REALMFORGEBY JOSLIN SOLUTIONS

Privacy Policy

Last Updated: September 29, 2026 · Effective Date: October 15, 2026

For users who create an account on or after September 15, 2026, this Privacy Policy applies immediately. For users who held an account before September 15, 2026, this Privacy Policy takes effect on the Effective Date.

This Privacy Policy (“Policy”) describes how Joslin Solutions LLC (“Company,” “we,” “our,” or “us”) collects, uses, stores, discloses, and protects information when you access or use the RealmForge mobile application (the “App”), the realmforgeapp.com website, and any related features and services (collectively, the “Services”).

By downloading, installing, creating an account, or otherwise using the Services, you acknowledge that you have read and understood this Privacy Policy.

Certain provisions of this Privacy Policy, including those relating to personalized advertising, California privacy rights, and advertising opt-out mechanisms, apply only where such features are enabled or where required by applicable law.

1. Eligibility

RealmForge is intended solely for individuals who are at least eighteen (18) years of age or the age of majority in their jurisdiction, whichever is greater.

We do not knowingly collect personal information from children under the age of thirteen (13), or from individuals who are otherwise ineligible to use the Services. If we learn that we have collected such information, we will promptly delete it in accordance with applicable law.

2. Information We Collect

We collect personal information in three ways: information you provide voluntarily, information we collect automatically, and information we receive from third-party sources.

A. Information You Provide Voluntarily

Account information. When you create an account or sign in, we collect your email address, display name, Firebase Authentication identifier, Google Sign-In credentials (where used), and user ID. We do not currently collect a profile image.

Gameplay information. To provide and improve the Services, we collect gameplay information including Forge Sparks and Essence balances, Artifacts collected, quest completion, achievements, daily streaks, daily spins, Weekly Prize Drawing entries, referral activity, leaderboard rankings, reward redemption history, and gameplay progression.

Residence information. If your app store account is registered in Canada, we collect the province or territory of residence you declare in the App, and the country of your app store account, to determine which features and rules apply to you (for example, that Essence redemption is not available in Canada). If your app store account is registered in Australia, we record Australia as your country of residence for the same purpose.

Reward redemption information. Where rewards are redeemed, we collect the delivery email address, the selected reward, redemption history, verification status, fraud review information, and transaction references supplied by redemption providers.

Communications. We collect the content and details of any correspondence you send us, including support requests.

B. Information We Collect Automatically

We may automatically collect device information, including device model, operating system, device language, IP address (where available), application version, mobile carrier, device identifiers, advertising identifiers, crash logs, and diagnostic information.

C. Information We Collect From Third-Party Sources

Third-party platforms. When you sign in using Google Sign-In, that provider shares authentication data, your email address, user ID, and basic profile data with us, depending on the permissions you grant.

Advertising, measurement, and other partners. Advertising and measurement partners share information with us about the actions you have taken, such as mobile identifiers for advertising, advertising impressions and clicks, and cookie identifiers, which we use to help match your account with advertising activity.

Offer Partners. When you choose to complete a Reward Task such as an offerwall offer, a survey, a trial sign-up, an app download, a travel booking, or a shopping offer, the applicable Offer Partner shares information with us about your completion of that task so that we can credit the corresponding Virtual Item to your account.

Payment and transaction fulfillment providers. We receive information about you from payment and transaction fulfillment providers, including payment confirmation details, billing information, and transaction details.

Sensitive personal information. We do not collect precise geolocation data, biometric data, health data, government-issued identifiers, or other categories that are treated as “sensitive data” or “sensitive personal information” under applicable state privacy laws, and we do not seek to infer such characteristics about you. The categories of personal information we process that are most closely related to sensitive data are your advertising identifiers and, where you sign in with Google, your account authentication identifier.

This statement describes the information the Company collects. It does not describe the information collected by a third-party Offer Partner inside a survey or other Reward Task. A survey presented through the Services is written and administered by the Offer Partner, and a survey may ask you questions on topics of its choosing, which may include topics that are treated as sensitive under applicable law. Anything you enter into a survey is collected by that provider under its own privacy policy, not by us. We receive from the provider only confirmation that a task was completed, together with the identifiers and transaction details needed to credit your account, and we do not receive your survey answers. You choose whether to begin a survey and what to answer.

3. How We Use Your Information

We use information to:

4. Legal Basis for Processing

Where required by applicable law, we process personal information because:

Where you choose to use features integrated with third-party Offer Partners, such as completing surveys, booking travel, shopping offers, and watching ads, we ask for your consent before we share your information in those instances. You can always revoke your consent through your device permissions or in-app settings.

5. How We Disclose Information

We do not sell your personal information for monetary or other valuable consideration.

