Privacy policy

The short version

• The game never asks for your name, email address, phone number or age. Your account is a random code.
• There is no advertising, no tracking across other apps or websites, and nothing is sold. We never sell data about you.
• We keep what the game needs to run (your heroes and their history), a record of how the game is played so we can make it better, and the reports you or the game send us.
• Other players see your heroes' names, which are generated fantasy names, and what those heroes do in the realm.
• In the game's Settings you can turn play statistics off, download a file of what the game keeps about you, and delete your account (in the game, or on the web with your recovery code). What the account holds goes at once; a few copies and records (backups, logs, a note that the account was deleted) go later, at the times in section 5.

1. Who we are

The game is made and run by eGuys.Tech LTD ("eGuys", "we"), a private limited company registered in England and Wales, company number 14475865, registered office 14 Pinfold Road, Bushey, WD23 2DU, United Kingdom. eGuys decides what data the game keeps and why: it is the controller of your data.

Contact: support@legacyoftheashendragon.com, or the feedback button in the game (the speech bubble), which also tells us which account is yours.

We have no data protection officer, as none is required of us: for anything about your data, use the contact above.

Our representative in the EU (Article 27 of the GDPR), for players in the EU and the EEA: Cristian Mocanu, Str. Paraului, Nr. 10, Brasov, Romania, gdpr@eguys.tech.

This policy covers the web game at play.legacyoftheashendragon.com, and our website, legacyoftheashendragon.com, which sets no cookies and runs no analytics or scripts.

2. What we keep, and why

Your account

• A random account identifier. It is made on your device the first time you open the game, and it is how the game knows you.
• Your recovery code, six characters shown on the Hero tab. It brings your account back on another device, and it lets you delete the account on the web.
• Google sign-in, only if you use it, in the web game. Google gives your browser a token that also carries your Google email address, name and picture. Our server checks the token with Google, keeps only Google's identifier for your account, and throws the rest away at once. We never keep your email address, name or picture.
• When the account was made, and your choices: whether your heroes take part in duels, whether they may be named in the Daily Happenings, and whether you share play statistics (with when you last turned them off, kept for 13 months, so that statistics once deleted stay deleted, even if a backup is ever restored).

Why: to give you an account and let you come back to it.

Your heroes and your play

• Each hero (one per season): its generated name, level, health, gold and banked gold, gear, stance, its place on the game's map, the tiles it has seen, the monsters it has met, its quests, today's turns and blessing, and its honours when a season ends.
• Its history: every action it takes and what came of it, with the text of your journal.
• Its dealings with other heroes: meetings on the road (duels, shared stories, passing by) and the gold that moved, the cairns where heroes fell and who paid their respects, and the heroes you chose to ignore.
• The answer to your last actions, for 7 days, so that tapping again after a lost connection never spends a turn twice.

Why: this is the game itself.

Play statistics

Once you have joined a season, the game records a short list of events, each tied to your account and hero: when you open the game (at most once every half hour); each turn spent and on what; deaths and what caused them; levels gained; what you buy with the game's gold; rumours followed; quests started and finished; items found; bosses slain; meetings with other heroes, including those started by another player's hero; each game at an inn's dice table (the stake and result, in the game's gold); nemeses born of your hero's death (with the gold and level they took from it), and slain or gone; a Rebirth after the dragon (how long the climb took and the days spent at the top); opening the evening, the Daily Happenings and the dragon's letters, and listening to a letter read aloud; how each day ended; and turning messages on or off, receiving one, or opening the game from one. Nothing is recorded for statistics before you join.

Why: to learn whether the game is fun and fair and to balance it: how many players come back, where heroes die, whether a new feature is used. The team reads them mostly as totals and averages, and looks at one account's only to follow up a report or a problem. Statistics are never used for advertising and never leave our own systems (see section 6 for the services that host them).

You can turn them off at any time in Settings → Share play statistics: from then on nothing you do is counted, and what was counted so far is deleted, along with where you were and your device's details on the error reports the game last sent for you (below).

