Idle Brothel — account and support privacy notice

Version: 3 November 2026

Who is responsible

Marvin Berger, trading as Nautical Realms (sole proprietor), operates the
Patreon connection at accounts.idlebrothel.com.
Alfred-Schröder-Str. 6, 89407 Dillingen, Germany
Email: marvin.berger01@gmail.com

This notice covers account connection, cosmetic reward records and support messages sent through accounts.idlebrothel.com or the game's Report a Bug and Feedback features. The game privacy notice describes local game storage; Patreon has its own privacy notice. The game and this service are intended for adults aged 18 or over.

Why connect

Connecting is optional. It lets us check your membership in the game's Patreon campaign and remember cosmetic packs you claim. Without connecting, this service cannot check your eligibility or restore account-linked claims. Connecting does not start a subscription or take a payment.

Information and purposes

Patreon supplies your account identifier and membership information for the game's creator campaign: membership status, free-trial status, and currently entitled tiers, with related campaign and tier identifiers and labels. We save the resulting reward-row eligibility and when it was checked, rather than a full Patreon profile or membership history.

We do not request your Patreon email, real name, postal address, or memberships in unrelated creator campaigns. We do not receive your Patreon password or payment-card details.

We store encrypted Patreon access and refresh credentials so the server can recheck eligibility. We also store account creation time, temporary connection and confirmation records, hashed references to game sign-in sessions, and the identifiers, contents, and times of claimed cosmetic packs. The game stores its own sign-in credential on your device. This account service does not store game income, tickets, skill levels, or other game progress.

We use this information to provide the account/reward service you request (Article 6(1)(b) GDPR). The service automatically compares the membership reported by Patreon with the configured tiers to determine new claim eligibility. It does not change game earnings or erase existing claims. Contact us if you think a result is incorrect.

For security, requests expose your IP address to the hosting service. Our application's request-limit records use keyed hashes instead of raw IP addresses. Hostinger also processes technical access/security information, such as IP address, request time, requested resource, browser/device details, and response information. We use proportionate security controls to prevent abuse and protect accounts, our legitimate interests under Article 6(1)(f) GDPR.

If you email us or use the web contact form, we receive your email address and message, plus your name if you choose to provide it. In-game Report a Bug and Feedback send only when you choose Send. They provide the message, category and game version, plus the bug-report fields you entered. A reply email address is optional in the game; leaving it blank means we cannot reply directly. Optional bug diagnostics contain the operating system, processor architecture, Godot version, renderer and window size. You choose whether to include them. Logs, saves, account credentials and attachments are not automatically included.

Messages are forwarded to our support inbox without storing the message or reply address in the account database. We do not add your IP address to the email. The service stores keyed request counters and short-lived submission proof/status records, including a keyed payload fingerprint, to limit abuse and prevent duplicate sends. These records contain no message text or email address in plaintext. Sending a game report does not require Patreon login.

We use correspondence to answer and document your request: Article 6(1)(b) GDPR for service support, Article 6(1)(c) for privacy requests required by law, or Article 6(1)(f) for other necessary correspondence. Never send passwords, access tokens or your game sign-in file.

Recipients and international processing

Patreon receives authorization and membership-check requests and provides the resulting account information. It operates its own platform, payments, and subscriptions under https://privacy.patreon.com/.

Hostinger provides hosting and database services. Its EU contracting entity is generally Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus. Hosting processing is covered by Hostinger's data processing agreement: https://www.hostinger.com/legal/dpa. That agreement addresses subprocessors and safeguards, including standard contractual clauses where applicable, for processing outside the EEA. We do not promise EU-only data storage. Contact us for details of the arrangements applicable to this service and copies or information about relevant safeguards.

Authorized operators may access information when needed for operation, security, or support. Support correspondence, including contact-form and in-game support messages, is handled through Google Gmail. Google processes email content and related delivery information and may process it internationally. Its privacy notice explains its processing and transfer safeguards: https://policies.google.com/privacy. This account service has no advertising or marketing analytics and does not sell your information.

Cookies and local storage

The browser connection uses a necessary security cookie to bind the authorization to the browser that started it. The contact form uses a separate necessary security cookie and one-use submission marker to prevent forged or repeated submissions. Both cookies expire after 10 minutes. In-game support uses a short-lived submission proof held in game memory, without a browser cookie. It expires after 10 minutes and is tied to the request's network address through a keyed hash. Security records use keyed hashes for request limits and contain no message text. The game stores a sign-in credential locally to access your connected account. Patreon may use its own cookies on its pages under its own notice.

Retention

Connection attempts expire after 10 minutes. Game sessions expire after 30 days; signing out revokes the current session sooner. Ordinary game use does not extend that session's expiry. An hourly cleanup removes expired links, sessions, form and game-support submission records, and request-limit records. Request-limit counters have security windows no longer than one hour and are physically removed on the following hourly cleanup.

Patreon credentials and cached eligibility are removed by the hourly cleanup when no unexpired game session or pending connection remains for the account. Signing out of one device does not remove credentials while another valid session remains. Cancelling your subscription is a different action and does not itself end a game session.

We keep the account identifier and claimed cosmetic records while you retain your reward account, including after subscription cancellation, so rewards can be restored. You can request deletion. We explain any effect on reward restoration before removing its account-to-claim record.

Hosting logs and backups follow the hosting service's retention controls and are used for security and recovery. Hostinger's published Unlimited-plan backup schedule retains daily backups for seven days and weekly backups for six weeks; the applicable schedule depends on the enabled hosting settings. Deleted information may remain in protected backups until those rotate out. It is not used for ordinary account operations, and account deletions must be reapplied if an older backup is restored. Technical logs are kept only for the period needed for security and troubleshooting under the hosting settings.

We keep support correspondence for as long as needed to resolve the request and handle related follow-up or disputes, or for an applicable legal retention period. Where a legal obligation or actual dispute requires limited records to be retained longer, access and use are restricted to that purpose.

Your choices and rights

Game logout ends that game's current session. It does not cancel Patreon, sign out other devices, revoke Patreon permission, or delete claimed rewards. You can revoke the app in Patreon's "Logged in with Patreon" settings. That stops future authorized Patreon checks until you reconnect; it does not automatically erase information already held here. See: https://support.patreon.com/hc/en-us/articles/115004061726

Email marvin.berger01@gmail.com for access, correction, export, or deletion requests. Requests are handled by the operator after proportionate account ownership verification; there is no self-service deletion button. Deleting claim records can prevent restoration on that account. Do not email account secrets.

Subject to the GDPR's conditions, you have rights of access, rectification, erasure, restriction, and portability. You can object to processing based on legitimate interests on grounds relating to your situation. Where processing is based on consent, you can withdraw it for the future. You can complain to a supervisory authority, including the Bavarian State Office for Data Protection Supervision (BayLDA): https://www.lda.bayern.de/.

Updates

The date above identifies this notice's version. We will explain material changes to how the service handles information as required before applying them. This notice does not waive your privacy rights.