Privacy Policy

Effective October 28, 2026 (adds website analytics); previous version: October 27, 2026

This policy explains what data the web game Silveroath (銀誓, at https://silveroath.app; "the game", "we" or "us") collects, how we use and protect it, and how you can ask to see or delete your own data. By using the game, you confirm that you have read and agree to this policy.

1. Data we collect

• Guest account: the first time you enter the game, the server creates an account number and gives your browser a sign-in credential. The credential is kept in your browser; the server stores only its hash (SHA-256), which cannot be turned back into the credential.
• Google account (only if you choose to link one): when you link through Google sign-in, we store only the account identifier Google provides and the email address Google has verified, so that you can find the same account on other devices. We never receive your Google password, contacts, Drive or other data, and we do not store the name and profile picture that Google's sign-in screen also provides.
• Game data: the characters you create (name, class, gender, level, experience, stats), inventory and warehouse, gold, equipment, skills, combat state such as health and mana, stall trade records, world and party chat messages, and your character's position and actions in the game.
• Connection and technical data: your IP address, the ordinary technical information your browser sends (such as the browser type) and access times. We use these to prevent abuse (for example, limiting large numbers of requests in a short time), to stop cheating and to fix problems.
• Website analytics (Google Analytics, only after you agree): after you press "Agree" on the notice at the bottom of the website or the game, we use Google Analytics 4 to measure how the website and the game are used: the pages you view, the website that linked you here, your device and browser type, your approximate country and city (estimated by Google from your IP address; Google Analytics does not store IP addresses), and a few in-game events: creating a guest account, creating a character (class and gender only), linking Google, entering each map for the first time, leveling up every 5 levels, defeating a boss, joining a party, and buying or selling in shops (the item and the gold). These never include your character's name, your email or your account number. Google Analytics keeps cookies whose names begin with _ga in your browser to tell whether it is the same browser. If you have not agreed, press "No thanks", or your browser has Global Privacy Control (GPC) turned on, Google Analytics is not loaded and nothing is sent.
• Data stored on your device: your browser's local storage (localStorage) keeps your sign-in credential, display and sound settings, which panels you have folded, your bestiary records, your choice about analytics cookies, and similar. During development and testing, a cookie remembers that you have entered the access code. We do not use advertising cookies; analytics cookies are used only after you agree (see the previous item).

2. How we use the data

• To provide the game: saving your characters and progress, and letting players in the same world see each other, form parties, trade and chat.
• To keep the game fair and safe: deciding the results of combat, detecting cheating and abnormal activity, and handling breaches of the terms of service.
• For support and notices: answering your questions and handling requests to see or delete your data.
• For operations and improvement: fixing errors, assessing server load and adjusting the game's content; and, after you agree, using Google Analytics statistics to understand how people find and use the game.

We do not sell your personal data and do not use it for advertising. Google signals and ad personalization are turned off in Google Analytics.

3. Sharing and where the data is stored

• Hosting provider: the game server and database run in DigitalOcean's Singapore data center, and your data is stored there.
• Google: when you choose to sign in with Google, Google handles the sign-in, under Google's own privacy policy.
• Google Analytics: after you allow analytics cookies, the data listed under "Website analytics" above is sent to Google for processing and may be stored in the United States or other countries, under the Google Privacy Policy. We have not turned on sharing this data with Google's other products or services.
• Other players: your character's name, appearance, level, position and actions on the map, your chat messages and the items on your stall are visible to other players in the same game world. Your Google email address is never shown to other players.
• When required by law: where the law requires it, or where necessary to protect players and the security of the service, we may provide data to the competent authorities as the law allows.

4. How long we keep it

• Accounts, characters and game data: kept for as long as your account exists. A sign-in credential that goes unused for a year stops working.
• Chat messages and trade records: kept on the server to keep order and to handle reports and trade disputes.
• Database backups: made once a day and deleted after 14 days.
• Server connection logs: kept only as long as needed for troubleshooting and security, and deleted on a regular rotation.
• Google Analytics: event data is kept for 2 months and user data tied to the same browser for 14 months, after which only aggregate reports that cannot identify anyone remain; the _ga cookies stay in your browser for up to 2 years, and you can clear them at any time or switch analytics off below.

5. Your rights

You can change whether analytics cookies are allowed at any time in the next section. You can also write to service@rcdesign.io to ask to see, correct or delete your data, or to unlink your Google account. Please include your character's name and something that shows you hold the account (for example, the linked Google email). Once we have confirmed who you are, we will handle the request within 30 days; deleted data disappears from the backups when the next backup retention period (at most 14 days) ends. Once an account is deleted, its characters and items cannot be restored.

6. Your choice about analytics cookies

The first time you open the website or the game, a notice at the bottom asks whether you allow analytics cookies. You can change your answer here at any time; it is saved in this browser, and you will be asked again in another browser or after clearing the site's data. If you change to "Don't allow", Google Analytics stops sending at once and this site's _ga cookies are deleted.

7. Children and minors

The game is not designed for children under 13; if you are under 13, please do not use it. Minors should use the game only after their legal guardian has read and agreed to this policy and the terms of service. If you find that a child has given us data without that consent, please write to us and we will delete it.

8. Data security

The whole website uses encrypted HTTPS connections; sign-in credentials are stored only as hashes; and the database is reachable only on the host's internal network, through accounts with separate permissions. No method can guarantee complete security, but we will keep taking reasonable measures to protect your data, and if a data breach affects your rights, we will notify you as the law requires.

9. Changes to this policy

We may change this policy because of changes in the law or in the game. When we do, we will update the effective date on this page, and we will announce significant changes in the game. If you keep using the game after a change takes effect, you agree to the policy as changed.

10. Contact us

If you have any questions about this policy or your data, write to service@rcdesign.io.