Privacy

Last updated 6 September 2026.

Endless Worlds is run by a private individual, not a company. Nothing about you is sold, and nothing is collected for advertising, because there is no advertising.

This website

These pages keep nothing about you. No account, no analytics, no trackers and no cookies. The fonts and icons are served from here rather than from somebody else's site, so reading this page contacts nobody at all.

What the game keeps

When you make an account to play, this is what is stored:

• Your username, and a scrambled (hashed) form of your password. Never the password itself: it cannot be read back, by us or by anybody who obtained the database.
• Your email address, used for one thing: getting you back in if you forget your password.
• Which version of the terms you accepted, and when.
• Your characters: their names, what they look like, where they are standing, what they are carrying and have banked, what they have learned, who they are in a guild with, what quests they have done, how much gold they have and where it came from, and how long you have played.
• Letters you send other players, including anything attached to them, until they are claimed or returned.
• Actions an operator takes about you (a warning, a mute, a suspension), with the reason, in an append-only record. This is what makes a decision answerable rather than arbitrary.

What the game does not keep

• Chat is not stored. There is no chat table in the database. A line is delivered to the people it was addressed to and is gone.
• Your IP address is not stored in the database. It is used while you are connected, to limit how many connections one address may open and how often anybody may be wrong about a password, and it appears in the server's own log alongside a connection. Those logs live on the server and rotate away.
• Password reset codes are stored scrambled, expire after fifteen minutes, and do not survive a restart.
• No location data beyond what an IP address implies, no device fingerprinting, no contacts, no third-party identifiers.

What is published

The leaderboards are public, and they are the only place anything about you appears outside the game. They show a character name and the number being ranked (a level, a fame score, a gold total, a count of dungeon runs, hours played) and nothing else. Not your username, not your email address, not what you are carrying, not where you are standing, not who you play with.

They are a snapshot taken when the site was last built, not a live feed. If you would rather not appear on them, ask the operator.

Crash reports

When the game goes wrong it reports the fault so it can be fixed. Anything that looks like a password, a key or a token is stripped out before that report leaves, matched by shape over the whole text rather than by field name, and chat is dropped outright. Not because it is secret, but because it is somebody else's words.

Who else sees any of it

Only the services it takes to run a game, each doing one job and none of them given anything for their own purposes:

• the company renting the server the game and its database run on;
• a content delivery network, which sits in front of the site and the game and therefore sees your IP address and which pages you asked for;
• an email delivery service, which sees your address and the message sent to it;
• an error reporting service, which sees the scrubbed crash reports above;
• object storage, which holds the database backups.

Some of those are outside Australia, which means your information is stored and processed overseas. Nothing is passed to anybody else, and nothing is sold, ever.

How long it is kept

Your account and characters are kept while the account exists. Backups are kept for thirty days and then deleted. Server logs rotate away on their own. Letters expire and are returned to the sender if nobody claims them.

Deleting things

You can delete a character from the character screen, and everything it was carrying goes with it, in one action that cannot be half-finished.

To delete your account, or to ask what is held about you, ask the operator through the channel published on this site. An account is removed with its characters and everything they held. Two things survive it: the operator action record, if there is one, because a record of a decision is not something the subject of it can erase; and backups, until they age out within thirty days.

Children

This game is not aimed at children under 16, and no account should be created by one without a parent or guardian.

Changes

If what is kept changes, this page changes with it, and the date at the top moves. A change to what the terms require you to agree to is a new terms version, which you will be asked to accept.