Endless Wilderness: privacy notice
Draft. This notice describes how the game is built. It still needs the operator's (or counsel's) approval, a contact address, and the hosting region before release (decision R4).
What we store, and why
| Data | Why | How long |
|---|---|---|
| Your Google account's anonymous identifier (no email, name, or photo) | To recognise you when you sign in | Until you delete your account |
| A sign-in session (a random token in a cookie) | To keep you signed in | 30 days, or until you sign out |
| Your characters: chosen name, position, health, items, buildings, claims, and explored map, separately in each world | To run the game and keep your progress | Until you delete your account |
| Players you have muted | To hide their chat from you | Until you unmute them or delete your account |
| Reports and moderation records (character names, the reason, and the chat the reporter received in the 10 minutes before a report) | To keep the game safe | 30 days; a ban's record until 30 days after the ban ends |
| Server logs (errors and events; no IP addresses, tokens, or account identifiers) | To keep the game running | 14 days |
| Encrypted backups of the game database | To recover from a disaster | 30 days |
Chat is never saved: it goes only to players within 15 tiles while they are online. There are no analytics, advertising, or tracking cookies; the only cookie is the sign-in session.
Who can see it
Other players see your character's chosen name, its appearance and equipment, and what it does near them. Moderators can read reports and moderation records. Nobody else sees your account identifier. The game runs on servers rented from DigitalOcean (region to be confirmed), which process the data only to host it.
Deleting your account
Sign in, then use Delete my account on the start screen (log out of every world first). It erases your account, your sign-in identity and sessions, your mutes, and your characters in every world with everything they carry and keep in chests. Buildings you made stay in the world without an owner. Items already dropped on the ground stay public, as all dropped items do. Deleted data can remain in the encrypted backups until they expire (at most 30 days). While a ban is active, deletion waits until it ends.
Age
You must be 13 or older to play.
Contact
Contact address to be added by the operator.