Privacy Policy

Who runs this

Game of Hamlets is a browser game run as a side project, not by a company with a privacy department. One person reads the address at the foot of this page, and that is the whole of it.

What is stored

Your email address, so the account has a name to sign in with.

Your password, only as a bcrypt hash. The password itself is never written down anywhere and nobody here can read it or recover it.

Your village: its name, its buildings, its stores, its people, and everything else the game needs in order to show it to you again.

Your market offers and the deliveries owed to you. These carry your village name, because the player on the other side of a trade has to know who they traded with.

The date you registered and the date you last signed in.

Records of saves the anti-cheat refused, kept for 180 days, so that a player who says their village was reset can be given a real answer.

Cookies

Three small things are kept in your browser. None of them is for advertising, none is shared with anyone, and none follows you off this site.

That is also why there is no cookie banner: there is nothing here to consent to beyond what the site needs in order to work at all.

goh_session

The session. A random token that proves you are signed in. It is HttpOnly and Secure, it is only ever sent to this site, and the server keeps only its SHA-256 — reading our database would not hand anyone your session. It lasts twelve hours, or thirty days if you chose "Keep me signed in", and signing out deletes it.

goh_country

A two-letter country code, set by our web server from your IP address and used for exactly one thing: choosing which language the site opens in. The address itself is not stored with it.

thavernia_locale

Not a cookie at all — the language you picked, kept in your own browser's storage so the site remembers it next time. It never leaves your device.

What is never done

No analytics. No advertising. No tracking pixels. No profiling. Your data is never sold, rented or handed to another company.

No third-party script runs on these pages. The four typefaces the site uses are served from this site itself: they are downloaded once when the site is built, not fetched from Google while you read.

The game sends no email, ever. That is also why there is no newsletter and no password reset.

Server logs

The web server keeps ordinary access logs, the kind every web server keeps: the time, what was asked for, what was answered, and the IP address the request came from. They are used to find faults and to see abuse, nothing else, and they age out on their own.

Where it lives

Everything sits on one rented virtual server with one Postgres database on it, together with the backups the hosting provider takes of that server.

How long it is kept, and deleting it

Your data is kept for as long as your account exists. There is no separate clock: delete the account and it goes.

Deleting is in Settings, under Account. It removes the account and, in the same moment, the village, your market offers, the deliveries owed to you, your notices and every session. Nothing waits in a queue and nothing is kept "in case you come back".

Three traces outlive it, and it is only fair to name them. A trade you completed as the buyer keeps its record for the seller, with your name removed from it. The server's access logs still hold the addresses of your requests until they age out. And the hosting provider's backups of the whole server still contain your rows until those backups rotate.

Your rights

You can ask to see what is stored about you — most of it is already on your own screen — ask for a correction, or have it erased. Erasure needs no request and no waiting: the button in Settings does it yourself, at once.

If you believe your data is being handled badly, you can complain to a data protection supervisory authority in your country.