Privacy Policy

Last updated: October 8, 2026

Peliad Survivors is a free browser game. This policy explains what information the game uses, why, where it goes, how long it's kept, and your rights. In short: your progress stays on your own device (and, if you choose, on your own Google Drive); we only hold the runs you choose to submit to the public leaderboard; we count visits anonymously, without cookies (section 5); and there are no ads, no tracking and no cookies.

1. Who's responsible

The game is run by Joe F, in Ireland, who is the "controller" of the personal data described here under the EU General Data Protection Regulation (GDPR). Contact: artifexarcanum@gmail.com.

2. What the game keeps on your device

Your progress is stored in your browser's local storage on your device. It stays there unless you use the leaderboard or the cloud save (sections 3 and 4):

Your profile: gold, Guild Hall purchases, unlocked heroes and modes, achievements, records and best runs, what you've discovered for the Compendium, and your settings, including the player name you choose for the leaderboard, if any.
A run in progress, so you can Continue it later.
A random player number, made on your device, which marks your leaderboard entries as yours.
A copy of the leaderboard, so it shows quickly, and which Compendium sections you've folded away.
If you sign in for the cloud save: the sign-in tokens Google gives the game, your Google account's email address (only to show who you're signed in as), and a save set aside if you ever choose between two saves.

This storage is strictly necessary to provide the game you've asked for - your saved progress - so it doesn't need your consent, and none of it is used to track you. We can't see it. You can wipe it all from Settings (Reset all progress), or by clearing this site's data in your browser.

3. The leaderboard

The game reads the public leaderboard now and then to show it. A run is only sent when you press Submit, and then it sends: its score, the round reached, renown, time, kills, hordes survived, whether it was won, the game's version, the party (each hero's class, name and level), any Emer Mode rules changed, the player name you gave (or none - you then appear as Anonymous) and your random player number.

Why: to show your run on the public leaderboard, which you ask for by pressing Submit (GDPR Art. 6(1)(b): providing the service you request).
What's kept: the run, and a one-way hash of your player number - never the number itself. A short part of that hash is shown publicly so the game can tell which entries are yours. Please don't use your real name.
How long: only your best run on each board is kept, and only while it's in that board's top 25; it's deleted when it falls out. A record of when you submitted (by the hashed number) is kept for 24 hours, to limit how often runs can be sent.
Your IP address is used at that moment to limit how often runs can be sent from one place, and isn't stored.
Public: everything on the leaderboard can be seen by anyone playing.
Opting out: switch the leaderboard off in Settings, and the game never goes online for it.
Removal: Settings → Delete my leaderboard entries deletes every run you've submitted, at once. (If you've lost your device's data, email us with the player name and score and we'll delete it.)

4. Cloud save (Google Drive)

If you choose Sign in with Google in Settings, the game keeps a copy of your save on your own Google Drive, so your progress follows you to other devices.

What it can see: the game asks only for permission to keep its own data in a hidden app folder on your Drive (Google's drive.appdata permission). It can't see, open or change any of your other files, and the folder isn't shown in your Drive. It also reads your account's email address, only to show who you're signed in as.
What's stored there: one file - your profile and any run in progress, as in section 2, without your sound and control settings, which stay on each device. If two of your devices have played since they last synced, the game asks which progress to keep; if each has a run in progress, it asks which run to continue when you press Continue, and the other run is replaced. Whichever you don't choose is kept on that device, in case you change your mind.
Where it lives: in your Google account, under your control. We don't receive or keep a copy: the save travels only between your browser and Google.
How sign-in works: the game uses Google's standard sign-in (OAuth 2.0 with PKCE). To finish signing in, and to renew it, the game sends the one-time sign-in code or the renewal token through a small server of ours on Cloudflare Workers, which adds the game's secret key that Google requires and passes it straight on to Google. It doesn't store or log them. Your tokens are then kept only in your browser.
Why: to provide the cloud save you've asked for (GDPR Art. 6(1)(b)).
Stopping: Sign out in Settings forgets the tokens on this device and asks Google to cancel them. Delete cloud save removes the file from your Drive. You can also remove the game's access at any time from your Google Account's security settings (third-party access), which deletes its hidden folder.

Peliad Survivors' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your Google data is used only to keep your save; it's never sold, shared, used for advertising, or read by people.

Sign-in is shared with Artifex Arcanum, our card creator on this same website, so Google may show that name when you sign in.

5. Service providers and transfers

Two companies run the servers the game uses, as our processors, under data-processing terms:

Vercel Inc. serves the game's pages and files, and counts visits (below).
Cloudflare, Inc. runs the leaderboard (Workers and D1) and the sign-in server.

Like any website, their servers may keep standard technical logs - such as IP address, browser type and the time of a request - for a short time, for security and to keep the service running; we don't use these to identify you. Both are based in the United States and certified under the EU-US Data Privacy Framework, which the European Commission recognises as protecting personal data transferred there. Google, for the cloud save, acts for you under your own Google account and Google's terms.

Visit counts (Vercel Web Analytics). When a page of the game is opened, Vercel counts the visit so we can see how often the game is played. It sets no cookies, stores nothing on your device, doesn't identify you and doesn't follow you to other sites; we see only anonymous totals: the page visited (its address only, without anything after a ? or #), the site you came from, your approximate location (country or region), and your browser, operating system and type of device. Nothing about your progress, runs or settings is sent. Why: to understand how the game is used and keep it going (GDPR Art. 6(1)(f): our legitimate interest, with as little data as possible). See Vercel's Web Analytics privacy information. Blocking it (with a content blocker) doesn't affect the game.

6. What the game doesn't do

No advertising, no tracking across sites, no profiling, and no cookies - only the anonymous visit counts in section 5.
No third-party scripts or fonts: everything the game needs comes from this site.
We don't sell or share your information.

The game links to other sites - our Ko-fi page (Support Me), the Cork D&D meetup, and the credits' sources. They have their own privacy policies.

7. Children

Peliad Survivors isn't directed at children. In Ireland, children under 16 need a parent's or guardian's permission to use the leaderboard and the cloud save; beyond the anonymous visit counts, the rest of the game sends nothing anywhere. We don't knowingly hold information about children; if you think we do, contact us and we'll delete it.

8. Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its use, and to receive it in a portable form. In practice:

On your device: it's yours - see it, change it or wipe it in the game, or by clearing this site's data.
The leaderboard: your entries are public to see; delete them all from Settings (Delete my leaderboard entries), or email us to correct or delete them.
The cloud save: it's in your own Google Drive - delete it from Settings or by removing the game's access in your Google Account.

We'll answer within one month. You also have the right to complain to the Data Protection Commission (dataprotection.ie).

9. Changes

If this policy changes, the date at the top changes with it. Significant changes will be mentioned in the game's changelog.

10. Contact

Joe F - artifexarcanum@gmail.com