Privacy and your data
What Cedarfall keeps about you, how to export it, and how to delete your account.
Cedarfall has no ads, ad networks, analytics or tracking SDKs. We do not sell or share personal data for advertising. The full Privacy Policy explains our practices. For privacy requests or in-game reports, write to [email protected].
What we keep
- Account: account ID, email if linked, display name, faction, guest credential hash and account dates. Unlinked guest accounts are locked after 12 hours.
- Sign-in and security: device ID, session metadata, token hashes, network request information and keyed IP/device hashes used to detect sign-in abuse.
- Gameplay: your keep, outposts, resources, units, research, expeditions, map discoveries, battle reports, ledgers and inbox/digest state.
- Purchases and support: transaction/product/state and receipt hash (not the full receipt), supporter status and keyed Ko-fi email hash, and anything you include in support email.
- Community: friends, blocks, chat messages and reports, including reported-message context. Public chat is visible in its channel; DMs are friends-only. Messages are not end-to-end encrypted and may be reviewed for safety. Public chat is kept 7 days, DMs 90 days, and resolved reports 12 months. Blocking is private. Chat can be switched off in Settings.
We do not collect precise location, contacts, microphone or camera data. We do not use advertising or analytics trackers.
Export your data
Choose Export my data in Settings > Privacy and data. The export contains your own account/game data and excludes tokens, secrets, receipt hashes and other players’ personal data. It includes your friends and messages you sent. On the web it downloads as cedarfall-export.json; on native devices it is saved in the app’s private storage, and you can also copy it.
Delete your account
- Open Settings > Privacy and data and choose Delete account.
- Confirm the request. Email accounts may need to sign in again with an email code.
- Your account is locked during the 7-day grace period. Sign in and choose Cancel deletion to restore access before it ends.
- After the grace period, identifying account/sign-in data is removed and public names are replaced. Friends, blocks, messages and chat are deleted or anonymized. Some game and purchase history is retained without the account name. Active expeditions may delay final processing until marching/returning forces finish.
Nightly database dumps are stored in a Docker volume and pruned after the configured retention period (14 days by default); an older dump may still contain data scheduled for deletion until it expires. Other categories, including operational logs and some historical/financial records, do not yet have a code-enforced age-based retention period. See the Privacy Policy for current periods and details.
Contact
For export/deletion help, privacy questions or a player report, email [email protected]. We aim to reply within 30 days.