Privacy policy
Draft, last updated 20 October 2026
This is a draft for review before the game stores emails or takes payments. The business name and contact details are placeholders until they are confirmed.
What we collect, and why
| What | Why |
|---|---|
| Your display name and player tag (Name#N, a number given in the order accounts are made), and the names you had before | So friends can find you and see who is at which gate, and so a report can tell who said what |
| Your friends list, friend requests, and the players you block or mute | So friends can see when you are online and invite you, and so blocked players can never message or invite you |
| Chat messages in lobbies and matches, and whispers between friends | To pass them to the other players. Every message goes through our filter on the way, and we never share it with anyone else. |
| Your chat choices in Options (chat on or off, friend requests on or off) | So they follow you to every device |
| Your email address, if you make an account or sign in by email or Google | To sign you in, and to send you a sign-in link or a password reset link when you ask for one. We do not send marketing. |
| Your password, only as a salted hash: a scrambled code made from it that cannot be turned back into the password | To check your password when you log in. We never store the password itself, and nobody on the team can read it. |
| Password reset links, only as a hash of the link | So a link works once, for 30 minutes, and only for the account it was sent to |
| Sign-in attempts: a salted hash of the email tried and of your internet address, never the email or address itself | So nobody can guess passwords or make accounts by the thousand |
| Your progress: Neons, levels, unlocks, faction, match history | To keep your progress and pay match rewards |
| What you have bought (Ember Shard packs, Founding Member) and the payment reference Stripe gives us | To add what you bought to your account, and to handle refunds |
| A session cookie | To keep you signed in: for 30 days of not playing with "Keep me signed in" ticked, otherwise until you close your browser. It is the only cookie we set for players, and it is not used for tracking. (The team's own admin area sets one more cookie, for staff only.) |
| Anonymous game counters (for example, which wave a match ended on, or frame rate) | To balance the game and fix slow spots. These never include your name, email or payment details. |
| How you play, tied to your account: the days you play, how long each visit lasts, and key moments such as a match started or finished, a Journey level started or cleared, a faction chosen, a purchase, or joining the ranked queue | So we can see how many people play, where new players get stuck, and how to make the Journey better. This never includes your email, payment details or address. |
| Ranked: your rating, ranked games played and won, and any strikes for leaving ranked games | To match you with players of your skill, and to keep ranked games fair for the players who stay |
| The match you are playing right now | So a refresh or a dropped connection can put you back in the same game |
| A salted hash of your internet address, only while a ranked ban needs it. The address itself is never stored. | So a day without Ranked for leaving five games cannot be skipped with a new account |
| Reports you send about other players: the reason, your note, and the last few messages the player you reported sent in that lobby, match or whisper | So the team can check what happened and keep the game friendly. The player you report is never told who reported them. |
We never see or store your card details. Stripe handles payment on its own page.
Who helps us run the game
We use a few service providers, who only process data to provide their service to us: Cloudflare (hosting and the game servers), Stripe (payments), Google (only if you choose Google sign-in) and an email delivery service for sign-in and password reset emails. Some of them store data outside Australia.
How long we keep it
We keep your account while you use it. Guest accounts that have not been used for 12 months may be deleted. The key moments of how you play are kept for 90 days, then only daily totals remain; the days you played are kept for 400 days. Sign-in attempts, to your account or to the team's admin area, keep only salted hashes, for one day. A password reset link stops working after 30 minutes or once it is used, and is deleted a day later. Changing your password signs out your other devices. A strike for leaving a ranked game counts for a week and is deleted after 30 days; a hashed address for a ranked ban is deleted when the ban ends (after a day); the match you are in is forgotten when it ends. Chat messages and whispers are deleted 72 hours after they are sent. Reports, with the messages copied into them, are kept for 180 days. Your friends list, blocks and mutes are kept until you change them or delete your account. Ask us and we will delete your account and the data tied to it, except payment records we must keep by law.
Your choices
You can play as a guest without giving an email. You can ask to see, fix or delete your data by writing to [CONTACT EMAIL]. If you are unhappy with how we handled it, you can complain to us first, and then to the Office of the Australian Information Commissioner.
Children
The game is not aimed at children under 13, and we do not knowingly collect their data.