Bug reports and ideas you send

• What you write, and the kind of report (a bug, an idea, praise and so on).
• What the game adds so we can find the problem: the game's version; your screen size and pixel density; whether the game is installed on your home screen; whether you were online; your browser's identification string, which names the browser, its version, the operating system and sometimes the device model; your hero's state (level, health, gold, map position, turns left, what was on screen); the season and day; your hero's last dozen actions (which can name heroes you met); and, unless you untick the box, your last 30 requests, screens and error messages in the game, with their times, results and durations (never anything you typed).
• Our reply, which you see next to your report, and the team's internal notes on it (included in the file that Download my data gives you).

The game accepts reports before you join a season, too. Such a report belongs to no account yet: it is kept under the random identifier your browser was given, and becomes your account's if you join from that browser. If you never join, it is deleted after 90 days.

Why: to fix problems and answer you.

Error reports the game sends by itself

When the game hits an unexpected error, it sends the error message and technical trace, the game's version, where in the game you were (the screen, your level, map position and turns left), your screen width, whether you were online, and your browser's identification string. At most five a visit. The same error from many players is kept once, with a count and the account of the last player who hit it (or, before you join, your browser's random identifier, which is taken off it after 90 days if you never join). If you have turned play statistics off, we keep only the error itself (its message and trace, the game's version and when) and your account, not where you were or your device, and turning them off also clears that from the error reports you sent last.

Why: to find and fix crashes.

Messages, only if you turn them on

• In the web game: the address your browser's push service gave for this browser, and the keys that encrypt what we send to it; your time zone, such as "Europe/London", so that quiet hours follow your own clock; which messages you want; when each was last sent; and failed sends. When a browser stops asking, the time each message was last sent is kept on your account, so that turning messages on again the same day brings no second one.

Why: to send the messages you asked for (a new season opening, and, if offered and chosen, your turns being back), at most one a day and never during quiet hours. The messages say nothing about you.

Technical data, for security

• Your IP address. The game's server uses it to limit how many requests one address can send, for example to stop anyone guessing recovery codes. It is held in the server's memory while you are playing and for up to 20 minutes after your last request, and it is not written to the game's database or its request log. The web server keeps no log of ordinary requests, but its error log records a request that fails (for example while the game is being updated): your IP address, your browser's identification string and which page or part of the game was asked for. Cloudflare sees it on every request (section 6).
• A request log: one line for each request to the game's server, with the time, a request number, your account identifier, which part of the game was asked for (not what was sent), the result and how long it took.
• This website's access log: one line for each request to legacyoftheashendragon.com, with the time, your IP address, your browser's identification string and the page asked for, kept 14 days. The website keeps no visitor statistics.

Why: to keep the game and this website running and secure, stop abuse, and follow a bug report to its cause.

What we do not collect

Your name, email address, phone number, postal address, date of birth, contacts, photos, microphone, precise location, advertising identifier or payment details. There is nothing to buy in the game. The narrator's voice was recorded in advance: nothing you do or type is sent to a voice or AI service.

If you write to support, we receive your email address and what you write, in our mailbox (section 6). The game never links an email to your account.

3. What other players see

• Your heroes' names, chosen from generated names, never typed, with their level and deeds:
  • in the season's hall of fame;
  • when their hero meets yours on the road, in their journal afterwards, including duels and the gold that moved;
  • on the cairn where your hero fell, with what felled it;
  • when your hero pays respects at another hero's cairn, in that player's journal;
  • in the name of a monster that killed your hero and lived (a nemesis);
  • in the news of the realm (bosses your hero slew);
  • in the Daily Happenings, unless you turn that off in Settings.
• You can keep out of duels in Settings, and ignore another hero so that you never meet again.
• Other players never see your account identifier, your recovery code, or anything about you outside the game.
• If you delete your account, lines already written in other players' journals (and in their bug reports, which list their last actions) that name your hero stay as they were written.

4. Why we are allowed to use it (legal bases)

For players in the UK, the EU and the EEA, the UK GDPR and the GDPR let us use personal data only on a legal basis. These are ours.

We do not rely on your consent for anything, because we do nothing that would need it: the game shows no adverts, gives nothing to advertising networks, does no tracking across apps, websites or devices, and asks for no access to your location, camera, microphone or contacts. The permission your browser or device asks for before it shows messages is its own rule, not the basis on which we use your data.

Where we rely on legitimate interests, you can object (section 10).