However, certain advertising-related disclosures involving advertising identifiers or similar information used for cross-context behavioral advertising may constitute “sharing” under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”). Where applicable, you may exercise your right to opt out of such sharing as described in Section 11.

We may disclose information to the following categories of recipients:

A. Service Providers

Including Google Firebase, Google Cloud Platform, Google AdMob, ayeT-Studios GmbH, analytics providers, customer support providers, fraud prevention providers, and cloud hosting providers. These providers may process information solely for purposes of providing services on our behalf.

B. Reward Fulfillment Providers

To deliver rewards, we may disclose limited information to authorized redemption providers, including Tremendous. Rewards currently available for redemption through these providers may include PayPal, Venmo, and digital gift cards. We may add, remove, or change redemption providers and reward methods, including additional gift-card and digital-wallet providers, at any time.

C. Offer Partners

When you choose to complete a Reward Task, the applicable Offer Partner may receive information about you and your activity, including your completion of the task. This is required in order to confirm and credit the task.

D. Public Leaderboards

The Services include global leaderboards that are visible to all other players. Your display name and your rank and score are published on these leaderboards whenever you appear on one. This is a core part of the game and is not optional while you hold an account. To limit what is exposed, a display name that contains more than one word is shortened to a first name and a last initial before publication. Your email address, reward redemption history, and account identifiers are never published on a leaderboard.

You consent to this publication when you create an account or sign in. If you do not wish your display name to appear publicly, you may delete your account at any time.

E. Legal Requirements

We may disclose information where necessary to comply with legal obligations, respond to lawful requests, investigate fraud, enforce our agreements, protect our users, or protect the security or integrity of the Services.

6. Fraud Prevention

Because the Services provide redeemable rewards, we actively monitor accounts for fraud. We reserve the right to investigate suspicious activity, verify identity, verify eligibility, suspend accounts, reverse improperly obtained rewards, deny fraudulent redemptions, and permanently terminate accounts engaged in abuse.

7. Data Retention

We retain information only as long as reasonably necessary to provide the Services, administer rewards, maintain security, resolve disputes, comply with legal obligations, and prevent fraud. Retention periods vary depending upon the nature of the information and applicable legal requirements.

8. Your Privacy Rights

Depending upon your jurisdiction, you may have the right to access your personal information, correct inaccurate information, delete personal information, restrict certain processing, object to certain processing, receive a portable copy of your information, and withdraw consent where applicable.

California residents may have additional rights under the CCPA, as amended by the California Privacy Rights Act, including the right to request disclosure of the specific pieces and categories of personal information we collect, use, disclose, sell, or share; the right to correct inaccurate personal information; the right to delete personal information; the right to limit the use and disclosure of your sensitive personal information; the right to opt out of the “sale” or “sharing” of personal information; and the right not to be discriminated against for exercising these rights. Certain information may be exempt from such requests under applicable law. We must take reasonable steps to verify your identity before responding to a request. Privacy requests may be submitted to info@realmforgeapp.com.

Residents of other U.S. states that have enacted comprehensive privacy laws (which, as of the effective date of this Policy, may include Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia) may have rights similar to those described above. These may include the right to access, correct, delete, and obtain a portable copy of your personal information; the right to restrict or object to certain processing; the right to opt out of “targeted advertising” and of the “sale” or “sharing” of your personal information; and the right to appeal our decision on a request. We will honor the rights that apply to you under the laws that cover us and the data at issue, and we will not discriminate against you for exercising any of these rights.

9. Account Deletion

You may request deletion of your account by using the in-app deletion feature or by emailing info@realmforgeapp.com. Certain information may be retained where required to comply with legal obligations, prevent fraud, resolve disputes, complete pending reward transactions, or enforce our legal rights.

Following the deletion of an account, we retain a one-way cryptographic fingerprint of the email address that was associated with that account. The fingerprint is generated using an irreversible algorithm and cannot be reversed to recover the email address, and it is never used to contact you or for any marketing purpose. We retain this fingerprint solely to protect the integrity of the Services and to prevent abuse, for two limited purposes: (1) preventing repeated redemption of promotional credits granted to newly created accounts; and (2) preventing fraud, abuse, and evasion of our anti-fraud measures, including by retaining a count of prior security flags and internal reason codes associated with an account. The fingerprint is keyed only to the irreversible hash and is stored separately from, and is not linked to, any gameplay record, transaction history, account identifier, or other information concerning you. Nothing retained is reversible into your email address or usable to contact you.

10. Advertising Choices

You may control advertising preferences through both the App (where available) and your device settings. Depending upon your jurisdiction and device, you may reset your advertising identifier, limit ad tracking, disable personalized advertising, or opt out of cross-context behavioral advertising where applicable.

