Privacy and Data Management
Revised 2026-10-28.
Operator contact information is currently unavailable.
Information used by the game
- Account details
- Email address, username, internal account identifier and verification state support account access and account messages. Password accounts store a password hash. Linking a Google account uses your verified Google identity.
- Authentication and security
- Hashed session and recovery tokens, expiry and revocation information protect access. Abuse controls use hashed request-origin and account-identifier buckets. Email verification and password recovery forms use a signed essential security cookie. The account-management page holds its authenticated session only in page memory and clears it when you leave.
- Game information
- Characters, progression, inventory, equipment, talents, activity state and reward records allow the server to maintain your game.
- Operational records
- The application records request identifiers, route templates, status codes and timings. Delivery jobs contain encrypted account-email messages until delivered, cancelled or expired.
The current public website does not load optional analytics, advertising or device-fingerprinting scripts. It does not request access to your camera, microphone or location.
Delivery and hosting
Cloudflare connects the website and game API to the game server.
Retention
Account and game records remain in persistent server storage. You can request account deletion through the account-management page. The account-mail worker removes recovery and session records once their expiry is more than seven days old, and completed mail metadata once it is more than seven days old. This cleanup depends on the worker running.
Access, correction and deletion
Open Manage your account to sign in, review your account name and email, change your username or email, or delete your account. Changes require your current password or a new confirmation from your linked Google account. Email changes also require confirmation from the new mailbox. Deletion requires your exact account name and explicit confirmation. A completed account name change, email change or deletion ends all account sessions.
Your characters, equipment and progression are available through the game. Additional requests about retained records use the operator contact process below. Google sign-in loads Google's authentication service only when you choose it; Google may use its own authentication cookies. Third-party email addresses that Google cannot establish as current require Venture-Wake email verification before sign-in.
Account deletion removes your live account and owned game data. Shared Foray history retains anonymous participant and result records so other players' encounters and rewards remain consistent. Independently retained backups, logs and messages already sent or accepted by a mail provider require the operator's separate request-handling process. Do not include your password or recovery links in a support message.
Cookies and changes
Cookie settings explains the essential account-form cookie. Any future optional tracking requires a separate consent choice before it is loaded. This notice must be updated when actual collection, providers or retention change.