Penny Mogul Privacy Policy

Last updated: 2026-11-13

This policy explains what information the mobile game Penny Mogul ("the game", "we", "us") collects, why we collect it, and what you can do about it. The game is made by Pellovrix, an independent developer based in Azerbaijan. The developer is responsible for your personal data (the "controller" under the EU General Data Protection Regulation, GDPR).

Contact: support@pennymogulgame.com

Summary

You can play without signing up. The first time you open the game, it creates an anonymous guest account.
We store your nickname and your game progress on our server in Germany.
If you choose to connect a Google account (Gmail), we also store its email address so you can get your game back later.
Your nickname and your in-game wealth appear on public leaderboards.
The game offers optional rewarded ads from Google AdMob. Google may collect your device's advertising ID and similar data to show ads.
We do not sell your data. The game has no real-money purchases at the moment.
You can delete your account at any time in the game or at pennymogulgame.com/delete-account.

1. Information we collect

1.1 Guest account (all players)

When you open the game for the first time, our server creates an account with:

a random player ID;
a random secret key.

The game keeps the player ID and the secret key on your phone, in a file encrypted with a key derived from your device. Our server stores only a one-way hash (BCrypt) of the secret key, never the key itself. We do not ask for your real name, phone number or email address to play.

1.2 Profile and game progress

Nickname that you choose. It is shown to other players (see section 4).
Character look: the male or female character you pick and the outfits you wear. This describes your game character, not you.
Game progress: in-game cash and net worth, your home, your team of beggars, upgrades, street location, the made-up coins you hold, league and season results, medals, and reward timers (for example, auto-beg time).
Timestamps: when your account was created and when you were last active. We use them to calculate what your team earned while you were away.

1.3 Google account (optional)

If you tap Connect Gmail or Sign in with Google, Android's Google sign-in gives the game a sign-in token. Our server checks this token with Google and stores:

the email address of your Google account;
the permanent account identifier that Google gives the game for your account;
when you connected and when you last signed in with Google.

We use this only to restore your game (for example, after you reinstall the game or move to a new phone) and to show you which account is connected. We never see your Google password, and we do not receive your contacts, photos or any other Google data. Other players cannot see your email address.

1.4 Technical information

IP address. When a new guest account is created, our server uses your IP address to limit how many new accounts one network can create per hour (protection against bots). The address is kept only in the server's memory for up to one hour. It is not written to our database.
Server logs. We do not keep logs of your requests. Error messages of our servers may sometimes contain an IP address; we keep them only as long as needed to fix problems.
No analytics. We do not use analytics or crash-reporting services.
Settings on your phone. Your language, sound setting and tutorial progress are stored only on your phone.
All connections between the game and our server are encrypted (HTTPS).

1.5 Ads

The game offers optional rewarded ads: you choose to watch an ad to get an in-game reward. Ads are provided by Google AdMob (Google Ireland Limited and Google LLC). When an ad is requested or shown, the Google Mobile Ads SDK inside the game automatically collects the following and shares it with Google:

your IP address, which may be used to estimate your general location;
device and account identifiers, such as the Android advertising ID and the app set ID;
interactions with the app and ads, such as app launches, taps and video views;
diagnostic information, such as app launch time and hang rate.

Google uses this information for advertising, analytics and fraud prevention. In the European Economic Area, the United Kingdom and Switzerland, we ask for your consent to personalized ads through Google's consent message, and you can change your choice later in the game. You can reset or delete your advertising ID in your Android settings. To learn more, see how Google uses information from apps that use its services.

1.6 Purchases

The game has no real-money purchases at the moment. The "Penny Pass" screen shows that purchases are coming soon. If we add purchases, they will be processed by Google Play: we will receive a purchase confirmation (order ID, product and status), never your card details. We will update this policy before that happens.

