What changed on 8 October 2026

Your sign-in — your email address, and which methods you use to sign in. This is held by Firebase Authentication. Your email is never written into the game's own records.

Your public profile — @handle, display name, bio, avatar, the cards you choose to show off, whether your email has been verified, your achievements, your standing on the Ranks boards, and tags such as Alpha tester or a staff rank. Other signed-in players can see all of it.

Your game — your progress, your saves (the world each was played in, and where you stood), your collection, your scores, your Skyth and your relics.

Your purchases — what you bought, when, and what it cost, so Settings → Billing can show them. Never your card details: those go to Stripe and never reach us.

What you write — posts, threads and replies, shown to signed-in players with your name, handle and avatar beside them, and the posts you like.

Your settings — the preferences you set, so they follow you between devices.

In your browser — part a copy of each save (, so the world it was played in, and wheregame doesn't wait on the network. When you stood) is keptplay signed in the browser rather than it's brought together with the copy kept with usyour account. If more than one account plays in the same browser, each account's is kept apart and comes back when that account signs in again.

After the seven days: your progress , saves and collection, your Skyth, relics and purchase history, your settings, your avatar image, your display name, your bio, your showcase, your achievements and standing, every post, thread and reply you wrote (and the replies inside your threads), your likes, and every follow relationship — including the copy of it held on the profile of everyone who followed you.

Then the sign-in record itself, which is what removes your email address. It is not disabled or flagged; it stops existing, and the address is free to make a new account with.

One thing survives on purpose: a record holding your @handle, your account's internal id, and the date. It keeps the handle from being taken by somebody claiming to be you, and it stops every reference elsewhere from pointing at nothing. It contains nothing that identifies a person — your email was never in it, and the record that held your email is gone.

Two things are outside our reach. Stripe keeps its own record of any payment, as payment providers must. And what a browser keeps forthe copy of your saves a browser keeps stays in that browser until its data for the site is cleared.