Emberdeep privacy policy

Effective date: 30 September 2026

This policy applies to the Emberdeep game on Android, the web, and other platforms, and to the Emberdeep servers at playemberdeep.com. Emberdeep is developed and operated by the developer named on the Emberdeep Google Play listing ("we"). Contact us about privacy at [email protected].

Data we collect

• Account data: username, email address, and a bcrypt hash of your password. We never store the password itself.
• Game data: characters, inventory, progress, friends, blocked players, and marketplace and trade activity.
• Chat: messages you send to other players and chat reports you file.
• Purchases: Google Play product id, order id, purchase token, and the Ember Coin amount credited by our server. We never receive your card or payment details.
• Support reports: when you report a purchase problem, the category, the message you write, the related purchase, and your platform and game version.
• Technical data: your IP address, which our servers and network provider see when you connect. We use it only for rate limiting and security and do not store it with your account.
• On your device: a session token in the platform's encrypted storage, plus local settings and solo save data.

We do not collect device location, contacts, SMS, photos, camera, or microphone data. The game shows no ads and contains no advertising or analytics SDKs.

How we use it

• To create and secure your account and keep you signed in.
• To run the game: save progress, host multiplayer worlds, and deliver chat, friends, party, trade, and marketplace features.
• To verify purchases with Google Play, credit Ember Coins, handle refunds, and prevent fraud.
• To moderate chat, review reports, and answer support requests.
• To protect the service against abuse, cheating, and attacks.

We do not sell personal data and do not use it for advertising or profiling.

Who we share it with

• Other players: your character name, appearance, and in-game actions. Say and yell are visible to nearby players, and whispers to you and the recipient.
• Co-op partners: co-op sessions use a direct peer-to-peer (WebRTC) connection, so the players in your session can see your IP address.
• Google (Google Play): processes purchases and confirms them to our server. Co-op also uses a Google STUN server to set up the peer-to-peer connection, which sees your IP address. See the Google Privacy Policy.
• Hosting and network providers: Hetzner Online GmbH (Germany) hosts our servers and database. Cloudflare, Inc. carries and protects network traffic and sees IP addresses and request data. They process data only to provide these services to us.
• Legal requirements: we may disclose data when required by law or to protect players and the service.

Security

All connections to our servers use encryption (HTTPS/TLS). Passwords are stored only as bcrypt hashes, and session tokens are kept in encrypted storage on your device. Access to the servers and database is restricted to the developer.

Chat

Before you chat, you accept the chat rules. You can report a message and block a player in the chat log. Reports store your account, the sender's character name, the channel, and the message text so we can review abuse.

Retention and deletion

We keep account data while your account exists. Delete the account from Settings in the game, or use the account deletion page. Deletion is scheduled for 30 days later, and signing in during that period cancels it. Accounts with no successful sign-in for two years are also permanently deleted. After deletion, the account, email, password hash, characters, inventory, friends, blocks, and chat reports tied to that account are removed. Purchase order ids and tokens are kept with the username and email removed so refunds and fraud checks can still be matched. That retained purchase data cannot be used to sign in.

Your rights

You can ask to access, correct, export, or delete your data by emailing [email protected]. If you are in the EU or UK, you can also complain to your local data protection authority.

Children

Emberdeep is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.

Purchases

Ember Coin packs are sold by Google Play. The price is charged by Google. Our server adds the coin amount for that product only after Google confirms the purchase.

Changes

We will update the effective date above when this policy changes. Significant changes will also be announced in the game.