Privacy
The same notice is in the game under PRIVACY, on the title screen and in ☰ SETTINGS › GAME, where SHARE PLAY STATS and FORGET THIS BROWSER are.
The Citadel of Thorns keeps your game in this browser: your save, your settings, a key this browser makes for itself, and your sign-in if you sign in. FORGET THIS BROWSER below clears them all. The game is run by Haldrin Studios Ltd (Finland), which is responsible for the data described here: [email protected].
To show Top players, to keep a backup of your save and to make the game better, the game also sends some of it to our server (hosted by Cloudflare). What it keeps, and for how long:
- a random player id, that key (hashed) and the name you choose for your hero — a year after your last visit; 30 days if you never finished a run; 18 months if you signed in
- your runs, your hero's progress, your purchases and a backup of your save — the same
- your browser, screen size, graphics card, country and frame rate, and how you moved through the game, with the tag of the link that brought you — the same; SHARE PLAY STATS below stops these (your runs and your backup still go)
- what you write in FEEDBACK, with the screen you were on — 180 days
- what you write in the chat, with any picture you post — until you delete it or the chat moves on; pictures 180 days
- if you sign in: your e-mail address, used only to sign you in (the mail goes out through Resend) — 18 months after your last sign-in
- if you ask the Oracle: your question and your hero's standing, answered by Anthropic's Claude — 30 days; a BUG or FEATURE report 180 days
- your network address, for an hour, against floods — never in a record
No ad trackers, no selling, nothing shared beyond the services above. Nightly copies of the server's data are kept 14 nights. To have everything our server keeps about you deleted, ask through FEEDBACK or at [email protected] with your player id or your e-mail address: it is done within 14 days.
Cloudflare, Anthropic and Resend are US companies, so some of this data is processed outside the EU, under their data protection terms. You can ask to see, correct or delete what we keep about you, and you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi). Anything else: [email protected].