Privacy Policy
Effective October 15, 2026
Hazefall is a game about a city under a Dome, not about collecting data. This page explains, briefly and honestly, what the game server knows about you, why it needs it and when it forgets it.
The short version
- We never ask for your email, phone number, real name or location: a city name and a password are all the game needs.
- No ads, no third-party analytics or trackers. We don’t sell your data or share it for advertising.
- You can delete your account, along with your city, right in the game: Profile → “Delete account”.
What the game stores
Account
Your city name, which is also your username and is visible to all players. The server never stores your password itself, only an irreversible hash of it (salted scrypt); device sign-in keys are also stored only as hashes. We also record when you registered and when you last signed in.
Gameplay
Your city, buildings, resources, troops, heroes, marches, alliance, mail, reports and quests; how much time you have spent in the game and on which days you played; your messages in world and alliance chat, and who you have blocked.
Protection against hacking and cheating
Your IP address when you sign in and a device tag — a random number the game creates itself (not an advertising ID and not your phone number). They help us detect password guessing, ban evasion and multi-accounting. For multi-account checks, the address and the tag are stored only as hashes with a secret salt, together with visit times and counters of raids between cities. The server never punishes anyone on its own: our team decides.
Notifications
Only if you turn them on: the subscription address your browser issues, encryption keys, your time zone (for quiet hours) and which notifications you want.
Game speed
Load time, frame smoothness, graphics quality, device type, OS version, screen size and whether the game was opened from your Home Screen. No IP addresses, no text and no browser string. We use this to keep the game running smoothly on your phone.
Errors
The error text and where it happened, the page address, the browser string (browser and OS) and your city name if you are signed in — so we can fix crashes.
Reports and support requests
Complaints and messages to Support: the text, who reported whom, and the reported message.
Event log
Notable game events — sign-ins with IP addresses, construction, marches, battles, alliances, chat messages — used to investigate complaints and fix problems.
On your device, the game keeps a sign-in key, the device tag, your username, and your sound and graphics settings in browser storage (localStorage). We use no cookies and no advertising IDs.
Why
Only to run the game: signing in, the world itself and chatting in it, protection against hacking and cheating, notifications, helping players and fixing bugs. Nothing for advertising, nothing for sale.
Who else sees it
Other players
Your city name, alliance, your city on the map and its Power, whether you are online, your marches on the map and your chat messages.
Our team
Everything listed above except your password: even the server doesn’t have it.
Content delivery network
Currently Cloudflare: connections to the server pass through it, so it sees your IP address.
Push services
Apple, Google or Mozilla, depending on your browser. They deliver notifications but can’t read them: the text is encrypted.
Telegram
Our team receives service notifications there: new players, complaints and a summary of visits. These may include city names and the text of complaints.
No one else. We will disclose data only if the law explicitly requires it.
Where it is stored
On the game server run by the game’s owner. Only our team has access to the data. Passwords and sign-in keys are stored only as hashes, and backups are protected as carefully as the data itself.
How long we keep it
- Account, city, mail and reports
- until you delete your account
- Sign-in key on a device
- until you sign out, or after 180 days of inactivity
- IP addresses linked to your city
- last 5
- Sign-in history with IP addresses, up to 1,000 entries
- 90 days
- Hashed addresses and device tags
- 90 days
- Visit times
- 8 days
- Raid counters between cities
- 90 days
- Load measurements
- 30 days
- Frame smoothness measurements
- 14 days
- Chat messages per channel
- last 120
- Event log entries
- last 5,000
- Errors per player
- last 50
- Complaints and flags
- last 1,000
- Notification subscription
- until you turn it off
- Backups
- up to 8 weeks
The server backs up the world and accounts every hour and rotates the copies: it keeps the last 48 hourly backups, plus one a day for the last 14 days and one a week for the last 8 weeks the server was running. Backups made manually by our team, or by the server before maintenance, are kept until we delete them.
Deleting your account
In the game
Profile → “Delete account”. Your account and password, sign-in keys on all devices, your city (it leaves the map and its name becomes available), your chat messages (they disappear for everyone), IP addresses and sign-in history, multi-account hashes, speed measurements, notification subscriptions and your entries in the event log are deleted immediately and permanently.
Without the game
An email address for these requests will be posted here. In the meantime, you can contact us from the game: Profile → “Contact Support”.
What remains
A hash of your city (kept indefinitely) and hashes of your sign-in keys (180 days): they stop a backup from bringing your city back and let your old device know the account is gone. Nobody can tell who you are from a hash.
Your reports about other players are kept without your name, and errors from your browser are kept without your name or browser string. Your city name remains in other players’ reports and mail, in our earlier records, and in automatic alliance chat lines (such as “… asks to join the alliance”) until newer ones replace them.
Backups are overwritten on rotation (each is kept up to 8 weeks); manual backups are kept until our team deletes them.
Children
The game is for people aged 13 and over. We don’t knowingly collect data from children under 13. If a child under 13 has created an account, a parent can contact us from the game (Profile → “Contact Support”) and we will delete it.
Your rights
You can find out what data we have about you, get a copy, correct it or delete your account — contact us from the game: Profile → “Contact Support”. We will reply within 30 days.
Changes
If this policy changes, we will update the date at the top of this page and announce important changes in the game.
Contact
Contact us right from the game: Profile → “Contact Support”. An email address for questions outside the game will be posted here.