Privacy Policy

Effective 5 August 2026 · Version 1.1

The short version: we collect the little we need to run the game and keep your account safe, we don't run ads or trackers, and we never sell your data. Here's the detail.

1. What we collect

• Your email address: your account's identity, and how we send you a confirmation link and account-related messages.
• Your password: stored only as a one-way cryptographic hash (PBKDF2). We can't see or recover your actual password; nobody here ever knows it.
• Your characters and gameplay: the heroes you make and their progress: names, levels, inventory, position in the world, and the things you type that the game needs to remember (chat, boards, mail, and similar in-world content). The game also runs an automatic language filter: when a line you type trips it (in any channel, including whispers), the original unfiltered line is kept so a GameMaster can review it.
• Technical basics: like any website, our servers process your IP address and browser requests to deliver the game, and we use your IP briefly to rate-limit sign-in and registration attempts so the game isn't overrun by automated abuse. Standard server logs may record this connection information.

We don't ask for your real name, address, phone number, or payment details, because the game is free and doesn't need them.

2. What we don't do

We do not sell, rent, or trade your personal data. We don't run advertising, we don't embed third-party trackers or analytics, and the game doesn't load code or fonts from other companies that could watch you. There's no data broker on the other end of this; just the game.

3. How we use what we collect

Only to run Phoenix Sagas: to sign you in and keep you signed in, to save and show your characters and progress, to send you account email like a confirmation link, to keep the game secure and prevent abuse, which includes GameMasters reviewing lines the language filter flags, and to respond if you contact us. That's the whole list.

4. Cookies

We use a small number of strictly functional cookies: the ones that keep you logged in as you move around the site and the game. They're set to be read only by the server (HttpOnly), sent only to us (SameSite), and only over a secure connection. We do not use tracking or advertising cookies, so there's nothing here to profile you with. Because our cookies are essential to signing you in, blocking them will stop the game from working.

5. How your data is protected

Passwords are stored as salted PBKDF2 hashes, never in the clear. Sessions are carried in secure, server-only cookies. Connections to the game are served over HTTPS/TLS. No system is perfectly secure, but we take reasonable care with the little we hold.

6. How long we keep it

We keep your account and its data for as long as your account exists. If you ask us to close your account, we'll delete or anonymize your personal data within a reasonable time, except anything we're required to keep or need to resolve abuse. Remember that Phoenix Sagas is a beta: characters and worlds may also be reset as the game develops (see the Terms of Service).

7. Your choices and rights

You can ask us to show you the personal data we hold about you, correct it, or delete it and close your account. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, we'll honor those rights for everyone regardless. To make any request, email us at the address below.

8. Children

Phoenix Sagas isn't for children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we'll remove it.

9. Changes to this policy

If we change how we handle your data, we'll update the version and date at the top and note it where players will see it. If a change ever meant we'd start collecting or using data in a genuinely new way, we'd make that clear rather than bury it here.

10. Contact

Privacy questions or requests? Email [email protected].