Privacy policy

What the game keeps

The first time you open the game, it creates an anonymous account on our server. There's no sign-up form: we never ask for your real name, email, phone number or birthday. The account holds:

• A random player ID and a login token (we keep only a hash of the token; the token itself stays on your phone).
• Your nickname, if you pick one, plus the 4-character tag the server adds to it (like Hunter#4F2K). Other players see it in rooms and friend lists.
• Your game progress: Renown, how many runs you've played and when, the cosmetics you've unlocked and wear, and each hero's XP and skill-tree choices.
• Your friends list and friend requests, plus room invites between friends (deleted after about 15 minutes).
• Whether you're online and which room you're in, so your friends can join you.

When you play online, our relay passes game data (positions, hits, emotes) between the players in your room. It holds the last few seconds of that data so a dropped connection can catch up, and forgets it when the room closes. There's no text or voice chat.

For each room we also keep a small record: its code, how many players joined, the host's player ID, the room name (for public rooms), when it opened and closed, and the country the host connected from. The country is worked out by Cloudflare from the connection; we never store your IP address or precise location.

Purchases

You can buy gems in the game and spend them on looks: outfits, hats, capes and weapon skins. Nothing for sale makes your hero stronger.

Payments go through Google Play. Google handles your card and billing details; we never see them. From Google we receive a purchase record, which we keep with your account: the purchase token and order ID, the product, how many gems it gave, the price, when it happened and its status (for example, refunded). We also keep your gem balance and the looks you bought with gems.

We use these records to deliver what you paid for, restore it on a new phone, handle refunds and keep our books. Accounting and tax rules require us to keep them for years (in Brazil, at least five), so they stay even after you delete your account, with your player ID removed.

Google Play Games

On Android you can sign in with Google Play Games. If you do, we receive your Play Games player ID and link it to your game account, so your progress follows you to a new phone. Achievements are stored by Google, not by us. Google handles that data under its own privacy policy (policies.google.com/privacy), and you can manage or delete your Play Games profile in the Play Games app.

What stays on your phone

The game saves your login token, a copy of your profile, your settings (language, volumes, vibration, controls) and the latest game balance values on your device, so it still works offline. Uninstalling the game or clearing its data removes them.

This website

If you join the playtest waitlist, we keep your email address, the page language, the country you visited from and the form you used. We use your email only to tell you about the game, at most a handful of times.

The site sets a single cookie, ll_lang, when you pick a language, so it remembers your choice. No analytics, no ad cookies.

Why we keep it

• To run the game: save your progress, show your nickname, connect you with friends and rooms.
• To deliver and restore purchases, handle refunds and meet our accounting duties.
• To protect the service: limit how many requests come from one connection, so nobody floods the server.
• To understand how the game is played in broad strokes: how many rooms open, how full they get, from which countries.
• To email the waitlist about the playtest, and only if you signed up.

We don't sell your data, share it with advertisers or use it to build ad profiles.

Who else handles it

• Cloudflare runs our servers and database (Workers, Durable Objects, D1). Like any web host, it sees your IP address while handling a request and keeps short technical logs for a few days (at most 7) to debug and secure the service.
• Google, if you sign in with Play Games, buy gems through Google Play or download the game from Google Play.

The character voices were generated ahead of time with ElevenLabs. They ship with the game; nothing about you is ever sent there.

How long we keep it

• Your account and progress: until you delete them.
• Purchase records: as long as accounting and tax rules require (at least five years in Brazil); without your player ID once your account is deleted.
• Room invites: about 15 minutes. Live room data: until the room closes.
• Room records: kept for statistics. When your account is deleted, your player ID and the room name are removed from them.
• Waitlist emails: until the game launches or you ask us to remove yours.
• Server logs at Cloudflare: a few days, at most 7.

Deleting your data

You can delete your account and everything linked to it at any time, right in the game: Settings in the tavern, then Delete account. If you can't open the game anymore, email us. The delete account page has both ways.

You can also ask to see a copy of your data or to correct it. Write to support@lostenlegends.com.

Security

Everything between the game, the website and our server travels encrypted (HTTPS and secure WebSockets). Login tokens are signed and stored only as hashes. The admin panel is password protected.

Kids

Losten Legends is meant for players aged 13 and up, and it isn't directed at children under 13. We don't knowingly collect data from them. If you think a child under 13 has an account, write to support@lostenlegends.com and we'll delete it.

Your rights

Depending on where you live (for example under the GDPR in Europe or the LGPD in Brazil), you have the right to access, correct, delete and port your data, and to object to how we use it. To use any of these rights, write to support@lostenlegends.com. You can also complain to your local data protection authority.

Changes

When the game starts keeping something new, we'll update this page and the date at the top before it ships.

Contact

Purplebrick Tecnologia. Questions about your privacy: support@lostenlegends.com.