Privacy Policy
Last updated: 2026-10-20
Operator Information
- Operator
- Little Expedition Studio
- Support email
- support@lilexp.com
1. Scope
This Policy explains how the operator listed above ("we" or "us") collects, processes and uses your personal data under Taiwan's Personal Data Protection Act when providing the Little Expedition iOS and Android apps, web version, PC version and official website (the "Service").
2. Data We Collect
- Account data: character UID, lord name (nickname), sign-in credentials (only hashed values are stored on our server), legacy recovery codes.
- Third-party sign-in data: when you sign in with or link Apple, Google, Game Center, LINE or Steam, the account identifier provided by that service; the email address provided by Apple, Google or LINE (if any); Apple's authorization token (used to revoke authorization when you delete your account); the display name some services provide (used as a default name when creating a character). We never receive your third-party account passwords.
- Device and platform information: the platform you use (iOS, Android, web, PC), the label of each signed-in device, the app version, and a push token if you allow notifications.
- Game data: save data and progress, heroes and teams, guild, mail, leaderboard results, daily activity records.
- Chat content: messages you send in the world and guild channels.
- Transaction data: order number, product, amount, payment time, payment channel and its transaction ID, and the time you agreed to the digital content payment terms before purchasing on the web, desktop or official site. We never receive or store your card number or bank account number.
- Usage analytics: in-game events such as tutorial steps, stage clears, screens opened, purchase flow and startup timing, used to improve the game.
- Error logs: error messages, the browser or device user-agent string and screen size when an error occurs.
- Network information: your IP address, used for rate limiting, abuse prevention and preventing duplicate invite rewards.
The Service does not use advertising trackers and does not track your activity across other companies' apps or websites for advertising.
3. Purposes of Use
- Creating and maintaining your account, cloud saves and cross-device play.
- Providing multiplayer features such as guilds, arena, world bosses, chat and leaderboards.
- Processing purchases, delivering items, and reviewing refunds and payment disputes.
- Customer support, notices and push reminders (which you can turn off in device settings).
- Keeping the Service secure and preventing cheating, fraud and abuse.
- Statistical analysis and improving the game experience.
Specific purposes under the Personal Data Protection Act: 069 contracts and similar legal relationships; 090 consumer and customer management and services; 135 information and communication services; 136 information, communication and database management; 148 online shopping and other e-commerce services; 157 surveys, statistics and research analysis.
4. Retention Period, Location, Recipients and Methods
- Period: for as long as your account exists. When you delete your account, your character, save data, third-party sign-in links, chat messages, usage analytics events and error logs are deleted immediately; backups are overwritten when the backup cycle ends. Transaction records are kept for the period required by tax and accounting laws.
- Location: the Republic of China (Taiwan) and the locations of the servers of the service providers listed below.
- Recipients: us, and the service providers necessary to provide the Service (see Section 5). We do not sell or rent your personal data, except as required by law.
- Methods: stored, processed and transmitted electronically.
Only the most recent few hundred error logs are kept; older entries are continuously overwritten. Analytics events are kept for 2 years from collection, then deleted or anonymized.
5. Third-Party Services
- Apple: Sign in with Apple, Game Center, App Store in-app purchases and refunds, iOS push notifications (APNs).
- Google: Google sign-in; Google Play purchases, purchase verification and refunds; Android push notifications (Firebase Cloud Messaging, using app installation identifiers and push tokens); web fonts for the web version (Google Fonts, which receives your IP address and browser information). We do not receive your payment card number.
- LINE, Valve (Steam): sign-in methods on platforms where they are offered; Steam also processes payments in the Steam version.
- Portaly: payment processing for the web version, PC version and official website. We share the order number, amount and the email of your linked account (if any, to prefill the checkout page and send receipts).
- Cloudflare: hosting and content delivery for the website, web version and game assets (R2); processes connection information such as your IP address.
- Akamai (Linode): game server hosting; stores the data listed in Section 2.
- Anthropic: when you tap "Translate" on a chat message, that message text is sent to Anthropic's AI service for translation, without your account data.
These services handle your data under their own privacy policies.
6. International Transfers
Servers of the providers above may be located outside Taiwan (for example in the United States, Japan or Singapore). We transfer data only as necessary to provide the Service and choose providers with appropriate security measures.
7. Publicly Visible Data
Your lord name, level, power, guild name, rankings, flag and chat messages are visible to other players. Please do not share personal information in names or chat.
8. Your Rights and Account Deletion
Under Article 3 of the Personal Data Protection Act, you may request to access or review your personal data, obtain a copy, supplement or correct it, stop its collection, processing or use, or delete it. Email Support with your character UID; we will act promptly after verifying your identity.
Deleting your account: in game, go to Settings → Delete Account and confirm by entering your lord name; you can also request deletion by email. Deletion cannot be undone, and your gems and purchased Virtual Items will be lost. If you signed in with Apple, we also revoke the authorization with Apple.
You may choose not to provide some data (for example, not linking a third-party account or not enabling notifications), but some features may then be unavailable.
9. Children and Minors
The Service is not directed at children under 13, and we do not knowingly collect personal data from children. Minors should use the Service only after a parent or legal guardian has read and agreed to this Policy. If you believe a child has provided personal data without consent, please contact us to have it deleted.
10. Data Security
We protect your data with reasonable technical and organizational measures, including HTTPS encryption for all traffic, storing only hashed sign-in credentials, and access control for administrative tools. However, no transmission over the internet is 100% secure.
11. Local Storage
The Service uses browser local storage (localStorage) on your device to keep you signed in and to store game cache, language and sound settings, so you stay signed in and the game loads faster. It is not used for advertising tracking.
12. Changes to This Policy
When we update this Policy, we will post it on the website and update the date above; material changes will also be announced in game.
13. Contact Us
If you have any questions about this Policy or your personal data, email us at the address below.