Privacy policy

KEEPERS WRATH -- PRIVACY POLICY
Version privacy-2026-10-07
Machinanet

THIS IS NOT LEGAL ADVICE AND HAS NOT BEEN REVIEWED BY A LAWYER. It was
written against what the game actually stores, read out of the running
database and the source, and it should go past somebody qualified before the
store listing goes public. Section 11 says what is checked and what is not.


1. WHO WE ARE
--------------------------------------------------------------------------

Keepers Wrath is made by Machinanet. We decide what is collected and why, so
we are responsible for it.


2. THE SHORT VERSION
--------------------------------------------------------------------------

We keep what the game needs to run and very little else. WE DO NOT SELL YOUR
PERSONAL INFORMATION. There is no chat in this game, so there is no message
history. There is no advertising, so there is no advertising profile. We do
not ask for your name, your birthdate, your phone number or your location.


3. WHAT WE COLLECT, AND WHY
--------------------------------------------------------------------------

AN ACCOUNT IDENTIFIER. A random identifier made when you first open the game.
It is not derived from you, your phone or your Google account, and it is what
everything else hangs off.

A DEVICE KEY. Your phone generates a key the first time it runs the game and
keeps it. The game proves it is your account by signing with that key, which
is why you are never asked for a password.

YOUR CHARACTER AND YOUR PROGRESS. The name you choose, how your character
looks, what you own, where you have built, and what you have done in the
game.

AN AGE BAND, IF YOU GIVE ONE. When you agree to the terms you type your age.
WE KEEP THE BAND AND NOT THE NUMBER -- whether you are over or under the age
that changes what the game offers -- and the number you typed is not stored.

A COUNTRY. Taken from your device's language and region setting so we know
which rules and which currency apply. It is a country, not a location: we do
not collect GPS, and the game does not ask for location permission.

PURCHASES. If you buy Jadeite, we keep what you bought, when, what it cost,
and a reference to the transaction so we can answer a question about it later
and so you cannot be charged twice for the same purchase. GOOGLE TAKES THE
PAYMENT AND WE NEVER SEE YOUR CARD -- no part of your payment details reaches
us or is stored by us.

AN EMAIL ADDRESS, ONLY IF YOU ATTACH ONE. Attaching one is how you can get
your account back on a new phone. It is optional until the point where the
game tells you it is not.

    AND WE DO NOT KEEP THE ADDRESS ITSELF. While we are waiting for you to
    confirm it, the address is held so the confirmation can be sent. The
    moment you confirm, that row is DELETED and what remains is a one-way
    hash -- enough to check an address you type in later, not enough to read
    your address back out or to send you anything else.

TECHNICAL EVENTS. The game and our servers record events so we can see that
the world is working: a Zone filling up, a fight ending, an error. THESE
CARRY NO ACCOUNT IDENTIFIER. They record what happened, when, and where in
the world -- not who.


4. WHAT WE DO NOT COLLECT
--------------------------------------------------------------------------

No chat or voice, because the game has none. No contacts, photos, microphone
or camera. No GPS or precise location. No advertising identifier and no
advertising. No birthdate. No payment card details. No phone number.


5. WHO ELSE SEES IT
--------------------------------------------------------------------------

GOOGLE, for payments and for distributing the game. Their handling of a
purchase is theirs, not ours.

OUR EMAIL PROVIDER, to deliver the one confirmation message when you attach
an address, and account notices if we have to send one.

NOBODY ELSE. We do not sell your information, we do not share it for
advertising, and we do not run analytics products that take your data away
with them.


6. HOW LONG WE KEEP IT
--------------------------------------------------------------------------

    account, purchases and the things you bought     kept
    your Holding, if you stop playing                12 months
    your Plot, if you stop playing                   6 months

YOUR ACCOUNT AND ANYTHING YOU PAID FOR ARE KEPT. Destroying items somebody
paid for because they stopped playing is not something we will do.

LAND AND BUILDINGS ARE RELEASED IF YOU STOP PLAYING, at the intervals above,
so the world has room for people who are playing. We will try to warn you
before each step. If you come back between six and twelve months you get new
land with your things restored onto it.


7. WHAT YOU CAN ASK FOR
--------------------------------------------------------------------------

A COPY OF YOUR INFORMATION. The game can hand you a file containing what we
hold about your account.

DELETION. You can ask us to delete your account and the information we hold
about it. Deleting it ends your ability to play and DOES NOT REFUND
PURCHASES. We delete rather than merely disable: the identity is severed, the
things you built stop being shown to other players at once, and the remaining
rows age out.

CORRECTION, AND TO OBJECT. If something we hold about you is wrong you can
ask us to fix it, and you can object to how we are using it.

HOW TO ASK: through the game, or by writing to the address in section 10.


8. CHILDREN
--------------------------------------------------------------------------

This game is made to be suitable for all ages. There is no chat, no
advertising and no way for players to send each other messages, which is the
main reason it can be. We do not knowingly collect more from a younger player
than from anyone else, because we collect the same small set from everybody.


9. WHERE YOUR INFORMATION IS
--------------------------------------------------------------------------

The game is operated from South Africa and our servers are hosted outside it,
so your information is handled across borders. We handle it in line with
South Africa's Protection of Personal Information Act, and with the
equivalent rights of the country you live in where those apply.

    [THE HOSTING COUNTRY MUST BE NAMED HERE BEFORE THIS IS PUBLISHED. It is
    left blank rather than guessed: the server's own timezone says
    Africa/Johannesburg, which is a SETTING and not a location, and a
    cross-border transfer clause that names the wrong country is worse than
    one that names none.]


10. CONTACT, AND CHANGES
--------------------------------------------------------------------------

Write to us at the address published with the game's store listing.

IF WE CHANGE THIS POLICY the game will tell you, the same way it does for the
terms, and the version you were shown is recorded.


11. WHAT IN THIS DOCUMENT IS CHECKED, AND WHAT IS NOT
--------------------------------------------------------------------------

THIS SECTION IS FOR US AND IT STAYS. Every project that has ever shipped a
boilerplate privacy policy did it by not writing this section.

CHECKED AGAINST THE RUNNING SYSTEM (2026-10-07): that telemetry_event carries
no account identifier; that recovery_credential stores a hash and not an
address; that pending_credential holds the address only until confirmation
and the row is deleted on the confirming read; that the account table holds
a jurisdiction and an age band and no birthdate; that no table holds a
payment card; that the retention tiers are 6 and 12 months and forever.

NOT CHECKED AND STATED AS INTENT: where the warning before reclamation comes
from, because IT IS NOT BUILT (compliance.txt says so in its own words:
"THE WARNING IS AN OBLIGATION, NOT A COURTESY, and it is not built").

AND SECTION 7'S DELETION RIGHT HAS NO MECHANISM YET, WHICH BLOCKS
PUBLICATION. Google requires account deletion to be reachable BOTH inside the
app AND at a web address, and to delete the data rather than freeze the
account. The design is decided (D160, D223) and an operator can do it; A
PLAYER CANNOT, and there is no web page. Recorded as compliance.txt C12
(D1040). THIS DOCUMENT MUST NOT GO UP UNTIL THAT DOOR EXISTS, because a
privacy policy promising a right the product does not offer is worse than no
policy -- it is the thing a regulator reads back to you.

NOT SETTLED AND BLOCKING PUBLICATION: the contact address, which has no
owner yet, and THE HOSTING COUNTRY in section 9. The host's timezone reads
Africa/Johannesburg and that proves nothing -- a timezone is configured. It
has to come from the hosting account, not from the box.

NOT REVIEWED BY ANYONE QUALIFIED. Like the terms beside it.