What changed on 22 October 2026

Your sign-in — your email address, and which methods you use to sign in. This is held by Firebase Authentication. Your email is never written into the game's own records.

Your public profile — @handle, display name, bio, avatar, the cards you choose to show off, whether your email has been verified, your achievements, your standing on the Ranks boards, and tags such as Alpha tester or, a staff rank or a role. Other signed-in players can see all of it.

Your game — your progress, your saves (the world each was played in, and where you stood), your collection, your scores, your Skyth and your relics.

Your settings — the preferences you set, so they follow you between devices.

Your agreement — which versions of the Terms of Service, the Community Guidelines and this policy you agreed to, and when.

Reports you make — what you reported, the reason you chose and your note. Only the people who run Skylith see them. The player you reported is never told who reported them.

What the people who run Skylith keep about accounts — reports other players make about your writing or profile, notes they write about your account, flags raised when a save holds something the game can't give, and a record of every action they take on an account, with the reason. Players can't see any of it. It's used to keep Skylith fair and safe.

In your browser — a copy of each save, so the game doesn't wait on the network. When you play signed in, it's brought together with the copy kept with your account. If more than one account plays in the same browser, each account's copy is kept apart and comes back when that account signs in again.

Google (Firebase) — sign-in, the database everything else is stored in, and the live connection online rooms run on.

Cloudflare — hosts avatar images, runs the human check on the that keeps automated traffic out (when you sign- in and play pages that keeps automated traffic out, then every 12 hours on the site and every 6 hours in the game), and forwards email sent to our addresses (such as support@skylith.io) to the team's inbox.

Resend — sends account email. It sees the address a message is going to.

After the seven days: your progress, saves and collection, your Skyth, relics and purchase history, your settings, your avatar image, your display name, your bio, your showcase, your achievements and standing, every post, thread and reply you wrote (and the replies inside your threads), your likes, and every follow, including the copy held on the profile of everyone who followed you.

With them go the reports you made, the notes and cheat flags kept about your account, your roles and your agreement. Reports other players made about you stay, as they're their words, and so does the record of what staff did. Neither leads back to you once your account is gone.

Then the sign-in record itself, which holds your email address. It is deleted outright, and the address can be used to make a new account.