games on it. Contact: [email protected].

Playing as a guest

Without an account, games save your progress, settings, Logbook points, badges, achievements, cosmetics, your Home room and your “recently played” list in your browser’s local storage on your device. This data isn’t sent to us. You can delete it any time with “Reset guest progress” on the Logbook page, or by clearing your browser’s site data.

Like any website, our hosting provider, Cloudflare (Cloudflare Pages), processes basic technical information (such as IP address and browser type) to deliver pages and protect against abuse. We don’t use it to build profiles, and we don’t combine it with other data.

Accounts

If you create an account, we store:

  • Username that you choose. Please don’t use your real name. Usernames go through a word filter and can’t be changed later.
  • Password, stored only as a salted one-way hash. We can’t see it.
  • Recovery codes (optional), stored only as one-way hashes.
  • Account creation date, shown as “Member since”.
  • Game progress: achievements, Logbook points and tier, play time, chosen cosmetics, your Home room and what you’ve collected for it.
  • Settings, such as whether your profile is public and whether you appear on the Top 500.
  • Sign-in sessions, kept for up to 30 days in a secure cookie that’s needed to keep you signed in.

Age check. Sign-up asks for your birth month and year. We use it once to check that you’re 13 or older and don’t store it. If the answer is under 13, a temporary cookie that’s cleared when the browser closes stops sign-up on that browser.

Security. To stop abuse (such as password guessing or spam sign-ups) we keep short-lived rate-limit records keyed by a scrambled (hashed) form of your IP address, which expire within a day. We don’t store IP addresses. Sign-up is protected by Cloudflare Turnstile, which checks that you’re not a bot; Cloudflare processes technical information to do this under its own privacy terms.

Play time and site statistics

When you’re signed in and a game is open, the page tells our server every few minutes which game is open and whether you’ve been actively using it or leaving it to idle. We use this to count play time for your Logbook and hours badges, to make sure only one game counts idle time at a time, and to check achievements are fair. We keep daily totals per game and the days your account was active (pruned after about 400 days).

We look at totals across all players (for example, number of players, hours played per game, and how many people come back) to understand which games people enjoy. These statistics don’t identify individual players to anyone outside our team. We don’t use third-party analytics.

Profiles and the Top 500

  • Your profile shows your username, rank, member-since date, hours played, achievements and badges. It’s private by default; only you can see it until you make it public on your account page.
  • The Top 500 shows the username, score, hours played and the date of players who reach the top tier. If your profile is private, the list shows your username only, with no link. You can turn off “Show me on the Top 500” at any time.

Home, Shells and coins

Your Home room layout and the items you’ve collected are saved in your browser, and in your account if you’re signed in. Shells and coins are earned by playing and visiting. Your balances are worked out from your achievements and visits, and we keep a record of what you’ve spent them on. Shells can’t be bought. Coins can also be bought in the Coin Shop (see Purchases below).

Purchases

Coin packs are paid through our card processor (Stripe) on its own secure checkout page. We never see or store your card number. Stripe handles your payment details under its own privacy policy. We keep a record of what you bought, when, the amount and the processor’s order number, so we can deliver coins, handle refunds and meet tax and legal obligations.

Ads and cookies

To keep the games free, some pages (the game list, below the game frame on game pages, and the leaderboard) show a small banner ad from Google AdSense. Ads never appear on your Home or inside a game, there are no pop-ups, and ads never play sound. You can also choose to watch an optional “tide bonus” ad for a few Shells, up to 3 times a day. If you skip it, nothing happens.

Because Idle Isle is for teens, we only request non-personalized ads. These are chosen from the page you’re on and your general location (like your country), not from your browsing history or a profile of you. The ad provider may still use cookies or similar storage for frequency capping, fraud prevention and counting ads. Where the law requires it (for example in the EU, UK and Switzerland), we ask for your consent first. Signed-in keeper and staff accounts see no ads.

We remember that you dismissed the ads notice in your browser’s local storage. Idle Isle itself doesn’t use advertising cookies.

Sharing

We don’t sell or rent personal information, and we don’t share it for targeted advertising. We use Cloudflare to host the site and store account data (Cloudflare Pages, Workers and D1), under terms that limit its use of the data. We may disclose information if the law requires it.

Retention and deletion

We keep account data while your account is active. You can delete your account from your account page at any time; this removes your account data from our database immediately, and it rolls out of backups within 30 days. Because we don’t have your email address and can’t warn you first, accounts that haven’t been signed in to for 24 months may be deleted.

Children’s privacy (COPPA)

Idle Isle is intended for users 13 and older. Sign-up uses a neutral age screen, and people under 13 can’t create an account. They can still play as a guest, and guest progress stays on their device. We don’t collect email addresses, real names or birth dates from anyone.

If we learn that we’ve collected personal information from a child under 13, we’ll delete it promptly. Parents or guardians who believe this happened can contact us at [email protected].

Your choices and rights

  • Download a copy of your account data, make your profile public or private, leave the Top 500, or delete your account from your account page.
  • Clear guest data at any time from the Logbook page or your browser settings.
  • Questions or privacy requests: email [email protected]. Since we don’t store emails, tell us your username, and we may ask you to confirm you own the account.
  • Depending on where you live, you may have extra rights (for example under GDPR or US state privacy laws). Contact us and we’ll help.

Security

The site is served only over HTTPS, passwords and recovery codes are hashed, and we keep access to our systems limited. No system is perfectly secure.

Changes

If we make meaningful changes, we’ll update this page and the effective date. Version 1.1 adds accounts, play-time statistics, profiles, the Top 500, and Home with Shells and coins.