About this policy
This Privacy Policy explains how ENDEMION LIFE, a browser game at life.endemion.online, processes data. The operator is Endemion ("we", "us").
You sign in to the game with Endemion ID, the shared account for the endemion.online website and Endemion games. The Endemion ID account itself, sign-in through other services and Endemion ID emails are covered by the website privacy policy.
Summary
- You can play as a guest without registering, or sign in with Endemion ID to keep your progress across devices.
- We store your Endemion ID profile, sign-in sessions and your game lives.
- The game has no advertising, analytics, third-party tracking or real-money purchases.
- The game has no chat or other features where other players can see your data.
Information you provide
Endemion ID profile. When you sign in with Endemion ID, the game receives and stores your permanent Endemion ID account number, username, display name, avatar link and email address. The profile is refreshed when the session is checked with Endemion ID.
Game data. Your character's name (up to 40 characters), an optional world seed text, the game state, event history and your game actions.
Older accounts. If you created a game account with an email and password before the move to Endemion ID, we store the email address, whether it was confirmed, and a password hash (not the password itself). No new accounts of this kind are created.
Do not put your real personal data or anyone else's in the character name or seed.
Automatically collected information
Guest player. When you first open the game, an anonymous player and session are created so your progress is saved without registration.
Sessions. For each device we store when the session was created and last used, when it expires, whether it was revoked, and the browser string (User-Agent, up to 256 characters). You can see your devices in the Account section and end any session.
Server logs. The server records each request: time, method, page address without parameters, response code, duration and IP address; the web server also records the browser string (User-Agent). IP addresses are not stored in the database.
Abuse protection. To limit request rates, the IP address and a hash of the email address are kept for about one minute.
Device information
The game receives only what your browser sends with every request: your IP address and browser string (User-Agent). It does not use your location, camera, microphone, contacts or files.
Advertising
The game shows no advertising. Data is not used for advertising or profiling.
Analytics
The game uses no analytics or visitor counters. The code can send error reports, but this is turned off on the production server; if we turn it on, we will update this policy first.
Third-party services
- Endemion ID (auth.endemion.online): our sign-in service; see the website policy.
- VK Cloud (Russia): storage for database backups.
- Fonts are served from our own server, not from third parties.
How we use information
- to run the game: saving and loading lives, signing in, moving guest progress to your account;
- to show your name and avatar in the game;
- to protect accounts and the server: limiting sign-in attempts, investigating failures and attacks;
- to fix errors and keep the server running.
Data retention
- Profile, sessions and game lives: as long as your player or account exists.
- Guest players who have not returned for a long time: [retention period for inactive guest players].
- Server logs: limited by size (at most 50 MB per service), older entries are overwritten; period: [server log retention period].
- Daily backups on the server: 14 days (the latest 7 copies are always kept); copies in VK Cloud: [VK Cloud backup retention period].
- Data in your browser storage: until you delete it.
Data security
Connections are protected with HTTPS. The session cookie is not available to page scripts (HttpOnly), and only a hash of the session token is stored. The Endemion ID refresh key is stored encrypted. The session token is removed from logs. No protection is absolute. [data breach notification procedure]
Children's privacy
The game is not intended for anyone under 18. The game does not check age. If you believe a child has given us data, write to endemion@internet.ru and we will delete it.
Your rights
You can ask what data we hold about you, get a copy, correct or delete it, restrict or object to processing, and withdraw consent.
Your name, username, avatar and email are changed in your Endemion ID account. Sessions are ended in the game's Account section. Send any other request to endemion@internet.ru; we reply within the time limits set by law.
Data deletion
The game does not yet have an account deletion button. To delete your ENDEMION LIFE data (player, sessions and lives) or your whole Endemion ID account, write to endemion@internet.ru from the address linked to the account.
Saves in your browser are deleted by clearing site data for life.endemion.online in your browser settings.
After deletion, data remains in backups until they are replaced (see Data retention).
GDPR (EEA and UK)
The data controller is Endemion. Legal bases: performance of a contract (providing the game and account, Art. 6(1)(b)); legitimate interest in security and operating the service (logs, abuse protection, backups, Art. 6(1)(f)); compliance with legal obligations (Art. 6(1)(c)).
You can complain to the data protection authority in your country.
California privacy rights
We do not sell or share personal information as defined by the CCPA/CPRA and do not use it for targeted advertising. Categories collected: identifiers (email, username, account number, IP address), internet activity (request logs, browser string) and game data.
California residents can request to know, access, correct or delete their data at endemion@internet.ru. We will not discriminate against you for using these rights.
International transfers
The game server and backups are located in Russia. If you play from another country, your data is transferred to and processed in Russia. For users in the EEA and UK, this transfer relies on [transfer mechanism, for example Standard Contractual Clauses].
Contact
ENDEMION LIFE is developed and published by Endemion.
- Email: endemion@internet.ru
- Postal address: [postal address for requests, if published]
- Website: endemion.online
Changes to this policy
We may update this policy, for example when the way the game handles data changes. The new version is published on this page with a new last-updated date.
We will announce material changes in advance on this page and, where appropriate, in the game.