Privacy

What we keep, and why

To let you sign in, we store your email address. If you sign in through another service, we also store that service’s name, the account identifier it gives us, and the email address it reports. If you link a social account to your profile, we store its username and avatar, so other players can see it.

We do not store your IP address. We store a one-way hash of it, which lets us notice abuse coming from one place without keeping a record of where you are. Sign-in codes and session tokens are kept the same way, so that somebody who reads the database cannot sign in as you.

Every change you make in the game is recorded, so that moderators can see what happened. For ninety days that record also notes the browser you used and the site the request came from; after that, those two details are cleared and only what you did stays. Backups made before then still hold them until those backups age out, at most about thirteen months later.

If you turn on alerts on a device, we store the address your browser’s push service gave it and the keys that let only that browser read what we send. The message is encrypted before it leaves us: the service that carries it (Google, Mozilla, Apple or Microsoft, depending on your browser) sees that something was sent, not what it says. Turning alerts off, or signing out on that device, deletes the address.

Other players can see roughly when you were last active, to the nearest quarter of an hour, and a chat room shows who was in it in the last full quarter of an hour. Turn “Show when I am online” off in Settings and neither shows you.

Everything else we hold is the game itself: your citizen, what it owns, where it has lived, what it has done. Some of that is public on purpose. Your citizenship history is permanent and public, and so is what you did in a battle. The game’s rules say which parts are public, and that does not change quietly.

Where it is kept

On a server in Falkenstein, Germany, rented from Hetzner. Backups go to Hetzner storage, also in Germany. Nothing is copied outside the EU.

For how long

This is a closed alpha, and the world will be deleted when it ends. Your citizen, its history and everything it owned go with it. Your account and email address are deleted too, unless you ask us to keep them so you can come back.

How to be deleted sooner

Email hello@grayhorizon.world and say so. We will delete your account and the identities attached to it. A few things cannot be unmade without destroying somebody else’s record too: a battle you fought in, a trade you were the other side of. Those keep a reference to a citizen with no name attached to it any more.

Who is responsible

Nikola Filić, reachable at hello@grayhorizon.world. This is a hobby project run by one person, not a company.