Privacy

Your account

You can start without giving anything: the first time you open the game your device is given a randomly generated player id and a device token, and that pair is your account. A recovery code is created at the same time so you can move to another device; only a hashed form of it is stored, never the code itself.

If you choose to sign in with an e-mail address instead, the game e-mails you a short code. The address is never stored readable: the server keeps a keyed hash of it (so it can find your account the next time) and a masked hint such as r•••@example.com that only you see in your settings. The code e-mail is sent through AhaSend, an e-mail delivery service, which receives the address to deliver it. If you choose Google sign-in, the server stores only the account number Google gives the game, not your Google e-mail or profile.

Your name and your friends

When you create an account you choose a name (letters and digits). It is shown only to the players you have accepted as friends — never to anyone else, never on a map. A short number is stored with it so two players can share a name; it appears only on a friend's own page.

Friends are added with a friend code or its QR code, and both sides must accept. A friend sees your name, your character's appearance, the title you wear and your combat level — never your location, never whether you are online. There is no chat and no messaging. If a friend reports your name, the report (who reported, which name, when) is kept for review, and an unsuitable name can be reset so you choose a new one.

Location — foreground only

The game reads your device's location only while it is open on screen. It does not ask for and does not use Android's background location permission, and it runs no background service: leave the game and it stops reading your position. The only location permissions it declares are the ordinary foreground ones.

Your location decides what can be collected where you are standing. It is never shown to other players.

Steps

If you allow it, the game reads your phone's step counter for walking tasks. It stores the number of steps it has counted for you and the last reading of the counter — numbers, never a place or a route. Without that permission it counts the distance between the positions it already checks instead.

What is stored about you

• A random player id — no real-world identity is attached to it.
• For each pickup you make: the map cell it happened in — a hexagon of roughly 130 m — and the quarter-hour it happened in. The cell and the time, not a position.
• One last accepted position, stored as a single row and overwritten by the next one. It exists so the server can tell whether you moved implausibly fast between two pickups. No history is kept behind it.
• Running totals for walking tasks: metres walked and steps counted — totals, not routes.
• The municipality in which you first discovered a given resource or creature, so the game can tell you where you first found it.
• Your progress: what you carry, your skills, your settlement, your animals and your journal.
• Your name, your friends, your friend requests and your friend code.
• A hashed device token and a hashed recovery code; if you use them, the keyed hash and masked hint of your e-mail address, or the account number of your Google sign-in.
• Your chosen language and unit system.

What is never stored

No raw GPS traces: no route, no path, no record of where you have been between pickups. No readable e-mail address, phone number, contacts, advertising identifier or payment data. No photos, no microphone, no access to your files.

No analytics, no ads, no tracking

The game contains no third-party analytics, no advertising SDK and no tracking SDK. Nothing about you is handed to another company for its own purposes. The measurements the game does take are aggregate: how the game's balance behaves across play, never a profile of a person.

The connection

Your device talks to a single server. That connection is carried through Cloudflare, which as the network provider sees the connection itself — including your IP address — in the way any network provider does. The game's own server does not write your IP address to its database. It holds it briefly as a counter on the account endpoints, so those cannot be hammered from one address, and that counter expires within an hour.

Weather

The server records hourly weather for a region, because some things in the game appear only in certain conditions. Those rows describe the region, not you, and are not linked to any player.

Where the data lives

On the operator's own machines in Belgium, in the European Union. It is not sold, rented or traded, and it is not shared with anyone for their own purposes.

Deleting your data

In the game, Settings → Account → Delete account removes your account and everything stored under it at once, friendships and name reports included. You can also write to the address below.

Changes

If this policy changes, the date at the top of this page changes with it.

Contact

[email protected]