Draft. This text has not been reviewed by a lawyer yet and may change before the alpha opens. Fields in square brackets will be filled in.
Privacy policy
1. Who processes your data
The data controller is [name and legal status of the game owner], contact: [support@domain]. The game server and database are located in Russia.
2. What data we receive
- Email address — only if you enter it yourself to save your trading house and sign in on other devices.
- Game data — the state of your world and your in-game commands (purchases, captain orders and so on).
- Technical data — a session identifier in a cookie, IP address and browser type. The IP address is used only to protect the game from abuse (request rate limits) and is kept in server memory for no longer than a day.
- Website visit statistics — only on the highhaven.app website and only if you allowed them in the banner: pages opened, where you came from, device and browser type, approximate location from the IP address. Collected by Google Analytics (see sections 4 and 5).
- Cookieless visit counter — the highhaven.app website runs behind Cloudflare, which counts visits (page, referrer, country, device type) without cookies or visitor identifiers. It needs no consent.
We do not ask for your name, phone or payment details and use no advertising trackers.
3. Why
- to run the game and keep your progress;
- to send a sign-in link to the email you entered;
- to protect the game from abuse and fix bugs;
- to understand how many people visit the website and where from (only with your consent).
The legal basis is your consent, given when you send your email in the game, and the agreement on using the game (Terms of play). For visit statistics, it is the consent you give in the website's banner.
4. Cookies
The game uses only essential cookies: your session identifier. Without it the game cannot recognise you on your next visit. The game has no third-party or advertising cookies.
On the highhaven.app website (not in the game) we ask for permission to use analytics
cookies. If you allow them, Google Analytics sets its own cookies (_ga,
_ga_*) and keeps them for up to 2 years. If you decline, the counter is not
loaded. You can change your choice at any time with the «Cookies» link at the bottom of the
website; declining deletes the analytics cookies.
5. Who receives your data
The email delivery service that sends the sign-in link: [service name, country]. Cloudflare, Inc. (USA) — the website's delivery network and cookieless visit counter. If you allowed visit statistics on the website — Google LLC (USA), the Google Analytics service: visit data is processed on Google's servers, including outside Russia. Data is never sold or shared for advertising.
6. How long we keep it
As long as your account exists. Guest worlds without an email may be deleted after [period] of inactivity. During the alpha, progress may be reset — we will warn you in advance.
7. Your rights
You can find out what data about you is stored, correct it, withdraw your consent or ask us to delete your account and all data: write to [support@domain] from the email linked to the game. We reply within 10 working days.
8. Changes
We will announce changes to this policy in the game. The current version is always available at this address.