What we keep, and why

On your phone

Your year in progress, your look, your friend codes and your settings are saved in your browser, so you can close the game and come back. Clearing your browser data removes them. If you are logged in, your browser also keeps your sign-in so you do not have to log in each time.

If you play as a guest

Each player gets a random ID, like 3f9a…. It is not linked to who you are. Against that ID we keep:

• your nickname and friend code, if you open the high scores or play the daily;
• your daily scores, and gifts friends send you;
• that you tapped "I'm 18 or older", and when. We do not ask for or keep your date of birth;
• which choices finished years made, counted together with everyone else's, to show "what everyone chose";
• anonymous play counts: the days you played, when you started or finished a year, how far a year got, and when you shared. We use these to see where the game is too slow or too hard.

If you make an account

As well as the above, we keep:

• your username, which other players see on the high scores;
• your email, only to send you a link if you forget your password. We do not ask you to confirm it, and players do not see it;
• where you live now (for example Canada, Nigeria or Ghana). This is not the country your character travels from in the game. We count accounts by country to see how the game is doing in each place;
• your save, your look and your Passport (the endings and stamps you have found), so they follow you across devices, and a short note about each journey you put away.

Your password is held, in hashed form, by the sign-in service we use. We cannot read it.

Who handles it

• The database that holds the above runs in Ireland.
• The game's server runs in London.
• Password reset emails go through an email sender.
• Our sign-in provider holds your email and your hashed password.

To stop abuse, the server remembers your connection's address for about a minute, in memory only; it is never saved. We do not keep your location or details about your device, and we do not sell anything about you.

How long

We keep your account and journeys until you delete them. Anonymous play counts are kept as totals. If you stop playing, nothing about you is shared; it simply stays until you ask us to remove it.

Your choices

In the game, open High scores and friends, then Your data:

• Counting my plays: off stops the anonymous play counts from this browser.
• Delete my data removes your nickname, scores, gifts, play counts and, if you have an account, your username, email, save, look, Passport and journeys, from our server and our sign-in provider, and clears this browser. If you have an account you must be logged in to do this.
• You can change your username once, and you can report a name you think is not OK.