Privacy policy
Placeholder text for the owner to review. It describes what the game's code stores today. Replace every [marked] part, keep it in step with the code and have it checked (GDPR and local law) before launch.
1. Who is responsible
[OPERATOR NAME, ADDRESS, COUNTRY, CONTACT EMAIL] is responsible for the data described here. [Data protection officer, if you need one.]
2. What we store and why
- Your account: your username and your password, stored only as a salted scrypt hash (we cannot read it). Needed to run your account (contract).
- Your game: your towns, buildings, troops, research, reports, achievements, Tidepearl balance and history, and when you were last online. Needed to run the game (contract).
- What you write: messages to other players, alliance texts and support tickets. Stored so they can be delivered and answered (contract).
- A session cookie (
sid) that keeps you signed in for up to 30 days. It is strictly necessary; we use no advertising or tracking cookies. - Settings in your browser (local storage), such as the sky and season of the map. They never leave your device.
- Technical data: your IP address is held in memory for a short time to stop abuse (too many sign-in attempts). To enforce the rule on shared connections, a keyed hash of it (not the address itself) is kept for 30 days, with the dealings between players (fleets, trades, armies, spies) of the same 30 days; the game masters see only which accounts share a connection. [If request logs are switched on (LOG_REQUESTS): IP address, time and page of each request, kept for [N] days.] Legitimate interest in a secure service.
- Purchases: [when a payment provider is added: what it receives, which data we keep for accounting and how long.]
3. Who else receives data
- Other players see your username, town names, portrait, alliance and rankings, and what you write to them.
- Our hosting provider [NAME, COUNTRY] runs the server.
- The pages load fonts from Google Fonts, which receives your IP address. [Or host the fonts yourself and remove this line.]
4. How long we keep it
As long as your account exists. When you delete your account (Options → Delete account) your account, towns, messages you received, reports and the rest of your game data are deleted at once. Messages you sent stay with their receivers without your name. Backups of the database are kept for [14] days and then deleted. [Accounting records of purchases may have to be kept longer by law.]
5. Your rights
You can ask for a copy of your data, have it corrected or deleted, restrict or object to its use, and take it with you. Write to [CONTACT EMAIL] or use Support in the game. You may also complain to a data protection authority [name of the authority in your country].
6. Children
Tidehold is not meant for children under [16] without the consent of a parent or guardian.
7. Changes
We update this policy when the game changes how it handles data, and tell you in the game about important changes.