Moonflare: Dragon Run - Privacy Policy

Last updated: 7 October 2026 · App: Moonflare: Dragon Run (Android package and iOS bundle ID com.ashour.forestrunner; formerly "Forest Runner") · Developer: Ashour

The short version. Moonflare is a game for everyone, including children. We never ask for your real name, e-mail address, phone number, contacts, location or photos. The game creates a free online game account for you with a random runner name (for example "WildMoon1756"), so your best runs can appear on the leaderboard and your progress can be backed up. We only keep your age group (under 13, 13-17, or 18+), never your birth year. Players under 13 always get non-personalized ads and keep their random runner name. You can delete your account at any time, in the game or on the web.

1. Who we are

Moonflare: Dragon Run is made by an independent developer, Ashour ("we", "us"). Contact: mohamaachour@gmail.com.

2. What we collect and why

Information	Why we use it
Age group - the game asks for your birth year once. Our server turns it into an age group (under 13, 13-17, 18+) and does not store the year.	To give younger players the right protections (non-personalized ads, no custom names) and to follow children's privacy laws.
Game account - a random account ID, your runner name, a recovery code (stored only as a scrambled "hash"), sign-in tokens (also hashed), your platform (Android / iOS) and when you were last online.	To run your online account, keep it secure, and let you move your progress to a new phone with the recovery code.
Leaderboard picture - which of the game's own avatars or heroes you chose (for example "Snow Fox"). If you use your own photo, only your hero is shared - the photo itself never leaves your phone.	So other players see your chosen game picture next to your runner name on the leaderboards.
Runs - distance, gems, time, the hero and pet used, number of revives, and when the run happened.	For the all-time and weekly leaderboards, your stats, and to spot cheating (suspicious runs are kept for review and never ranked).
Cloud backup - your game progress and settings (gems, keys, heroes, pets, missions, level, best distance, sound and graphics settings) and your device model (for example "Pixel 7").	So you don't lose your progress if you change or reset your phone.
Technical data - your IP address, which our hosting provider's servers see when the game connects.	To deliver the service, limit abuse (rate limits) and keep it secure. We do not use it to find your location and we do not store it in your account.

Players aged 13 or older may choose their own runner name (letters, numbers and "_"; rude names are refused). Players under 13 keep the random name the game picks, so no real names are shown publicly.

3. What other players can see

Only your runner name, your chosen game picture (one of the game's avatars or heroes - never your photo), your best score and your rank on the leaderboards. There is no chat, no messaging, no friend list and no way for players to contact each other.

4. Information that stays on your device

Profile picture - you can pick one of the game's avatars, or your own photo. If you pick your own photo, the game uses your phone's photo picker to read only the one image you select and keeps a small copy inside the app's private storage. It is never uploaded.
Graphics tuning and the sign-in tokens themselves are kept on your device.

5. Advertising (Unity Ads)

The game offers optional reward videos from Unity Ads (Unity Technologies). Watching an ad is always your choice. When an ad is requested, Unity Ads may process device information such as the advertising ID, IP address, device model, operating system, language and ad interaction data, to show ads, measure them, limit how often you see them and prevent fraud.

Children and unknown ages: the game tells Unity Ads that it has a mixed audience. Until you answer the age question, and always for players under 13, the game asks Unity Ads to show only non-personalized (contextual) ads, with no behavioral profiling or ad targeting.
Players 13 and older may see personalized ads. Every Unity ad has a privacy button (the "i" icon) where you can opt out of personalized ads or ask Unity for a copy or deletion of its data. You can also reset or delete your advertising ID in your device settings.
Unity's privacy policy: unity.com/legal/game-player-and-app-user-privacy-policy

6. iPhone and iPad

On iOS, Apple's "Allow tracking?" prompt (App Tracking Transparency) is only shown to players who told the game they are 13 or older. Children are never asked and are never tracked. You can change your choice any time in Settings > Privacy & Security > Tracking.

7. In-app purchases

Optional purchases of virtual items (gems, keys, heroes, bundles) are processed by Google Play or the Apple App Store. We never see or store your payment details; we only receive a purchase confirmation so we can deliver what you bought. Your device's parental controls (Google Family Link, Apple Screen Time / Ask to Buy) can require a parent's approval for purchases.

8. Service providers

We use these companies to run the game. They process data only on our behalf, under their own security and privacy terms:

Render (render.com) - hosts our game server.
MongoDB Atlas (MongoDB, Inc.) - stores the game accounts, runs and cloud backups, in a data centre in the European Union (Paris).
Unity Technologies - ads (see section 5) and in-app purchase processing.
Google and Apple - app stores and payments.

Data is encrypted in transit (HTTPS). We do not sell or rent your personal information, and we do not share it for advertising except as described in section 5.

9. Children

Moonflare is designed for everyone, including children. For players under 13 (or the minimum age in your country) we:

do not collect their name, e-mail, phone number, contacts, photos or precise location;
keep only their age group, never the birth year;
give them a random runner name they cannot change, so nothing they type is shown publicly;
show only non-personalized ads, and never show Apple's tracking prompt;
offer no chat or contact between players.

Parents can ask us to see or delete their child's data at any time: use Settings > Account & Cloud Save > Delete account in the game, or the delete account page, or e-mail us.

10. Keeping and deleting your data

We keep your account, runs and cloud backup while your account exists.
Delete in the game: Settings > Account & Cloud Save > Delete account. This immediately deletes your account, your runs, your leaderboard entries and your cloud backup from our server. The game then stays offline for you until you choose to go online again.
Delete on the web (for example if you no longer have the game): see masivetech.github.io/forest-runner-legal/delete-account.html. We delete the account within 30 days of your request.
Game progress stored on your device stays there until you clear the app's data or uninstall the game.
Our hosting providers may keep short-lived server logs and encrypted backups for a limited time (normally up to 30 days) before they are overwritten.

11. Your rights

Depending on where you live (for example the EEA, UK, or California), you may have the right to access, correct, delete or port your personal data, and to object to or restrict its use. You can delete your account yourself (section 10) or e-mail us; we answer within 30 days. You may also complain to your local data protection authority. Our legal bases (where GDPR applies) are: providing the game you asked for (account, leaderboards, cloud backup), our legitimate interest in keeping the game secure and fair, and consent where required for personalized ads.

12. Changes to this policy

We may update this policy. The "Last updated" date above shows the latest version; important changes will be announced in the game or the store listing.

13. Contact

E-mail: mohamaachour@gmail.com