OPENLANCER / PRIVACY
What we keep, and why
Openlancer is a game you play in your browser. You can play without an account. If you make one, we keep only what the game needs to keep your characters for you. We do not sell data, show ads or use trackers.
Who is responsible
Openlancer is run by its developer in the Netherlands, who decides what happens with this data. Write to privacy@openlancer.io with any question or request.
What we keep
| What | Why | How long |
|---|---|---|
| A random account number, and for a guest nothing else | To know which characters are yours | Until you delete the account; a guest account nobody has used for 400 days is deleted with its characters |
| Your characters: their names, progress, items and where they are | To keep playing where you left off | Until you delete the character or the account |
| For each way you sign in: the user number Google or Discord gives us, or your email address, and the email address they confirmed | To sign you in on any device | Until you remove the account |
| Your sessions: a scrambled copy of a random key, when it was made and last used | To keep you signed in | Until you sign out, or 400 days after its last use |
| While you sign in by email: your address and a scrambled copy of the code we sent | To check the code | 15 minutes, or until used |
| How many wrong email codes were typed for an address today | To stop people guessing codes | Two days |
| Your character's name in a war's results | To show who took part | When you delete the character, its name in kept results becomes "Former pilot". A war still being fought may show it until that war ends. |
We never get or keep a password, and we keep no key from Google or Discord after you sign in. Session keys and codes are stored scrambled, so a copy of our files opens no account.
Addresses and logs
Like most websites, our web server logs each request: your internet address, the time and the page asked for. We use the logs to keep the site safe and to stop abuse. They are kept at most 30 days. Sign-in codes, session cookies and your pilot's identity are left out of them. While the game runs, it also remembers internet addresses for at most an hour, to limit how many sign-in mails or new guests one address can ask for.
Cookies and browser storage
The game sets one cookie to keep you signed in, as a guest or with an account. While you sign in it sets a second one for at most 15 minutes, so a sign-in can only finish in the browser that started it. If you sign in without moving guest characters, a third keeps those characters' guest session for when you sign out. All three are needed for the game to work, cannot be read by any script, and are never used to follow you. Your browser also keeps your game settings, such as sound and graphics, on your own device. Pilots from before accounts existed kept an id in the browser; the game hands it over once and removes it.
Every day we count how many visits reach each step of starting the game, without keeping anything that tells one visitor from another. A browser that asks not to be tracked is not counted.
Who else sees data
- Our server host, Hetzner in Germany, stores the game's files for us.
- Resend sends our sign-in mails. It gets your email address and the mail. Resend is in the United States; we use it under a data processing agreement, and transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
- Google and Discord are only contacted when you choose to sign in with them. They then act on their own terms and privacy policies for that sign-in.
There is no automatic backup of player data.
Why we may
We keep your account and characters because you asked us to run the game for you (GDPR article 6(1)(b)). We keep logs and the limits on sign-in tries because we have a legitimate interest in keeping the game safe (article 6(1)(f)).
Your choices
- See your data: in the game, open Account and choose "Download my data".
- Delete a character: on the character screen, choose Delete and type its name. It is gone at once.
- Delete your account: in the game, open Account and choose "Delete account". Your account, sign-in ways, sessions and characters go at once.
- Anything else, such as correcting or getting a copy by email: write to privacy@openlancer.io. We answer within 30 days.
- You may complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Accounts are for players aged 16 and over.