Privacy Policy

Anvil & Ember is made by a single independent developer. This policy describes what the game collects, why, and how to have it deleted. It covers the Android app and this website.

What is collected

An account you did not create

The first time you open the game it creates an anonymous account for you automatically. That account is a random identifier and nothing else — no name, no email, no device identifier. It exists so your progress can be saved.

Your Google account, only if you connect one

Connecting a Google account is optional and does one job: it lets you recover your save if you lose or replace your device. When you connect one, we receive and store your Google account identifier and your email address. We do not use your Google display name — your in-game name is one you pick yourself and is never taken from Google.

Game progress

Your save file is stored on our server so it survives a reinstall. It contains only game state: currencies, equipment, upgrades, and how far you have progressed.

Chat

• The name you chose, your chosen avatar, and the text of messages you send.
• Players you have muted, so muting survives a reinstall.
• Reports you file, and reports filed about you — including the text of the reported message, kept so it can be reviewed after the message itself has expired.
• A record when a message you tried to send was refused by the word filter, including its text. This is kept so repeated attempts are visible to moderation even though the message was never posted.
• If you are muted by a moderator: the fact of it, when it expires, and a short internal note about why.

Purchases

If you buy something, Google Play handles the payment — we never see your card or billing details. We store the Play order identifier, which product it was, and the token Google gives us to verify it.

Technical data

Our hosting provider processes your IP address and connection timestamps as an ordinary part of serving requests. The game contains no advertising SDK and no third-party analytics SDK.

Who else sees it

• Supabase — hosts the database and authentication. All of the above is stored there.
• Google — Google Play Billing for purchases, and Google Sign-In if you connect an account.
• Other players — your chosen name, avatar, chat messages, and the handful of progress stats shown on your profile card are visible in-game to anyone.

Nothing is sold, and nothing is shared with advertisers or data brokers.

How long it is kept

• Chat messages — deleted automatically after 7 days.
• Reports and moderation records — kept while the account exists, because their whole purpose is to outlive the message.
• Save data and account records — kept while the account exists, and until you ask for deletion.
• Purchase records — kept as long as required for refunds, tax, and accounting.

Deleting your data

Use the contact form and choose Account deletion. Deletion removes your account, your save, your currency history, your chat messages, your mute list, purchase records associated with your account, and the reports filed by and about you. Requests are handled within 30 days.

Because the game's default account is anonymous, please include anything that identifies it — your in-game name, and the email of the connected Google account if you have one. If nothing identifies the account, we may not be able to find it to delete it.

Purchase records that we are legally required to retain for accounting are kept after deletion, with the account identifier removed.

Children

The game is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Your rights

Depending on where you live you may have the right to access, correct, export, or delete your data, and to object to its processing. Use the contact form for any of these.

Changes

If this policy changes materially, the updated date at the top will change and the new version will be posted here before the change takes effect.

Contact

Questions about this policy go through the contact form.