1. Who is responsible
This Privacy Policy explains how Kohlton Michael Hilbert, an individual (sole proprietor) doing business as Lost Aura Games in United States ("we", "us"), handles personal information on https://lostauragames.com and in our games. We are the data controller. Contact: lostauragames@gmail.com.
2. The short version
- No ads, no analytics, no tracking pixels, no advertising cookies. We do not sell or share your personal information for targeted advertising.
- Playing as a guest stores your progress only in your own browser.
- We only store data on a server if you use MEOWTEOR's leaderboard, create an account (needed to buy Coins or to play Mythweald online), or play Mythweald online.
- Mythweald is an online game in Open Beta: other players can see your character name and what you write in global or party chat. Chat and names are filtered for profanity and slurs, and you can block players.
- Payments are handled by Lemon Squeezy, our Merchant of Record. We never see your full card number.
3. What we collect and why
a) In your browser (localStorage)
Our pages and games use your browser's localStorage, not tracking cookies, to remember game saves and settings, your language (lag.lang), a random MEOWTEOR leaderboard player ID, Mythweald characters and settings (mythweald.chars.v1, mythweald.opt), and, if you sign in, your login session (lag.auth.v1). This stays on your device; you can delete it by clearing your browser's site data. Signing out removes the session.
b) MEOWTEOR leaderboard (optional)
If you choose a player name, we store that name, your best score, a random player ID made by your browser, and timestamps. Names and scores are shown publicly on the leaderboard. Purpose: running the leaderboard you asked to join.
c) Accounts (optional)
If you create an account we store your email address, a securely hashed password (we cannot see your password), an account ID, sign-up and sign-in times, your confirmation that you are 13 or older and agree to the Terms, and security logs kept by our authentication provider (such as IP address and browser type). Purpose: providing your account, keeping it secure, and sending service emails such as password resets.
d) Coins, items and purchases
For signed-in players we store your Coin balance in each game and a history (ledger) of changes: Coins earned per run, Coins spent with the item bought, guest Coins moved into your account, purchases, refunds and chargebacks, with dates. For each purchase we store the order number from Lemon Squeezy, the bundle, the amount and currency, its status, and the email used at checkout. Purpose: delivering what you bought, preventing fraud and cheating, handling refunds, and keeping business and tax records.
e) Payments
Checkout is run by Lemon Squeezy, LLC as Merchant of Record. It collects your name, email, billing country / address, payment details and IP address to process the payment, calculate tax and prevent fraud, and it sends us order details (order number, email, product, price, country and status). Lemon Squeezy handles that data under its own privacy policy.
f) Mythweald online play (Open Beta, optional)
Mythweald can be played as a guest, with characters saved only in your browser. If you sign in and play an online character, we store, with our cloud database provider:
- Your character: its name (shown publicly to other players), class, level, save data (quests, skills, position and settings), gold, and the equipment and bag items it owns, each with a random item ID.
- Trading and market data: trades you make (both character names, the items and gold offered, and the result), your Unity of the Trade listings (your character name, the item, the price, status and dates; active listings are visible to every signed-in player), purchases, the 1% market tax, mail (sale proceeds, bought items, returned listings), and a ledger of these economy events with dates, kept to prevent duplication, cheating and fraud.
- Location checks: the map region and coordinates your game reports from time to time, so the server can check that trades and market use happen in range and in a hub town.
- Chat: whispers (private messages: sender, recipient, text and time) and global chat messages (character name, text and time). Global chat is shown to every player who is online. Party chat, party combat updates and player positions are sent live to the players in the same party or region and are not stored by us.
- Your block list: the players you block. Blocked players cannot whisper you or trade with you, and their chat is hidden for you.
Chat safety: profanity and slurs are automatically masked (shown as #%$) in chat, and character names that contain them are refused. Whispers and global chat are filtered and rate-limited on our server; party chat is filtered in the game. This is automatic filtering, not live moderation, so it can miss things; if you report a player to us, we may read the relevant stored messages to act on the report.
Beta: Mythweald is an Open Beta. Characters, levels, gold, items, listings and mail may be reset or deleted at any time while we develop the game. Purpose of this processing: running the online features you choose to use (characters, trading, market, mail, parties and chat), keeping them fair and safe, and preventing cheating and abuse.
g) Messages
If you email us, we keep the conversation to answer you and for our records.
4. Legal bases (EEA / UK)
We process personal data to perform our contract with you (games, accounts, purchases), to meet legal obligations (tax and accounting records), for our legitimate interests (security, fraud and cheat prevention, fair earning limits, improving the games without tracking) and, where required, with your consent (for example joining the leaderboard), which you can withdraw at any time.
5. Who processes data for us
- Supabase (Supabase, Inc.): database, authentication, password-reset emails and server functions for accounts, wallets, purchases and the leaderboard. See supabase.com/privacy.
- Lemon Squeezy: checkout and payments as Merchant of Record (see above).
- Cloud database provider: our cloud database provider (the provider above) also stores Mythweald's online data and relays its real-time messages (chat, parties and player positions).
- GitHub Pages (GitHub, Inc.): hosts this website; like any web host it processes IP addresses in server logs.
- Email: our contact mailbox is hosted by Google (Gmail). If we later send account emails through another email provider, we will list it here.
These providers may store data in the United States and other countries. Where EU/UK law requires it, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.
6. How long we keep data
- Account data and balances: until you delete your account.
- Purchase, refund and ledger records: up to 7 years for tax, accounting and fraud-prevention reasons. After your account is deleted they are kept only with a random account ID and are no longer linked to your email.
- Leaderboard entries: while the leaderboard runs, or until you ask us to remove yours.
- Mythweald characters, items, gold, listings and mail: until you delete your account, or until a beta reset.
- Mythweald chat and history: whispers are deleted after about 2 days and global chat messages after about 1 day (clean-up runs automatically, so it can take a little longer); closed market listings after about 14 days and finished trades after about 7 days. The Mythweald economy ledger stays with your account until it is deleted.
- localStorage: until you clear it.
7. Your rights and deleting your data
Depending on where you live (for example the EU/EEA, the UK, California and other US states), you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict some processing, and to withdraw consent. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use it for profiling with legal effects. We will not treat you differently for using your rights.
To delete your account or make any request, email lostauragames@gmail.com from the email address on your account with the subject "Privacy request". To report a Mythweald player, include their character name and roughly when it happened. For a leaderboard entry, include the player name (and, if you can, the player ID saved in your browser). We may ask you to verify that the request is yours and will reply within 30 days (45 days where US state law allows). Deleting your account permanently removes your login and Coin balances; unused Coins are lost. You can also complain to your local data protection authority.
8. Children
Our games are made for a general audience and can be played without giving us any personal information. Children under 13 must not create an account or make purchases, and we do not knowingly collect personal information from children under 13. Players aged 13 to 17 need a parent's or guardian's permission to create an account or buy anything. Mythweald has public chat with other players. It is filtered automatically but not moderated live, so parents may want to keep an eye on younger players and show them the block feature (/block NAME). If you believe a child under 13 has given us personal information, email us and we will delete it.
9. Security
We use HTTPS, hashed passwords, row-level security in our database so each player can only read their own data, and keep server keys and payment secrets out of the website code. No system is perfectly secure, so please use a unique password.
10. Changes
We will update this policy when our practices change and change the "Last updated" date above. For material changes we will post a notice on the site.