If you disable personalized advertising or submit a valid opt-out request, advertisements will continue to appear within the Services but may become non-personalized or contextual.

Google and other advertising providers may also offer additional privacy controls through their own privacy settings.

11. Do Not Sell or Share My Personal Information

We do not sell your personal information for monetary or other valuable consideration.

However, under the CCPA, the term “share” has a broader legal meaning than “sell.” It includes making certain personal information available to third parties for cross-context behavioral advertising, even where no money changes hands.

To support the Services through advertising, we may make limited information available to advertising partners, including advertising identifiers (such as the Android Advertising Identifier or Apple Identifier for Advertisers), device identifiers, advertising interaction information, and application usage information relating to advertising performance. Where personalized advertising is enabled, this activity may constitute “sharing” under California law.

We do not knowingly sell or share the personal information of individuals under eighteen (18) years of age.

California residents have the right to direct us not to sell or share their personal information for cross-context behavioral advertising. You may exercise this right by:

After receiving and verifying a valid request, we will cease sharing personal information for cross-context behavioral advertising to the extent required by applicable law. If you exercise your opt-out rights, advertisements will continue to appear within the Services, advertisements may become non-personalized or contextual, and your gameplay, account functionality, reward eligibility, Weekly Prize Drawing participation, and Essence reward redemption eligibility will not be affected.

Several state privacy laws also require us to honor opt-out signals transmitted by an authorized universal opt-out mechanism, such as the Global Privacy Control (“GPC”), to the extent such signals are recognized under applicable law. You may submit an opt-out request directly to us through the methods listed above, or express your opt-out preference through a recognized universal opt-out mechanism. We will treat a validly transmitted universal opt-out signal as a request to opt out of “targeted advertising” and of the “sale” or “sharing” of your personal information for cross-context behavioral advertising.

12. Security

We maintain commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no electronic transmission or storage system is completely secure, and we cannot guarantee absolute security.

13. International Users

RealmForge is offered in each country and territory in which the App is made available through the Apple App Store or Google Play. Essence redemption under the Essence Loyalty Rewards program is limited to legal residents of the fifty (50) United States and the District of Columbia. The Weekly Prize Drawing is open to residents of most countries, and the countries that are excluded are listed in the Official Sweepstakes Rules.

If you are located in Australia, the Australia Addendum to this Privacy Policy also applies to you and forms part of this Policy, including its provisions on overseas disclosure and complaints.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the EEA, UK and Switzerland Addendum to this Privacy Policy also applies to you and forms part of this Policy, including its provisions on legal bases, advertising consent, international transfers, and your rights.

If you are located in Canada, the Canada Addendum to this Privacy Policy also applies to you and forms part of this Policy, including its provisions on the cross-border transfer of your personal information to the United States.

Our own systems, and the databases in which your account and gameplay information are stored, are located in the United States. This means that if you are located outside the United States, your information is regularly transferred to, stored in, and processed in the United States as a normal part of using the Services, which may have data protection rules that differ from those of your country, province, or territory of residence. Certain service providers we use are established outside the United States and may process limited information outside it. In particular, our Offer Partner ayeT-Studios GmbH is established in Germany, and when you open the offerwall or the survey wall we transmit an account identifier to it so that a completed task can be credited to the correct account. Where we transfer information to a provider outside the United States, we do so under contractual terms requiring the provider to protect it and to process it only on our instructions or as otherwise described in this Policy.

If you are located outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, which may have data protection rules that differ from those of your country of residence.

14. Third-Party Services

The Services integrate with third-party providers including Google Firebase, Google Authentication, Google AdMob, ayeT-Studios GmbH (which supplies both the offerwall and the survey wall), and Tremendous. These third parties maintain their own privacy practices, which are governed by their respective privacy policies. This list describes our providers as of the Effective Date of this Policy. We may add, change, or remove providers, and we will update this Section when we do.

15. Changes to This Policy

We may revise this Privacy Policy periodically to reflect changes in our Services, legal obligations, or business practices. When we make material changes, we will provide notice through the Services (such as an in-app notice or banner) and, where feasible, by email to the address associated with your account, together with an updated “Last Updated” date and an effective date. We will provide such notice a reasonable period before the change takes effect where required by applicable law. Continued use of the Services after the effective date of any revision constitutes acceptance of the updated Privacy Policy. If you do not agree to the updated Policy, you must discontinue use of the Services and may delete your account.

16. Contact Information

Joslin Solutions LLC
2281 Lava Ridge Court, Suite #200
Roseville, California 95661
Email: info@realmforgeapp.com