2. How we use information

Purpose	Information	Legal basis (GDPR)
Run the game, save your progress and restore your account	Guest account, game progress, Google account (if connected)	Performance of a contract (Art. 6(1)(b))
Leaderboards and monthly leagues	Nickname, net worth, cash, league results	Performance of a contract (Art. 6(1)(b))
Prevent abuse, bots and cheating; keep the service secure	IP address, account data	Legitimate interests (Art. 6(1)(f))
Show rewarded ads and give the reward	Advertising data collected by Google	Consent for personalized ads where the law requires it (Art. 6(1)(a)); otherwise legitimate interests (Art. 6(1)(f))
Answer your support requests	Your email and what you send us	Legitimate interests (Art. 6(1)(f))
Meet legal obligations	As required	Legal obligation (Art. 6(1)(c))

We do not sell your personal data. We share it only with:

Hetzner Online GmbH (Germany), which hosts our server and database in a data center in Nuremberg, Germany, on our behalf;
Google, which verifies Google sign-in (if you use it) and provides ads through AdMob. Google processes this information under its own privacy policy;
authorities, if the law requires it.

Our server also downloads public cryptocurrency prices from a market data provider to move the prices of the made-up coins in the game. No information about you is sent in these requests.

4. What other players can see

Leaderboards and monthly leagues show your nickname, your rank and your in-game net worth or cash. Players who have not chosen a nickname yet do not appear. Other players cannot see your email address, your Google account or your player ID.

5. Where your data is stored

Our server and database are in Hetzner's data center in Nuremberg, Germany (European Union). Backup copies of the database are kept on the server and on the developer's own computer.

The developer is based in Azerbaijan and accesses the server remotely, over encrypted connections, to run and maintain the game. The European Commission has not issued an adequacy decision for Azerbaijan; we access only what is needed to operate the game. Google may process information in the United States and other countries under its own safeguards, such as the EU Standard Contractual Clauses.

6. How long we keep data

Account and game data: as long as your account exists.
When you delete your account, the account and all game data linked to it, including the connected Google account and its email address, are deleted from our live database immediately.
Backups: we make database backups every night. Daily backups are kept for 7 days, weekly backups for 4 weeks and monthly backups for 12 months. Deleted data can therefore remain in backups for up to 12 months, until those backups are deleted. Backups are used only to recover from a failure; if we ever restore one, we delete again the accounts that had been deleted.
IP address used against bots: up to 1 hour, in memory only.
Support emails: as long as needed to handle your request, and no longer than 1 year after it is closed.
Guest accounts you can no longer open: if you uninstall the game without connecting Google, or replace your game with one saved in Gmail, the old guest account stays on our server but can no longer be opened from the game. We do not delete inactive accounts automatically at the moment; you can ask us to delete such an account (see section 7).

7. Your choices and rights

Delete your account in the game: tap your character badge in the top-left corner, then Delete my account, then Delete forever.
Delete your account without the game: follow the steps at pennymogulgame.com/delete-account.
Ads: rewarded ads are always optional. You can reset or delete your advertising ID in Android settings, and in the EEA, UK and Switzerland you can change your ad consent in the game.

Depending on where you live (for example, in the EEA or the UK), you have the right to access your data, correct it, delete it, restrict or object to its use, receive a copy of it (portability), and withdraw your consent at any time. You also have the right to complain to your local data protection authority.

To use these rights, email us at support@pennymogulgame.com. We answer within one month. To protect your account, we may ask you to confirm that it is yours, for example by writing from the Gmail address connected to it or by telling us details that only the owner would know.

8. Security

All traffic between the game and the server is encrypted (HTTPS).
The secret key of your account is stored on the server only as a one-way hash, and on your phone in an encrypted file.
The database cannot be reached from the internet; only the game server can access it.
Only the developer can access the server, using SSH keys.

No method of storing or sending data is completely secure, but we work to protect your information.

9. Children

Penny Mogul is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe that a child under 13 has created an account, contact us at support@pennymogulgame.com and we will delete it. If you live in a country where you need a parent's permission to use online services at your age, please ask a parent before playing.

10. Changes to this policy

We may update this policy, for example when we add purchases or new features. We will change the "Last updated" date at the top and, for important changes, tell you in the game or on the store page.

11. Contact

Developer: Pellovrix
Email: support@pennymogulgame.com
Website: pennymogulgame.com