5. How long we keep it

When you delete your account, what belongs to it goes at once: your account, recovery code and Google link; your heroes, their history and honours; your play statistics; your bug reports with our replies and notes; your message subscriptions and when each message was last sent; and the saved answers to your last actions. Your account is taken off the error reports it sent (each error stays, counted once for every player who hit it). What stays, and for how long:

• Copies in backups: on the server, 14 days; the encrypted copies offsite, up to 12 months. If one is ever restored, your account is deleted again at once.
• The list of deleted accounts: your account identifier and the date (and, if you had turned play statistics off, that date), 13 months.
• The request log (your account identifier beside each request) and the web server's error log (the IP address and browser of a request that failed): until the log is overwritten or the next update, as in the table above.
• Copies of your bug reports in our issue tracker, without your account or hero identifiers, and your emails to support, which the game never links to your account: as in the table above.
• Lines that name your hero in other players' journals and bug reports (section 3): as they were written.

6. Who handles data for us, and who else receives it

These companies work for us, on our instructions, under data processing terms, except your browser's push service and Google's sign-in, which serve you under your own agreement with them (their rows say how).

• Services that receive no player data: an uptime monitor (UptimeRobot) checks that the server answers, ElevenLabs recorded the narrator's voice in advance, and Dashlane keeps our keys and passwords (section 8).
• Nobody else. We do not sell, rent or trade data, and we share it with no advertiser or data broker. We would disclose it only if the law required it, or to a company that takes over the game, which would have to keep this policy's promises.

7. Where your data is

The game's server and database are in the EU, in Hetzner's data centre in Nuremberg, Germany. This website's server is also at Hetzner in Nuremberg, apart from the game's. The offsite backups are stored in the EU, in a Cloudflare R2 bucket set to keep its data there. The support mailbox is stored in the UK.

eGuys's test server stands on eGuys's own office network in the UK. It runs its own copy of the game, with its own database and test accounts, and holds no players' data, except that from time to time, to prove that the backups work, the latest one is restored there for a few minutes, checked, and deleted again.

Cloudflare's network is worldwide: a request is handled at a data centre near you and may pass through countries outside the UK and the EEA. Cloudflare, GitHub, Google, Microsoft, Apple and Mozilla are based in the United States. Cloudflare, GitHub, Google and Microsoft are certified under the EU–US Data Privacy Framework and its UK Extension (the list is at dataprivacyframework.gov), and transfers to them rely on it. Transfers to any other company that handles data for us outside the UK and the EEA rely on the standard contractual clauses in its data processing terms, with the UK's addendum.

Your browser's push service is different: we do not choose it. Your browser does, and the browser's maker runs it (Google for Chrome, Mozilla for Firefox, Apple for Safari, Microsoft for Edge) under your own agreement with them. What we send through it is encrypted end to end, for your browser alone, so the service cannot read it: it sees only the address it gave your browser, when a message is sent, its size and which of the two messages it is. Google and Microsoft are certified under the Data Privacy Framework, as above. Apple's and Mozilla's services are not; they may be outside the UK and the EEA, and we have no data processing terms with them. The address and the encrypted message go to them only because you turned messages on in that browser, and there is no other way to deliver messages to it: the UK GDPR and the GDPR allow a transfer that is necessary for our contract with you (Article 49(1)(b)).

8. How we protect it

• Everything between your device and the game travels encrypted (HTTPS).
• The database cannot be reached from the internet. Its copies on the server can be read only by the server's administrator account, and backups are encrypted before they are copied off the server.
• The key to the encrypted backups is kept on the game's server, on eGuys's test server (for the restore check in section 7) and in eGuys's password vault (Dashlane).
• The keys and passwords that open the servers, the backups and the reports are kept in that vault, which only the director of eGuys.Tech LTD can open.
• Your recovery code is the key to your account. Anyone who has it can play your heroes or delete the account. Keep it private. Nobody from eGuys will ever ask you for it, by email, in the game or anywhere else.

9. Children

The game is for adults, aged 18 and over. It is not directed at children, and we do not knowingly keep data about anyone younger. Because the game asks for no name, email or age, we cannot tell who is playing. If a child has been playing, delete the account from the game's Settings, or with its recovery code at https://play.legacyoftheashendragon.com/delete-account, or use the feedback button on that device to ask us to. When we learn that an account belongs to someone under 18, we delete it.

