Privacy and cookies
What the game keeps about you during the alpha. The full policy is still waiting for the owner’s review.
What the game stores
Creating an account asks for a username and a password, and at times an invite code. The game server salts and hashes your password; it is never stored as you typed it. The server keeps your character’s progress, equipment, bank and sessions, and the chat messages, clan details, Market offers and public profile that the social features show.
It also keeps a salted hash of the network address an account is made and played from, which cannot be turned back into the address. It limits free accounts to one per address a day during the open alpha, helps enforce bans, and lets the Market tell which accounts belong together; the Market forgets an address 30 days after it was last seen.
The game also counts, for each day, how many players reach each of its first steps, such as the title screen, a first catch or a return the next day, and whether they came from this website or from itch.io. These are plain totals: they hold no address, no name and no account, and they are kept for 90 days.
The website asks for no email address, phone number or real name.
Two essential cookies
The game uses two HttpOnly cookies. idle_session keeps you logged in, for up to seven days (a year for a guest); logging out ends it. idle_device marks the browser, so the open alpha gives one free account per browser and the Market can tell which accounts share one; it lasts up to 400 days, and the Market forgets a browser 90 days after it was last seen. On HTTPS both are Secure, both belong only to the game’s own address and neither is shared with this website.
This website sets no cookies of its own and loads no advertising or analytics trackers. It remembers nothing about your visit beyond what the browser caches, apart from whether you paused the videos. The web server may keep ordinary access logs.
Still to be confirmed
Operator: not yet published.
Privacy contact: not yet published.
Retention periods, how to ask for your data or its deletion, the jurisdiction and the age policy still need the owner’s review before a wider launch. This page is a factual alpha notice, not a complete legal policy.