Privacy and telemetry

We collect the minimum account information needed to run the preview: email address, display name, password digest, settings, guild membership, puzzle completion, map orders, achievements, and season outcomes. Passwords are never stored in readable form.

Essential records

Account security, completed puzzles, awarded Command Points, map orders, resolution, moderation, and season events are essential to operate the game and audit fairness. These records are kept in the game database and a versioned event outbox. When optional analytics are off, essential events omit the analytics cookie, session identifier, and device context.

Optional interaction analytics

If you opt in, we also measure privacy-safe actions such as viewing a briefing, inspecting a territory, opening an order confirmation, and attempting a share. We do not put your email, display name, puzzle answer, password, or free-form text in analytics. Optional consent starts off and can be changed from My Legend. Turning it off removes the analytics identifier cookie and stops future optional events.

Sharing

A personal result is private until you explicitly create an unlisted link. That link shows your display name, guild, puzzle, date, completion, and equal Command Points—but not hint use, mistakes, answers, email, or sign-in details. World snapshots contain no player names or individual actions. Anyone with an unlisted link can pass it on.

Retention and access

Private-alpha account and gameplay records are retained for the life of the preview so seasons remain reproducible. Server and proxy logs should be limited to 30 days; optional product events should be limited to 13 months when an exporter is connected. There is no external analytics warehouse in this MVP. Contact the steward who sent your invitation to request a copy, correction, link revocation, or account removal; those requests are manual during the alpha.