10. Your rights, and how to use them

Depending on where you live (in the UK these rights come from the UK GDPR, and in the EU and the EEA from the GDPR), you can:

• see what we keep about you, and take a copy to use elsewhere: in the game, Settings → Download my data gives you a file of what the game's database keeps about your account. For your safety, the secrets that open your account (its identifier and recovery code) and the address and keys of your message subscriptions are listed but not shown; what we keep outside the database (logs, backups, emails) is in section 5, and we will tell you about it if you ask;
• have it corrected, if anything is wrong;
• delete it, at any time and at once: Settings → Delete account in the game, or https://play.legacyoftheashendragon.com/delete-account with your recovery code (section 5 says what stays for a while, and how long). If you signed in with Google and do not know your code, sign in with Google in the game and delete from Settings;
• object to play statistics: turn off Settings → Share play statistics, which stops the counting and deletes what was counted so far. To object to our other uses based on legitimate interests, ask us;
• ask us to restrict how we use it;
• turn messages off, in Settings or in your device's settings;
• complain to a data protection authority. Ours is the UK Information Commissioner's Office (ico.org.uk). If you live in the EU or the EEA, you may also complain to the authority where you live.

How to ask. For anything the game's Settings cannot do for you (a correction, a restriction, an objection, a question), ask us. Accounts have no name or email, so we need to know that a request comes from the account's owner. The simplest way is the feedback button in the game: it tells us which account is yours, and you reveal nothing else. You can also write to support@legacyoftheashendragon.com; we may then ask you to confirm the request from inside the game, for example by sending a report that quotes a word we give you. Never send us your recovery code. We answer within one month.

If nobody can show that an account is theirs (the device is gone and so is the recovery code), nobody, us included, can tell whose it is.

We do not sell personal information or share it for cross-context behavioural advertising, and we make no automated decisions about you that have legal or similarly significant effects. If you live in the United States, section 12 says more.

11. Storage on your device

In the web game. The game sets no cookies of its own. It keeps these items in your browser's storage for the game's address, on your device, and nothing else:

• playtest_userId: your account identifier, the key to your account in that browser. Clearing the site's data signs that browser out, and your recovery code brings the account back;
• gd_settings: your settings (the volumes of the sound effects, the narrator and the background sound, text size, and motion), and gd_muted, whether sound is off. An older version of the game may have left gd_narrator, the narrator's switch from before the settings existed, which the game still reads;
• gd_push: which messages you asked for on this browser;
• gd_hints: which tips you have already seen, and whether you turned tips off;
• gd_dawn, chronicle_seen and gd_ceremony_ followed by a season's code: the last dawn you saw, the last "since you were last here" summary you closed, and the end-of-season ceremonies you have seen, so they are not shown twice;
• gd_name_later: the season in which you chose to name your hero later;
• gd_notices_seen: the numbers of the notices from us that you closed (section 13), so they stay closed;
• gd_admin_token: only on the devices of our own team, for the team's own page; never on a player's.

The game's service worker also keeps the game's own files (its pages, code, fonts and icons, the narrator's lines and the background sounds) in the browser's cache, so the game opens quickly and copes with a weak connection or none.

We ask for no consent to any of this, because none of it is there for statistics, advertising or tracking: play statistics are counted on our server from what you do in the game, and nothing is stored on your device for them. Each item serves the game you asked for: signing you in, remembering the choices you made, and not showing you again what you have already seen or closed. None of it is sent to anyone else.

Once you tap to sign in with Google, Google's script sets a small cookie of its own, g_state, on the game's address, to remember the state of its sign-in; our server never reads it. Nothing from Google is stored before that tap (section 6). Cloudflare sets no cookies, but asks your browser to remember, for a while, to report failed connections to it (Network Error Logging, section 6).

On this website. It sets no cookies and uses none of your browser's storage: your browser only keeps its pages, fonts and pictures in its cache, as for any website.

12. US state privacy laws

Several US states give their residents rights over their personal information, among them California (the California Consumer Privacy Act, as amended by the California Privacy Rights Act), Virginia, Colorado and Texas. Where these laws apply to us, this section says how we meet them. The rest of this policy applies too.

