Last updated: July 18, 2026
1. Controller
The controller is:
Jonas Feldmann
Heinrich-Leggewie-Str. 5
48249 Dülmen
Germany
Email: [email protected]
2. Scope and principles
This Privacy Policy applies to industrygo.de and the IndustryGO app for Android and iOS, including the related game servers, support and communication features. We process personal data only as needed to provide the game, process purchases, communicate, keep the service secure or comply with legal obligations.
IndustryGO does not sell personal data. We do not use data to track users across apps or websites owned by other companies. On iOS, we do not use the advertising identifier for cross-app tracking. Ads are delivered under the limited advertising policy described below.
3. Website and server logs
When the website or app API is accessed, our systems process data such as IP address, date and time, requested page or API function, HTTP status, transferred data volume, referrer, browser, operating system, device, app and version information. This is necessary to deliver the website and game, investigate errors, defend against attacks and prevent abuse (Art. 6(1)(b) and (f) GDPR).
4. Account, sign-in and gameplay
Depending on the sign-in method and use, we process:
- email address, username, password hash, internal user ID and verification status;
- for Sign in with Google, the provider ID and profile data released by Google, such as email address and name;
- for Sign in with Apple, the provider ID and the email address or Apple private relay address you release, and your name where provided;
- game progress, level, experience, inventory, virtual currency, buildings, production, market and trade activity, rankings and events;
- session, device, IP and security data, such as access tokens, app version, operating system and request times and results.
Google and Apple receive technically necessary request data when their sign-in services are used and process it under their own privacy policies. Account and gameplay processing is based on Art. 6(1)(b) GDPR; security and abuse prevention are additionally based on Art. 6(1)(f) GDPR.
5. Precise location and OpenStreetMap
IndustryGO is location-based. If you grant location permission, the app processes your precise device location to display your map position, check distance and location-based actions, determine resource fields and detect manipulation such as GPS spoofing. You can withdraw location permission in your device settings; location-based features will then be unavailable or limited.
The map uses data from OpenStreetMap. When map tiles are requested, the map servers in use may receive technically necessary data such as IP address, time, requested map area and device information. Map tiles and sections may be cached temporarily on the device.
The legal basis is Art. 6(1)(b) GDPR and, where device permission or consent is required, Art. 6(1)(a) GDPR. Precise location is not used for advertising or cross-app tracking.
6. Push notifications and Firebase Cloud Messaging
If you allow push notifications, we use Firebase Cloud Messaging (FCM), a Google service, to send gameplay, account, chat or service notices to your device. A push token, app and device information and delivery data are processed. On Apple devices, Apple Push Notification Service (APNs) is also technically involved. You can disable notifications at any time in device settings.
The legal basis is your consent under Art. 6(1)(a) GDPR or, for notices you explicitly request and that are needed for the service, Art. 6(1)(b) GDPR.
7. Advertising, Google Mobile Ads and UMP
The app may display ads through Google Mobile Ads. Google User Messaging Platform (UMP) is used to request and store required consent and privacy choices. Consent status, approximate region, device and app information, IP address, ad interactions and technical diagnostic data may be processed.
Our advertising policy is limited: without valid consent, only limited or non-personalised ads are requested where Google offers them in the relevant region. We do not use precise location for advertising. IndustryGO does not combine ad data for its own purposes with data from other companies' apps or websites and does not permit cross-app tracking. On iOS, the advertising identifier is not used to track you across other companies' apps and websites.
You can change or withdraw consent for the future in the app's privacy options. Processing before withdrawal remains lawful. Consent-based advertising relies on Art. 6(1)(a) GDPR; technically necessary delivery, fraud prevention and billing rely on Art. 6(1)(b) or (f) GDPR.
8. In-app purchases and subscriptions
Purchases and subscriptions are processed through Google Play on Android and Apple's in-app purchase system on iOS. Google or Apple processes payment details under its own responsibility. IndustryGO does not receive full card or bank details. We receive information such as product ID, transaction or receipt, purchase status, time, store, country/region and data needed to verify, grant, restore and protect purchases against abuse. Purchase and entitlement data is kept as needed to perform the contract, provide customer support and meet statutory record-keeping duties.
9. Chat, user-generated content and support
If you use chat, profile, reporting or support features, we process the messages, names, content, attachments, report reasons and related metadata you submit. This allows us to deliver and display content, handle support, moderate the service and protect other users. Do not send passwords or unnecessary sensitive data.
The legal basis is Art. 6(1)(b) GDPR and, for moderation, preservation of evidence and abuse prevention, Art. 6(1)(f) GDPR.
10. Local storage on the device
The app stores technically necessary data locally, such as login and session information, user ID, app settings, map view and cache, filters, synchronisation and notification settings and recently displayed game and chat information. Depending on the operating system, this data remains until sign-out, deletion in the app or uninstalling the app.
11. Hosting, recipients and international transfers
The website, app API and database are hosted by IONOS. Other recipients, only where required for a feature, include Google (Firebase Cloud Messaging, Google sign-in, Google Mobile Ads/UMP and Google Play), Apple (Apple sign-in, APNs and in-app purchases), map/OpenStreetMap services and technical processors acting on our instructions.
Some providers may process data outside the European Economic Area, particularly in the United States. Where required, this is based on an adequacy decision, safeguards such as EU Standard Contractual Clauses or a statutory exception.
12. Retention and deletion
- Account and game data is generally kept for the life of the account.
- Push tokens are deleted or made unusable when push is disabled, you sign out, the token becomes invalid or the account is deleted, subject to a short technical transition period.
- Support and moderation data is kept as long as needed to handle the case, defend legal claims or prevent abuse.
- Purchase and billing records may be kept longer to comply with statutory retention duties.
- Server and security logs are deleted or anonymised regularly unless a security incident or legal duty requires longer retention.
You can delete your account in the app or follow the instructions on Delete account. Once a request is clearly identified and confirmed, we generally process it within 30 days. Data subject to legal retention duties or needed to address specific abuse is restricted until the purpose ends and then deleted or anonymised.
13. Your rights
Subject to the GDPR, you have rights of access, rectification, deletion, restriction, data portability and objection. You may withdraw consent at any time for the future. To exercise your rights, email [email protected]. You also have the right to lodge a complaint with a data protection authority.
14. Security
We use technical and organisational safeguards, including encrypted HTTPS transmission, access controls, receipt validation, security logging and anti-manipulation measures. No system can guarantee absolute security. If you suspect a security issue, contact [email protected].
15. Changes
We update this Privacy Policy when features, providers or legal requirements change. The current version is available on this page.