1. Who We Are

IndiEleven ("we", "us", "our") operates a game backend platform for indie game developers, accessible at indieleven.com and console.indieleven.com/app/. This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our services.

For any privacy-related questions, contact us at: @freddydeveloper on Telegram

2. Data We Collect

We collect two categories of data: Developer Data (from you, the developer using our platform) and Player Data (from end users of your games, processed on your behalf).

Data Type	What We Collect	Purpose
Developer account	Email address, username, hashed password	Account authentication and communication
Billing	PayPal subscription ID, payment status, plan type	Subscription management — we never store card numbers
Game projects	Game name, API key, settings	Service delivery per game
Usage metrics	MAU counts, storage used, leaderboard entries	Plan enforcement and dashboard analytics
Player accounts	Player username, email (hashed), session token	Player authentication in your game
Player data	Scores, cloud saves, achievements, metadata	Game features requested by your game's API calls
Email logs	Email address, timestamp, type of email sent	Deliverability tracking for transactional emails

3. How We Collect Data

• Registration: when you create a developer account on console.indieleven.com/app/
• API calls: when your game sends data to our API (scores, saves, achievements, player sessions)
• Payment: when you subscribe via PayPal — PayPal handles payment processing and shares only the subscription ID and status with us
• Email verification: when you verify your account or reset your password
• Dashboard usage: when you interact with the developer console

4. How We Use Your Data

We use the data we collect exclusively to:

• Authenticate your developer account and your game's players
• Deliver the features of your subscription plan (leaderboards, cloud save, achievements, etc.)
• Track Monthly Active Users (MAU) for plan enforcement
• Send transactional emails (verification, password reset, trial expiry reminders, billing confirmations)
• Calculate storage and usage against your plan limits
• Provide support when you contact us

We do not use your data or your players' data for advertising, profiling, or any purpose beyond running the Service.

5. Data Storage and Security

All data is stored on our dedicated VPS infrastructure. We apply the following security measures:

• All connections to indieleven.com and console.indieleven.com/app/ are encrypted via HTTPS/TLS
• Passwords are hashed using industry-standard algorithms — we never store plain-text passwords
• API keys are generated with cryptographic randomness and are unique per game
• Player session tokens are rotated and stored securely
• Database access is restricted to internal services only — no public database ports are exposed
• Regular encrypted backups are performed and stored securely

6. Data Retention

• Active accounts: data is retained for as long as your account is active
• After trial expiry: data is retained for 30 days, then permanently deleted unless a paid plan is activated
• After cancellation: data is retained for 30 days after your subscription ends, then permanently deleted
• After account deletion: all data is permanently deleted within 7 days
• Email logs: retained for 90 days for deliverability purposes

7. Third-Party Services

We use a limited number of third-party services to operate the platform:

• PayPal: handles subscription billing. When you subscribe, you interact directly with PayPal. We only receive your subscription ID and status. PayPal's privacy policy applies to data you share with them.
• Resend: used to send transactional emails (verification, password reset, billing). Only your email address is shared for delivery purposes.
• Nakama (open source): our backend engine, self-hosted on our own infrastructure. No data is shared with Heroic Labs or any third party via Nakama.

We do not use Google Analytics, Facebook Pixel, or any advertising or tracking SDKs.

8. Your Players' Data (Data Processing)

When your game uses IndiEleven's player API, we process your players' data on your behalf as a data processor. You, as the game developer, are the data controller responsible for:

• Informing your players that their data is processed by IndiEleven
• Having a valid legal basis for collecting player data (e.g., consent or legitimate interest)
• Including IndiEleven in your game's own privacy policy as a sub-processor

Player data is isolated per game and per API key. We do not cross-reference player data between different developer accounts or games.

9. Your Rights

As a developer using IndiEleven, you have the right to:

• Access: request a copy of all personal data we hold about you
• Correction: update your email or username via the Settings page
• Deletion: request deletion of your account and all associated data
• Portability: request an export of your game data in JSON format
• Objection: object to any processing you believe is unlawful

To exercise any of these rights, contact us via Telegram @freddydeveloper. We will respond within 14 days.

10. Cookies

The developer console (console.indieleven.com/app/) uses a single session cookie to maintain your login state. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

The public landing page (indieleven.com) sets no cookies.

11. Children's Privacy

IndiEleven is a developer platform intended for adults. We do not knowingly collect personal data from individuals under the age of 13. If you are a game developer building games for children, you are responsible for ensuring your use of our platform complies with applicable children's privacy laws (such as COPPA in the US or GDPR-K in the EU).

12. International Data Transfers

Our infrastructure is hosted in the European Union. If you access our platform from outside the EU, your data may be transferred to and stored in EU-based servers. By using the Service, you consent to this transfer.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email at least 14 days before any material changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

14. Contact

For any privacy questions, data requests, or concerns, contact us via Telegram: @freddydeveloper

We aim to respond to all privacy requests within 14 days.