What we do not do. We do not sell personal information, and we do not share it for cross-context behavioural advertising, as the California law defines those words. We do not use it for targeted advertising, and we do no profiling that leads to decisions with legal or similarly significant effects on you.

What we collected in the last 12 months:

• Identifiers: your account's random identifier and recovery code, Google's identifier for your account if you linked Google, the address of your browser's push service if you turned messages on, your IP address, and your email address if you wrote to support.
• Internet or other electronic network activity: your heroes and everything they did in the game, play statistics, bug and error reports with the device and browser details the game adds to them, and the game's request and error logs, and this website's access log.
• Your time zone, if you turned messages on: a broad region such as "Europe/London", never your precise location.
• What you wrote to us, in bug reports and emails.
• Sensitive personal information: none of the kinds these laws list (such as precise location, health or government identifiers), with one exception under the California law, which counts an account log-in together with the code that opens the account: your account identifier with its recovery code. We use it only to sign you in and keep your account safe, as that law allows, and never to infer anything about you, so there is nothing to limit.
• No inferences drawn to build a profile of you.

Where it comes from: from you (what you choose and write), from your device and browser (what the game sends as you play), from the game itself (the record of your heroes' deeds), and from Google if you sign in with Google.

What for: to run the game and your account, to keep them secure and stop abuse, to fix problems and answer you, to learn how the game is played and make it better, and to meet our legal obligations (sections 2 and 4).

Who receives it: the service providers in section 6, which handle it for us, for those purposes; at your request, your browser's push service if you turn messages on in that browser (the messages encrypted, so it cannot read them; sections 6 and 7), and Google if you sign in with Google (section 6); and other players, what section 3 says, as part of the game you chose. Nothing is sold or shared.

How long we keep it: as section 5 says, for each kind.

Your rights. Depending on the state where you live, you can:

• know what we collect and have a copy of it: Settings → Download my data gives you a file you can take elsewhere;
• have it corrected;
• have it deleted: Settings → Delete account, or https://play.legacyoftheashendragon.com/delete-account with your recovery code;
• opt out of the sale or sharing of your personal information, of targeted advertising and of profiling: we do none of these, so there is nothing to opt out of;
• not be treated differently for using any of these rights.

Global Privacy Control. We honour Global Privacy Control, a signal some browsers send, as a valid request to opt out of the sale and sharing of your personal information. Since we sell and share nothing, it changes nothing in practice. For the same reason there is no "Do Not Sell or Share My Personal Information" link: the law asks for one only from businesses that sell or share personal information.

How to ask, and how we check that it is you. Use the game's Settings, the feedback button in the game, or write to support@legacyoftheashendragon.com. Accounts have no name or email, so we check a request through the game itself, from a device signed in to the account (section 10). We never ask for your recovery code. Someone acting for you (an authorised agent) may make a request with your signed permission; we then confirm it with you through the game in the same way. We answer within one month.

Appeals. If we refuse a request, in whole or in part, we tell you why. You can appeal within 60 days of our answer: write to support@legacyoftheashendragon.com, or reply to our answer, with the word "Appeal" and what you want us to look at again. We answer an appeal in writing within 45 days, saying what we did and why. If we still refuse, we tell you how to contact your state's attorney general, to whom you can complain.

Minors. The game is for adults (section 9). We do not knowingly collect personal information of anyone under 18, and we delete an account when we learn that it belongs to someone under 18. We never sell or share anyone's personal information, whatever their age.

13. Changes to this policy

Each version is dated. Before a change that matters takes effect, such as a new kind of data or a new company receiving it, we will tell you in the game at least 30 days ahead, in a notice at the top of the game that every player sees until they close it. Earlier versions stay readable on this website, each at its own address, and are listed under Earlier versions at the end of this page.

14. Contact

eGuys.Tech LTD, 14 Pinfold Road, Bushey, WD23 2DU, United Kingdom · support@legacyoftheashendragon.com · or the feedback button in the game.

In the EU and the EEA: our representative, Cristian Mocanu, Str. Paraului, Nr. 10, Brasov, Romania · gdpr@eguys.tech.

Earlier versions

This is the first version of this policy.