Privacy policy

Last updated 5 October 2026

Draft. This page has not been reviewed by a lawyer yet and may change before AltEarth leaves early access.

This policy explains what AltEarth (altearth.dev, "we") collects when you use the game, why, and what you can do about it. The short version: we keep what is needed to run your account and your citizen, we do not show ads, and we do not use analytics or tracking tools.

What we collect

• Account details. Your email address, the username you choose, and when your account was created and last updated. Accounts made early on may also have a name stored from an older sign-up form; it is never shown to anyone.
• Sign-in data. AltEarth has no passwords. When you sign in by email we store a one-time code in hashed form; it expires after 10 minutes. If you add a passkey we store its public key, an identifier for it and the kind of device it lives on. Passkeys never send us your fingerprint, face or device PIN.
• Sessions. When you sign in we store a session with your IP address and your browser's user agent, and set a cookie that keeps you signed in. We also count how many times you have signed in so we know when to offer you a passkey.
• Your citizen. Your citizen's name (your username), its position on the in-game map and the region it is in. This is where your citizen is in the game, which you choose by travelling; we never ask for or use your device's real location.
• Chat. Messages you send are delivered live to the people in your region. We do not store them.
• Technical logs. Our hosting provider records requests and errors (for example the address requested, time and status) so we can keep the service running and fix bugs.

How we use it

Only to run AltEarth: to sign you in, send you sign-in emails, place your citizen in the world, connect you with players nearby, prevent abuse, and fix problems. We do not sell your data, use it for advertising, or send it to AI models. If AI citizens start processing what you say to them, we will update this policy first.

Who processes it

• Cloudflare hosts the whole service: the game servers (Workers and Durable Objects), the database (D1), logs, and the service that sends sign-in emails. Data is stored on Cloudflare's network.
• Map and code delivery. When you open the game your browser loads map tiles from OpenFreeMap (tiles.openfreemap.org) and the map library from unpkg.com. Like any website, they can see your IP address and browser details when your browser asks them for files. We do not send them your account details.

Cookies

We only use the cookies needed to keep you signed in. There are no advertising, analytics or third-party tracking cookies, so there is no cookie banner.

How long we keep it

Account, passkey and citizen data stay while your account exists. Sessions expire on their own, and one-time codes expire after 10 minutes. Hosting logs are kept for a limited time set by Cloudflare.

Your choices and rights

You can ask us for a copy of your data, to correct it, or to delete your account and citizen by emailing hello@altearth.dev from the address on your account. Depending on where you live you may have further rights, such as objecting to processing or complaining to your data protection authority.

Children

AltEarth is not meant for children under 13, and we do not knowingly collect their data. If you think a child has signed up, tell us and we will delete the account.

Changes

We will update this page when what we collect changes, and change the date at the top. For significant changes we will let signed-in players know in the game.

Contact

Email hello@altearth.dev.