Privacy Policy

What We Collect

Account: your email address and username. If you sign in with Google we receive your email and basic profile info from Google — nothing else, and we never post or act on your behalf. We never see or store your password; sign-in is handled by our authentication provider.

Gameplay: characters, progress, inventory, clan membership, chat and direct messages, and purchase history.

Technical: your device and browser type (user-agent), and your IP address, which we record when you sign in and when you redeem a referral code. We use it to detect abuse — in particular, referral rewards are automatically flagged for review when a new player's IP matches the person who invited them. Flagged referrals, including the IP involved, are visible to our moderation staff. We do not use IP for advertising or profiling beyond this, and we never share it.

Crash reports: if the game hits an unexpected error while you are signed in, it automatically files a report containing the error message, a short stack trace, your user-agent, and your character's level and current screen. These are linked to your account and are readable by our support staff. They are used only to fix bugs.

Notifications: if you enable push notifications, we store the notification address your browser issues (and its encryption keys) so we can send you alerts. Delivering a notification necessarily routes it through your browser vendor's push service — Google, Mozilla or Apple depending on your browser.

How We Use It

To run the game: saving progress, syncing across devices, multiplayer features (chat, clans, PvP, leaderboards — your character name and stats are visible to other players), preventing cheating and abuse, processing purchases, and responding to support tickets. We do NOT sell your data and we do not use it for advertising. The game contains no advertising SDK, no analytics SDK, and no tracking or fingerprinting of any kind.

Where It Lives & Who Else Sees It

Game data is stored with Supabase (database and authentication, US region) and served through Vercel and Railway (hosting). These providers process data on our behalf.

Payments are live. Card payments are handled by Stripe and in-app Android purchases by Google Play Billing. Card details are entered on their hosted pages and never reach our servers — we never see or store card numbers. When you first subscribe we do send your email address to Stripe so it can identify your customer record. We store only a customer reference, your subscription tier and its expiry.

Our web pages load fonts from Google Fonts and two code libraries from public CDNs (jsDelivr and the socket.io CDN). Loading a file from any of these necessarily reveals your IP address and browser to that provider. We do not send them anything else, and none of them set advertising cookies.

Chat, Messages & Moderation

Channel chat is visible to other players in that channel. Direct messages are private between you and the recipient — but if either participant reports a message, a copy of that message's text is saved to our moderation queue and can be read by our staff. Reports are kept as moderation evidence and are retained even if the reported account is later deleted.

Channel history shown in-game is limited by age and volume (for example, global chat displays the last 7 days). Older messages stop being displayed, and each channel is trimmed to a maximum number of stored messages, but we do not guarantee that a message is erased from our database on a fixed schedule. Direct messages are kept until you delete your account. Staff can view recent channel messages for moderation; staff cannot browse your direct messages.

Your character name, level, class, equipped cosmetics, clan, and battle stats are public within the game (profiles, leaderboards, feeds). Your email address is never shown to other players.

You can block another player at any time from any of their chat messages, which hides their messages from you and stops their direct messages. Blocks are private — the other player is not told — and you can undo one in Settings → Account.

Backups

We take automatic database backups every six hours and keep them for three days. These include account records. If you delete your account, we also purge it from these backups rather than waiting for them to age out.

Retention & Deletion

We keep your data while your account is active. You can delete your account yourself in-game at any time via Settings → Account → Delete My Account; it completes automatically after a 7-day grace period, during which you can sign back in and cancel. Requests made by email are completed within 30 days.

Some records deliberately survive deletion: purchase records (required for tax and accounting), moderation and ban history, reports filed about your messages, and a dated note that a deletion occurred. Records that involve other players — a PvP match, damage you dealt to a world boss, clan war points, public chat messages — are kept but detached from you, because deleting them would erase part of another player's history. See How to delete your account for the full detail.

Cookies & Storage

We use your browser's localStorage, sessionStorage and IndexedDB to hold your session token and local game state. No third-party advertising or tracking cookies.

Security

All traffic between your device and our servers is encrypted in transit (HTTPS). Data is stored on infrastructure that encrypts data at rest. No system is perfectly secure, and we will tell you in-game if an incident affects your account.

Children

Shadow Realms is intended for players aged 13 and over and is not directed at children under 13. We do not knowingly collect their data. If you believe a child under 13 has an account, contact us via Send Feedback and we'll remove it.

Your Rights

You can access and correct your account details in-game, delete your account at any time (see above), and ask us what we hold about you. Contact us using the details below; we do not charge for these requests.

Contact & Changes

Questions or requests: use Send Feedback → Support in the System menu in-game. We'll announce material policy changes in-game.