Privacy Policy

This policy explains what Delvestead (“we”, “us”) collects and why. The short version: you can play without giving us anything, and an account stores only what’s needed to sign you in and sync your saves.

Playing without an account

The game keeps its saves and settings on your device (in the browser, in your browser’s storage). Nothing is sent to us while you play signed out. The website doesn’t use advertising or tracking cookies.

When you create an account

• Email address, encrypted at rest, to sign you in and to send you a link if you forget your password.
• Password, stored only as a one-way hash, if you choose one.
• Google account id, if you sign in with Google. We receive your email and the fact that Google verified it; we don’t get your contacts, files or anything else.
• Sign-in sessions: the browser and IP address of each session, to keep you signed in and spot misuse.

Cloud saves and linked devices

When a signed-in game syncs, we store each character’s save file (the hero’s name, progress, items and settings the game writes in it) and when and from which device it was saved. For each linked device we store its name and platform as the game reports them (for example “MacBook · Mac”) and when it was last used. Only a hash of the device’s token is stored.

Emails

We send account emails only: password reset links and answers to messages you send us. No newsletters unless you ask for one. Emails go through Mailgun.

Where data lives and who sees it

The website and its database run on our own server. We share data only with the services that run the site (hosting, email delivery, Google for Google sign-in), or when the law requires it. We never sell data or use it for ads.

How long we keep it

As long as you have the account. Deleting it (from your account page) removes your email, sessions, linked devices and cloud saves right away; backups roll over within 30 days. Messages you sent to support may be kept in our inbox.

Your rights

You can see what we hold (your account page shows your characters and devices), correct it, export it or delete it. Write to support@delvestead.com for anything the account page doesn’t cover.

Children

Delvestead is suitable for all ages, but accounts are for people 13 and older (or the age of digital consent where you live). Younger players can play without an account.

Changes

If this policy changes in a way that matters, we’ll update the date above and, for big changes, tell account holders by email.