Privacy Policy
Last updated 5 November 2026
Project Genesis is a free browser game made by one person. This page explains what the game stores about you, why, for how long, who helps us run it, and what rights you have. We keep it short and plain.
Who is responsible
Chris Whippit, Sweden, runs the game and is responsible for your data (the "controller").
Contact: chris.whippit@gmail.com
What we store, why, and on what basis
| What | Why | Legal basis |
|---|---|---|
| Your email address and a hashed password | So you can create an account and sign in | Contract (your account) |
| Your player name, characters, items, gold, progress, settings, friends, guild, in-game mail | To run the game for you | Contract (the game) |
| Chat messages you send | Public and guild chat is shown to other players; whispers to the player you send them to | Contract (the game) |
| Reports you file about other players, and reports filed about you, with the reported message | Safety and moderation | Legitimate interest |
| Bug reports you send, with automatic details (see below) | To find and fix bugs | Legitimate interest |
| Automatic error reports when the game hits an error (see below) | To find and fix bugs | Legitimate interest |
| Activity signal every 60 seconds while you play (see below) | To show friends you are online, and to count how many play (as numbers, not names) | Legitimate interest |
| Sign-in records: when you signed in and with which character. Your IP address and browser while you are signed in (kept by our sign-in service) | Security and stopping abuse | Legitimate interest |
| Update emails, only if you tick the box | A few emails a year about big updates | Consent: you can withdraw it any time with the unsubscribe link or under Settings → Account |
What the game sends automatically
- Bug reports and error reports include: the game version, the region and zone you are in, which game windows are open, your window and screen size, pixel density, whether your screen is a touch screen, the screen orientation, and your browser's identification text (user agent). Error reports also include the error message.
- The activity signal, sent every 60 seconds while the game is open, includes: the game version, your window size, whether you are on a phone, and whether the game tab is visible.
In your browser the game keeps only its own settings and your sign-in, in local storage. No tracking cookies, no ads, no analytics services, and no fonts or scripts loaded from other companies.
Who helps us run the game
These companies process data for us under data processing agreements. We do not sell or share your data with anyone else.
- Supabase (Supabase, Inc.) — database and sign-in. Our servers are in Stockholm, Sweden (EU).
- Resend (Resend, Inc., USA) — sends account emails (confirmation, password reset) and update emails if you said yes. Resend receives your email address and the email content. Our emails are sent from Resend's servers in Ireland (EU).
- GitHub Pages (GitHub, Inc., USA) — delivers the game's files to your browser and receives your IP address when the page loads. GitHub is certified under the EU–US Data Privacy Framework.
- Anthropic (Claude): checks public, guild and zone chat for hateful, harassing or scam messages, sorts bug reports (including any screenshot you attach), and answers the questions you ask Nixie. Whispers are not sent. Logs of this are deleted after 90 days, or at once if you delete your account.
Where data leaves the EU, it is protected by the EU–US Data Privacy Framework or by the EU's standard contractual clauses in the provider's agreement.
How long we keep it
- Your account and game data: as long as you have an account. Deleted at once when you delete your account.
- Chat: 12 months, then removed automatically.
- Reports and moderation notes: 12 months.
- In-game mail: 30 days from when it was sent, then removed automatically with anything still in it.
- Bug reports: 12 months (removed at once if you delete your account).
- Error reports, sign-in records and the activity signal: 30 days.
- Sign-in sessions (IP address and browser): while you are signed in, and removed after 30 days without use.
- Server logs at our hosting provider, which may include IP addresses: up to 7 days.
When you delete your account
Your account, every character, items, gold, helpers, progress, guild membership and your chat messages are removed at once. Three things are kept, without your name or email:
- Chat messages that were reported or removed by a moderator — kept for up to 12 months so that moderation decisions can be checked, then removed.
- A note that an account was deleted, with the date and the number of characters — kept for 12 months.
- Your player name (handle) — reserved for 7 days so no one else can take it and pretend to be you, then it is free again. Only the name is kept, not who had it.
Reports other players filed about you are kept for 12 months, like all reports.
A banned account cannot be deleted while the ban lasts, so a ban cannot be avoided by starting over. Write to us if you want your data removed anyway.
Age
You must be 13 or older to play. If you are under 18 you need permission from a parent or guardian. If we learn that a child under 13 has an account, we delete it.
Your rights
You have the right to:
- access your data and get a copy of it,
- have wrong data corrected,
- have your data deleted (you can also do it yourself under Settings → Account → Delete Account),
- restrict how we use it, and object to use based on legitimate interest,
- get your data in a portable format,
- withdraw consent to update emails at any time.
Email chris.whippit@gmail.com from the address you signed up with. We answer within one month.
If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY): www.imy.se.
Changes
If this policy changes in a way that matters, the game shows you the new version the next time you play. The date at the top shows when it last changed.