Risk the Fog: Idle Expedition

Privacy Policy

Last updated: August 28, 2026

This Privacy Policy describes how Benum Labs AS ("we", "us", or "our") collects, uses, and protects information when you use Risk the Fog: Idle Expedition ("the App") on Android or iOS.

1. Data Controller

Benum Labs AS
Org. nr. 837 864 992
Norway
Email: privacy@benumlabs.com

2. Overview

Risk the Fog is an online game that uses cloud services to save progress, verify purchases, and deliver a fair gameplay experience. We do not require you to create an account with your name or email address. The App creates an anonymous account automatically on first launch.

We collect only the data necessary to operate the game, improve stability, and process optional purchases and rewarded ads.

3. Data We Collect

3.1 Account & Game Progress

  • Anonymous user ID — assigned by Firebase Authentication when you first open the App
  • Game progress — harbor upgrades, fleet state, active voyages, currencies, inventory, and expedition history stored in Google Cloud Firestore
  • Recovery code — an optional code we generate so you can restore progress if you lose access to your device. The code is shown once in the App and stored locally on your device; we store only a lookup mapping on our servers

3.2 Analytics

We use Firebase Analytics to understand how players interact with the App. This may include:

  • Gameplay events (e.g., expedition dispatch, decision choices, building upgrades)
  • App version, device type, and operating system
  • General usage patterns and session activity

We do not send personally identifiable information such as your name or email address to analytics.

3.3 Device & Security

We use Firebase App Check to verify that requests to our servers come from genuine App installations. This helps prevent abuse and cheating. App Check may collect device attestation signals provided by Google or Apple.

3.4 Local Storage

The App stores a local cache on your device (via AsyncStorage) to support offline play and faster loading. This cache mirrors game progress and is synchronized with our cloud servers when you are online.

3.5 Push Notifications

If you grant notification permission, we store a push notification token to alert you when expedition legs complete or other time-sensitive game events occur. You can disable notifications at any time in your device settings.

3.6 In-App Purchases

When you make a purchase through Google Play or the Apple App Store, we receive:

  • Purchase and subscription status
  • Product identifiers (e.g., Black Pearl packs, charter unlocks)
  • Transaction verification data required to grant virtual goods

Payment processing is handled entirely by Google or Apple. We do not receive or store your credit card or payment details.

3.7 Rewarded Ads

The App offers voluntary rewarded video ads through Google AdMob. When you choose to watch an ad:

  • AdMob may collect advertising identifiers and interaction data according to Google's policies
  • We use opaque per-claim identifiers for ad reward verification — not your Firebase account ID
  • Ad rewards are verified server-side before any in-game benefit is granted

3.8 Data We Do Not Collect

  • Your name, email address, or phone number (unless you contact us directly)
  • Precise location data
  • Contacts, photos, or files from your device
  • Health or biometric data

4. How We Use Your Data

We use collected data to:

  • Save and synchronize your game progress across sessions
  • Operate server-authoritative expedition outcomes and prevent cheating
  • Process and verify in-app purchases and ad rewards
  • Send push notifications you have opted into
  • Analyze gameplay patterns to improve stability and balance
  • Respond to support requests and enforce our Terms of Service

5. Legal Basis (EEA/UK Users)

Under the GDPR, we process your data on the following bases:

  • Contract performance — to provide the game, save progress, and deliver purchased virtual goods
  • Legitimate interests — to maintain security, prevent fraud, and improve the App
  • Consent — for push notifications and personalized advertising where required by your device settings

6. Third-Party Services

The App uses the following third-party services, each governed by their own privacy policies:

  • Google Firebase (Authentication, Firestore, Analytics, App Check) — Firebase Privacy Policy
  • Google AdMob (rewarded ads) — Google Privacy Policy
  • Google Play Billing / Apple App Store (in-app purchases) — governed by Google or Apple's respective policies

7. Data Retention

We retain your game progress and account data for as long as your account is active or as needed to provide the App. Analytics data is retained according to Firebase's default retention settings (typically up to 14 months).

If you request deletion of your data, we will remove your account and associated progress from our servers within a reasonable timeframe, subject to legal retention requirements.

8. International Transfers

Your data may be processed on servers operated by Google (Firebase) located outside the European Economic Area, including in the United States. Google participates in applicable data transfer frameworks and provides standard contractual clauses where required.

9. Your Rights

If you are in the EEA, UK, or other jurisdictions with data protection laws, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Data portability (where applicable)
  • Withdraw consent where processing is consent-based
  • Lodge a complaint with your local data protection authority

To exercise these rights, contact us at privacy@benumlabs.com.

10. Children's Privacy

The App is not directed to children under 13 (or the applicable age of digital consent in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), server-side validation of game actions, and Firebase security rules. No method of transmission or storage is 100% secure, but we work to maintain reasonable safeguards.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the revised policy.

13. Contact

If you have questions about this Privacy Policy or your data, contact us at: