Privacy policy

Updated 24 October 2026

This notice describes the current Orion Idle browser game at orion-idle.com, operated by RSA Experts Kft. For privacy questions or requests, contact RSA Experts Kft. at orion-idle@proton.me.

Operator and data controller

RSA Experts Kft.'s full legal name is RSA Experts Szakértői, Műszaki és Informatikai Tanácsadó és Szolgáltató Korlátolt Felelősségű Társaság. Registered address: 5008 Szolnok, Paál László utca 14., Hungary. Tax number: 27435467-2-16.

Information used to run the game

• Sign-in: Google or Discord provides an account identifier, email address, verification status, name and profile picture when available. Destiny.gg provides an account identifier and username; it does not provide an email address. Authentication records can include tokens issued by your chosen provider. Orion Idle does not receive your provider password or request access to your messages, contacts or files.
• Account setup and privacy choices: we store your declared age band, acceptance of our terms, acknowledgment of the account-information notice, and your separate analytics and advertising preferences. We record the notice version and times of changes so we can apply your choices and keep a record of them. This form does not request your full date of birth or identity documents. A declaration of parental permission is not treated as verified parental consent.
• Gameplay: the game stores your characters, progress, equipment, inventory, quests, trades and other game actions so you can resume playing and interact with other players.
• Connection and security: authentication records include session identifiers, timestamps, IP addresses and browser information. Hosting providers also process connection information to deliver and protect the service.
• Support: if you email us, we receive your address and anything you choose to include. Please do not send passwords or authentication tokens.

Account and gameplay information is used to provide the service you request. Connection and security information helps operate the service, prevent abuse and investigate problems. Where the GDPR applies, providing the requested game service is based on performance of the service agreement; protecting and maintaining the service is based on the operator's legitimate interests in a reliable, secure game.

Cookies and local storage

Necessary authentication cookies keep you signed in and protect the sign-in process. The browser also remembers your selected character and gameplay display preferences, and caches public game files and artwork for loading performance. You can clear this storage in your browser; doing so can sign you out or reset local preferences. Clearing browser storage does not delete your server-side account or saved progress.

Who receives information

Google, Discord or Destiny.gg handles sign-in, depending on your choice. Google also supplies fonts used by the game; loading those fonts sends connection information to Google. Railway hosts the game server and database. Cloudflare delivers the website and hosts game artwork. These providers process information needed for their services, which may involve processing in countries outside your own. Their privacy information is available from Google, Railway and Cloudflare.

Other players can see information exposed by multiplayer features, such as character names and market listings. Do not put sensitive personal information in character names or other game content.

Keeping and deleting information

Account records and saved gameplay remain stored so you can return to the game. There is currently no automatic deletion of inactive accounts. Contact us to request deletion or to ask about the information retained for your account. Signing out or removing Orion Idle from your sign-in provider does not by itself delete the game account. Backup copies and records needed to investigate abuse or meet legal obligations may have a different retention period.

Your choices and rights

You can stop playing, sign out, clear browser storage, or review and remove authorization in your provider’s connected-app settings, including Google account connections. Removing authorization can prevent future sign-in until you authorize the game again.

Depending on the law that applies, you may have rights to access, correct, delete or receive a copy of your information, restrict processing, or object to processing based on legitimate interests. Send requests to orion-idle@proton.me. We may need to confirm that the account belongs to you. You can also complain to your local data-protection authority; see the European supervisory-authority directory.

Advertising

Live advertising is not enabled in the current game. The site contains Google's publisher verification information, which does not itself load advertising or enable personalized ads. Before advertising is enabled, this notice and the site's privacy controls will be updated to describe the actual advertising providers, data uses and choices.

Optional analytics and advertising choices

Account setup lets you record separate preferences for planned PostHog EU Cloud game analytics and Google AdSense optional ads. Both choices start off. You can review and change them in account privacy settings. Declining these optional features does not prevent an otherwise eligible account from playing. Required account identification and security processing are explained above and are separate from these preferences.

Neither integration is currently active. Saving a preference does not start analytics, request an ad, or replace Google's advertising consent controls. Before either feature starts processing information, we will provide its applicable disclosures and choices. Optional analytics and advertising are unavailable for minors in this version.

Planned PostHog analytics and diagnostics: we plan to use PostHog EU Cloud to understand which screens and game actions people use, how long actions and loading take, and where errors occur. The planned data includes usage events and timestamps, time spent and performance measurements, browser/device information, and error messages and stack traces. The final event fields, identifiers and retention settings will be described before activation. See PostHog's error tracking documentation.

Planned Google AdSense advertising: when ads are enabled, Google may receive the page URL, IP address, browser and cookie identifiers, and information about ad views and interactions. Google uses this information to deliver and measure ads and protect against fraud; personalization depends on the applicable privacy choices. This game preference does not replace Google's advertising consent controls. Read how Google uses information from partner sites and Google's advertising information.

Changes

Changes to this notice will appear here with an updated date. Check this page for the current description of how the game uses information.