Privacy Policy
Last updated: April 11, 2026
What We Collect
When you create an account we store your email address, a display name you choose, and a securely hashed version of your password. We also store your in-game data (characters, inventory, progress, chat messages, mail, etc.) so the game works.
How We Use It
- Authenticate you when you log in
- Deliver the game experience (save progress, show leaderboards, enable mail and chat)
- Send transactional emails if needed (e.g. password reset — not yet implemented)
We do not sell, rent, or share your personal data with third parties for marketing.
Cookies & Sessions
We use a session cookie (JWT) to keep you logged in. Vercel Analytics and Speed Insights collect anonymous, aggregated usage data (page views, performance metrics) — no personal information is tracked.
Third-Party Services
- Vercel — hosting, serverless functions, analytics, and performance insights
- Ably — real-time messaging (lobby chat, dungeon updates)
- Neon / PostgreSQL — database hosting
Each operates under their own privacy policy. We only share the minimum data required for the service to function.
Data Retention
Your account and game data are kept as long as your account exists. Game data may be periodically wiped during early access when major content updates require it — this is announced in patch notes.
Your Rights
You can request deletion of your account and all associated data at any time by contacting us. We will process deletion requests promptly.
Security
Passwords are hashed with bcrypt before storage. All traffic is encrypted via HTTPS. We follow standard security practices to protect your data.
Changes
We may update this policy as the game evolves. Significant changes will be noted in patch notes.
Contact
Questions? Reach out via our Discord community or email the developer directly.