Privacy Policy

Last updated: 20 September 2026

Paycheck Tycoon operates the game and its online account service. For privacy questions or requests to access, correct, or delete account information, email support@paychecktycoon.com.

Information we use

When you register, we process your email address, display name, account identifier, password and email verification code. The server stores a password hash rather than your password. Authentication uses access and refresh tokens; the server keeps refresh token records for session management and revocation. The app stores login tokens and basic account details in platform secure storage. Offline game data stays on your device; online account and multiplayer data are processed by the server.

Online play creates profile and ranking data such as Online Elo, wins and losses, presence while connected, invitations, matchmaking state, match results, turns and game state. Completed match records may remain for opponents' histories.

For Premium purchases, we process entitlement status and Google Play subscription records, including a purchase token, token hash, product, state and purchase dates. The token is stored encrypted while linked to an active account. We verify purchases with Google Play and receive purchase updates.

Why and with whom

We use this information to create and secure accounts, deliver email verification and password reset messages, run online play and rankings, verify purchases, provide support, and investigate abuse or purchase fraud. Account verification and reset email is sent through the configured SMTP delivery provider. Support email sent to support@paychecktycoon.com may be processed and forwarded by an email-forwarding provider before it reaches support. The backend is hosted on DigitalOcean. Google Play processes subscription purchases and purchase verification.

Retention and deletion

Account deletion removes account identity, online profile, ranking presence, active online state, and Premium entitlement. Completed matches remain for opponents with the former player displayed as "Deleted player". Only the minimal retained purchase record - provider, product, purchase-token hash, state and purchase/expiry and anonymization dates - may remain for up to 2,190 days (about six years) for fraud, replay, refund and accounting purposes; a scheduled purge removes expired records. Operational and security logs have a target retention of about 30 days. Deleted account data may remain temporarily in rotating backups until those backups expire under the operational backup policy. We do not remove individual records from immutable historical backups before rotation; a fixed backup period is not established here. See Account and Data Deletion for instructions and further detail.

Security and international processing

We use account authentication, server-side access checks, session revocation, and controls around purchase verification. No internet service can promise absolute security. Hosting, email delivery, and Google Play processing may involve processing outside your country. Contact us for information about the services used for your account.

Children and changes

Paycheck Tycoon is not directed to children. If you believe a child has provided account information, contact us to request review or deletion. We may update this policy as the service changes; the date above shows the current version.

Contact

Email support@paychecktycoon.com for privacy requests.