Privacy policy

1. Data you provide

An account can contain your public name, email, password hash, linked sign-in provider and provider identifier. Enabled providers may supply a display name, username and verified email. The game does not need your social-network password.

We also handle your progress, discoveries, favourites, achievements, tutorial state, game preferences, world access and any support correspondence you send.

2. Technical data and game analytics

When analytics is enabled in the administration panel and you have not opted out, the game records a pseudonymous visitor identifier, sessions, gameplay events, active time, reactions, tutorial steps, experiment participation, language and general device class. Necessary server and security logs may include IP addresses, request times and browser information even when analytics is off.

We do not collect a hardware fingerprint for new analytics. An identifier used to continue guest expeditions is separate from permission to analyse your behaviour. When analytics is enabled, guest analytics can be associated with your account after sign-in. Identifiable or pseudonymous records are not anonymous.

Country is estimated locally using DB-IP Country Lite (CC BY 4.0), without sending your IP to DB-IP. Product analytics keeps country, browser family and operating-system family, not raw IP or precise coordinates. When analytics is enabled, self-hosted Umami receives a limited page view; URL queries, fragments, account identifiers and screen recordings are excluded.

When the game is visible, a heartbeat indicates your presence. Signed-in accounts accumulate approximate online time for achievements. Optional analytics records visited pages, opened windows, and approximate country, city and network from local GeoIP databases, without storing the raw IP in these events. If you allow Telegram messages, we keep your Telegram contact, language and permission, plus campaign delivery results and individual link clicks and game opens. Telegram does not provide ordinary bot message read receipts. You can block the bot to stop messages.

3. Cookies and local storage

Necessary browser storage keeps guest progress, expeditions, preferences and your privacy choice. Session and security cookies support sign-in and request protection. Clearing necessary storage can remove guest progress; it does not delete your account or server records.

Analytics is enabled by default when the administration panel allows it. You can switch it off using the privacy control on this page; refusal does not prevent playing or saving. Analytics uses separate visitor, session and pending-event storage. Its visitor cookie lasts at most 180 days; browser rules may shorten this. A saved refusal remains in effect until you change it. The default setting is not a record of consent.

You can disable analytics on this privacy page at any time. This stops optional collection and experiment participation, clears pending analytics and its local identifiers, and keeps game saves. DNT and GPC signals also stop optional collection. Switching it off does not itself erase past server records; use your account controls or contact the privacy address for deletion.

4. Purposes and legal grounds

Account, progress synchronisation, requested rewards, purchases and support are processed to provide the service you ask for. Necessary security, fraud prevention and recovery use our legitimate interest in protecting the game and its players, subject to your rights. Records specifically required by law rely on the relevant legal obligation.

Product analytics, self-hosted Umami and measured A/B experiments help evaluate game usability and reliability. Experiments compare game features using stable groups; they do not determine legal rights or make decisions with similarly significant effects. Accepting the game terms or continuing to play is not consent to analytics or advertising. Where prior consent is legally required for optional tracking, the operator must establish that consent before using it; a default-on setting does not satisfy that requirement. Advertising providers may require a separate informed choice before an ad is requested.

5. What other players can see

Public names, selected achievement and collection milestones, leaderboard positions, discovered AI-assisted elements and first-discovery names and times can appear on public pages or in World Pulse. Shared links can be forwarded and indexed. They do not expose email addresses, passwords or sign-in tokens.

Avoid putting contact details or sensitive information in public names or shared material. Removing information from the game cannot recall copies independently kept by recipients or search engines.

6. Service providers and platforms

The game database and Umami run on our hosted server. Namecheap Private Email handles transactional and support email, including the recipient address and message. Cloudflare currently provides authoritative DNS; its proxy for game traffic is disabled. DB-IP supplies a country database downloaded to our server, not a remote lookup of each visitor.

External sign-in, advertising and payments apply only when their integration is enabled and you use it. Their providers can receive authentication identifiers, verified profile fields, ad-session and completion data, or payment references needed for the feature. Card details entered on a payment platform are handled by that platform. We do not sell personal data.

Providers may process data outside your country. Ask the privacy contact for the current recipients, processing locations and applicable transfer safeguards. Where GDPR restricts a transfer, an applicable adequacy decision or another lawful safeguard, such as standard contractual clauses, is required; the operator must confirm these arrangements for the services it uses.

7. AI and automated features

Current first-discovery presentation uses prepared, reviewed content. It does not require sending every player combination to a live AI service. World Pulse can use templates based on game events and separately labelled stories.

If a future feature sends prompts or player content to an external AI provider, its data use and provider must be explained before use. Do not submit sensitive information through creative features.

8. Retention

Detailed product and Umami analytics is retained for 7 days by default. Before old details are deleted, anonymous daily totals are archived for long-term charts. These totals contain no IP addresses, account, visitor or session identifiers, or individual action histories. Game progress and necessary service records have separate purposes and are not analytics archives.

Account data remains while your account provides the requested service, until you delete it or a justified retention rule applies. Self-service deletion removes account and linked analytics data and anonymises public attribution; globally discovered elements remain available. Minimal transaction records needed for legal accounting, refunds or disputes can be retained separately, including the required payment reference and, for Telegram refunds, payer identifier.

Encrypted backup snapshots are normally retained for seven days and are not used for routine analytics. A deleted account may remain in a protected old snapshot until it expires. A minimal protected erasure record must be reapplied before a recovered database is put back into service. Security incidents and legally required transaction records may require different retention; contact privacy for the applicable category and reason.

9. Your choices and requests

You can request a copy of your account data through the privacy contact listed below. In account settings you can request permanent account deletion after confirming ownership. Deletion signs you out and revokes sessions; it removes your account, linked sign-in methods, private progress and linked analytics, and removes your name from public attribution. It does not remove other players’ progress or globally discovered elements. Unlinking one sign-in method alone does not delete an account.

You may also write to privacy@alchemius.com to request access, correction, deletion, restriction, portability or to object to processing. GDPR requests are normally answered within one month; if a lawful extension is needed, you will be told within that month. You can complain to the competent data-protection authority, including where you live or work in the EEA. We may need proportionate identity verification; never email a password or login code.

10. Children and safety

Children’s data requires additional protection. The release audience, age checks and any parental-consent process must be set before launch. An age statement in these documents alone does not implement those safeguards.

If you believe a child has provided information without the permission required by law, contact the privacy address. Do not post a child’s private information in public game areas.

11. Security and changes

The game uses access controls, password hashing and verification of sign-in, purchase and reward events. No system is completely secure. Report suspected account access or data exposure to support.

A new version date identifies changes to this notice. Material changes or new purposes requiring consent must be communicated before the affected processing begins. The terms and this privacy notice serve different purposes; agreeing to the game rules does not waive data-protection rights.