Privacy

Your hero is saved only in your own browser, on your device. We do not receive it. Clearing your browser data removes it.

When you log in with Discord, we only ask Discord for your Discord ID and your display name (the "identify" permission). We do not get your e-mail, your password, your servers or your messages. We use them to keep your heroes online, so you can play on every device, and to show your heroes on the leaderboard.

When you sign up or log in with email, we send a 6-digit code to your address with Resend, our email service. We do not store your email address: we keep only a scrambled fingerprint of it (to know it is the same account next time) and a short masked version (like a•••••@example.com) as your account name. The code is stored scrambled, works for 10 minutes and only once. You must be 13 or older.

Signing up and logging in is for players aged 13 or older. If you are under 16, ask a parent or guardian before you sign up or log in. Playing as a guest needs no account and sends us no personal data. Are you a parent and want a hero or sign-up removed? Email [email protected] and we delete it.

Your Discord ID and display name (or, with email login, the scrambled fingerprint and masked address), a login session (valid for 30 days, kept as a scrambled code), your heroes and bank, and the leaderboard entries of your heroes (hero name, class, spec and scores). Everything is stored with Cloudflare, which hosts this website.

Before the login opens, you can sign up with Discord or email. We then keep your Discord ID and display name (or the email fingerprint and masked address) on the sign-up list, to count the sign-ups. Only the number of sign-ups is shown, never names or IDs. When 100 players have signed up, the login opens for everyone.

Only one cookie, and only after you log in: it keeps you logged in. No advertising or tracking cookies.

To see where new players get stuck, the game counts a few steps, once per browser: game opened, hero creation opened, hero made, first fight, first win, level 3, level 5, level 10, and coming back on a later day. On the hero creation screen it also counts whether you stayed a few seconds, changed a choice and pressed Start. We only receive the name of the step and whether you play on this website, inside the Facebook or Instagram app, or on another site. No hero name, no account, no ID and no IP address is stored: we only keep a total per day. Your browser remembers which steps it already counted, in its own storage on your device (not a cookie). The game also sends the total gold and Boss Marks spent in the Shop, without any hero name, account or ID. Once per browser, it also counts the language your browser is set to (like "en" or "nl"), again only as a total per day: it helps us decide which languages to add to the game in the future. No country and no IP address. Per language, it also counts how many players open the game, make a hero, reach level 3 and come back on a later day or after a week, again only as a total per day. On the website, a World Boss fight (from level 30) sends its points, your hero's level and spec, and a random code made for that hero (not your account), so the whole realm can fight one boss together. If your hero is on the leaderboard or the guest board, the fight also sends that board code and your hero's secret key, so the server can check that the hero is real: only real heroes from level 30 make the boss stronger or appear in its top 5. The server keeps only a scrambled (hashed) version of that board code, never the key. Logged-in heroes show their hero name in its top 5; guests show as "a wandering hero". When you come from one of our links on TikTok, YouTube, Instagram, Facebook, Reddit, LinkedIn, Discord, Ko-fi, Patreon, Twitch or X, or from our pages on itch.io, Game Jolt or Foundplay, or from our own home page, we count that click, whether the game was opened and whether a hero was made, again only as a total per day per platform.

In our Discord you can ask the Ember Helper, an AI helper, a question about the game with /ask (or Apps → Ask Ember Helper on a message). To answer, your question, or that one message, is sent to Anthropic, the company behind the Claude AI model, together with our FAQ and patch notes. It answers only from those texts. We keep the question, the answer and whether it helped for 30 days, with a scrambled code instead of your Discord name or ID, so we can improve the FAQ. Nothing else. Please don't put personal details in a question.

To fix bugs faster, the game counts crashes anonymously: the type of error, the screen and whether it is a phone or a PC. No names, no IP addresses. We also send the game version. Each kind of crash is sent once, at most 5 per visit, and we only keep a total per hour. Your browser only remembers which crashes it already sent until you close the tab.

The leaderboard shows the hero name, class, spec and scores. It does not show your Discord name or ID. Players who cheat can be removed.

Guests (no login yet) show their hero on the separate Guests board, from level 5 up to level 60. For that board we only keep the hero name, class, spec, level, deaths and flees, the highest Endless Tower floor and Ember Ascension level (best ever and in the current race), and a scrambled copy of a secret code that only your hero knows, so nobody else can change it. No account, no IP address and no cookie is stored. To stop spam, the server uses a short scrambled code of your IP address that only lives for that day (at most 2 new guest heroes per day). When you log in, your hero moves to the real leaderboard and leaves the Guests board. Want your guest hero taken off? Ask in the Discord.

Log out under Heroes → Save to end your session. Want your online heroes and leaderboard entries removed? Ask in our Discord or email [email protected] and we delete them.