Lastshard / Privacy
Privacy
We keep as little about you as we can, we use it only to run your account and the game, and we never sell it.
Last updated
What we keep
| What | Why |
|---|---|
| Your email address | To confirm your account, reset your password and invite you to playtests. |
| Your account name | It is your login on this site and in the game. |
| A hash of your password | To check your password when you sign in. We store a salted hash. We never store or see your password itself. |
| A session cookie | To keep you signed in. See cookies below. |
| IP addresses | To limit repeated sign-in attempts and to keep security logs that help us stop abuse. |
| Your character names | The game server sends us the names in your character slots so your account page can show them. |
| Whether you have playtest access, and any ban | To decide whether the game lets you in. |
That is all. We don't ask for your real name, address, birthday or payment details. We don't build a profile of you.
Cookies
We set one cookie, and only after you sign in. It holds a random session token so you stay signed in. It is essential to the site and lasts up to 30 days, or until you sign out. We store only a hash of the token on our side.
We don't use tracking cookies, advertising cookies or analytics of any kind. No third-party scripts on this site follow you around the web.
Our pages load fonts from Google Fonts. Your browser fetches them from Google's servers, which see your IP address when they do.
We send email from our own mail server. We only email you about your account and about playtests: confirming your address, resetting your password and playtest invitations. We don't send marketing from other companies.
Who sees your data
Our staff, when they need to run the game or deal with a report. Your data is stored on servers we run. We don't sell it, rent it or share it with advertisers. We will only hand it to anyone else if the law requires us to.
Other players see your character names in the game. They don't see your email or account name unless you tell them.
How long we keep it
We keep your account data for as long as you have an account. Security logs with IP addresses are kept only as long as we need them to deal with abuse, then deleted.
Deleting your account
You can delete your account from your account page. That deletes your email address, account name, password hash, sessions and character names. Copies in backups are overwritten as the backups roll over.
If we banned an account for breaking the rules, we may keep a record of the ban so it can't simply be made again.
Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email us and we'll answer within 30 days.
Children
Lastshard is for people aged 13 and over. If you are under 13, please don't make an account. If we learn that a child under 13 has one, we'll delete it.
Changes
If we change what we keep or how we use it, we'll update this page and the date at the top. For big changes we'll email you first.
Contact
Email privacy@lastshard.com about anything on this page.