PRIVACY POLICY
Elderspire is an independent, non-commercial game made by a solo developer under the alias “Spireborn”. This notice explains what personal data we handle when you play and the rights you have over it. We keep data collection to the absolute minimum.
1 · Who is responsible
The data controller is the developer of Elderspire, operating under the alias “Spireborn”. For any privacy question or to exercise your rights, contact us at spireborn.elderspire33@proton.me.
2 · What we collect
You can play Elderspire entirely without an account — in that case your progress is saved only on your own device (browser storage) and we receive nothing.
If you choose to create an account to sync your progress across devices, we process:
- Your email address (to sign in and recover your account).
- A password — stored securely and irreversibly hashed by our authentication provider; we never see it.
- A username you choose.
- Your game progress (run records, unlocked content, bestiary, settings).
We do not ask for your real name, address, age, or payment details.
Anonymous play statistics. We also keep simple, first-party metrics of how the game is played (no personal data sold or shared) to improve it; your browser’s “Do Not Track” opts you out.
3 · Why we use it & legal basis
We use this data only to create your account, sign you in, and synchronise your saved game between your devices. The legal basis is the performance of the service you request by creating an account (Art. 6(1)(b) GDPR) and your consent for storing your save in the cloud (Art. 6(1)(a) GDPR).
The anonymous play statistics (section 2) are processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in knowing whether the game is being played and improving it. Because that data is anonymous and cannot identify you, it does not affect your rights.
4 · Who processes your data
Account and cloud-save data is stored and processed on our behalf by Supabase, Inc., which provides our authentication and database infrastructure, acting as a data processor. Your data is stored on servers located in the European Economic Area (Ireland). Where data is transferred outside the European Economic Area, it is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
5 · How long we keep it
We keep your account data for as long as your account exists. When your account is deleted, your email, username and cloud save are permanently removed. Local saves on your device are removed when you reset them in-game or clear your browser storage.
6 · Cookies & local storage
Elderspire uses strictly necessary browser storage to keep your game progress on your device and to keep you signed in after logging in (a session token). This storage is essential to the service you ask for.
7 · What we do NOT do
- No third-party analytics, advertising networks, or cross-site tracking — no Google Analytics, no ad pixels, no fingerprinting. The only statistics we keep are the anonymous, first-party play counts described in section 2.
- We never sell or rent your personal data.
- No automated decisions are made about you.
We honour your browser’s “Do Not Track” / Global Privacy Control signal and stop recording even the anonymous play statistics when it is enabled.
8 · Your rights
Under the GDPR you can access, rectify, erase, restrict, port and object to the processing of your data, and withdraw consent at any time. To delete your account and all associated data — or to exercise any other right — email us at spireborn.elderspire33@proton.me and we will action your request. If you believe we have mishandled your data, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
9 · Minors
You must be at least 14 years old to create an account. If you are younger, please play without an account (local saves only) or ask a parent or guardian.
10 · Changes
We may update this notice as the game evolves. The “last updated” date above always reflects the current version.