Privacy
Age of Agartha · last updated 6 September 2026
The short version. You can play this entire game without giving us anything. No account, no email, no name. Your progress is saved in your own browser.
If you choose to make an account, we store your email address so you can sign back in and get your save. That is the only personal detail we ask for, ever.
There are no advertisers here, no third-party trackers, no analytics SDK, and nothing is sold or shared with anyone. The game loads no files from any other company.
Who is responsible
Age of Agartha is made and run by one independent developer, not a company. For anything on this page — a question, a request to see your data, or a request to delete it — write to privacy@ageofagartha.com. You will get a reply from a person.
If you just play
Playing without an account sends no personal data anywhere. The game stores things in
your own browser, on your own device, using localStorage. We cannot read any of it.
| Stored on your device | What it is |
|---|---|
ageOfAgartha.v1 | Your save — party, levels, items, progress. |
ageOfAgartha.v1.broken | Only if your save ever fails to load: an untouched copy of it, kept so it is never overwritten. |
aoa.iid | A random string made up on your first visit. Explained below. |
aoa.fn | Which of the counters below have already been counted, so they are not counted twice. |
aoa.fn.off | Set if you turned the counters off. |
aoa.muted | Players you have muted in chat. Never leaves your device. |
aoa.light | A display setting. |
aoa.rig | A display setting: the rendered heroes or the classic sprites. |
aoa.live | A display setting: heroes drawn live in 3D or from pre-rendered frames. |
aoa.shake | A display setting: screen shake on or off. |
aoa.motion | A display setting: reduced motion on or off. |
aoa.blinkAim | A control setting: whether Fold blinks the way you face or onto your target. |
aoa.rail | A display setting: whether the desktop menu rail is folded. |
aoa.deckMore | A display setting: whether the phone deck's menu row is folded. |
aoa-ding | A display setting: whether the level-up banner is off. Only written if you opened the game with ?ding=0. |
aoa-anim2 | A display setting: whether the hand-tuned hero animations are off. Only written if you opened the game with ?anim2=0. |
aoa-leaders | A test switch for named pack leaders. Only written if you opened the game with ?leaders. |
aoa.ent | A copy of your purchases (the store receipts your account holds), so the game can hand them over without asking the server every time. Only written if you are signed in and have bought something. |
aoa.dev | Only if you opened the game with ?dev. A developer switch. |
Three more appear only if you make an account, and are listed here for completeness rather than because they are interesting:
| Stored on your device | What it is |
|---|---|
aoa.cloud.session | Your sign-in token, so you are not asked for your password every visit. This is the one worth protecting — signing out deletes it. |
aoa.lb.name | The display name you chose. |
aoa.tos | That you confirmed your age and accepted the terms, and which version. |
Clearing your browser's site data for this site erases all of it, including your save. There is no copy anywhere else unless you made an account.
The counters
We count a small number of moments — the game loaded, someone touched it, a first level, ten minutes played, a dungeon floor cleared, and a handful more like them.
One of them is roughly where you arrived from, and it is worth being precise
about because it sounds worse than it is. Your browser tells every site it visits which page linked
to it. This game looks at that, decides on your own device which of five buckets it falls into —
reddit, a search engine, another social site, direct (you typed it or opened a
bookmark), or anything else — and sends the name of the bucket. The address itself is
dropped on the floor where it was read: no URL, no path, no query string, ever leaves your browser.
We do it to know whether a post somewhere actually brought anyone, which is otherwise unanswerable.
What is sent is one random id and one word. That is the whole message. Nothing else travels with it: no IP address is stored against it, no browser or device details, no email, no account id, no save contents. Nothing that can be joined to your account or your leaderboard row. The random id is invented on your device and is not derived from anything about you or your hardware — it is deliberately not a fingerprint. It exists to answer one question: did anybody come back the next day.
We do this because a game with no players and a game whose players all leave in the first minute look identical from the inside, and we could not fix what we could not see.
You can switch it off in one click — Settings, inside the game. Off means nothing is sent at all. It is your call, and the game plays exactly the same either way.
If you are in the UK or EU: this is stored on your device, so we ask rather than assume. Turning it off is the withdrawal of consent, it takes one click, and it is as easy as leaving it on.
If you make an account
An account exists for one reason: so your save survives losing your device, and so you can appear on the leaderboard if you want to.
| Stored | Why | Legal basis (UK/EU) |
|---|---|---|
| Your email address | It is how you sign back in and reach your save. We never email you anything else. | Performance of a contract — you asked us to keep your save |
| Your password | Stored only as a cryptographic hash by our provider. Nobody, including us, can read it back. | Performance of a contract |
| Your save file | So you can pick it up on another device. | Performance of a contract |
| A display name, only if you set one | To show you on the leaderboard and label your chat messages. | Consent — setting a name is the opt-in |
| Level, ascension tier, kills, minutes played | The leaderboard numbers. | Consent |
Your leaderboard row is private until you name it. No display name means no other player can see the row at all. Setting one is what publishes it. Clearing it hides you again.
A display name is public to every other player, so pick something you are happy for strangers to see. Do not use your real name, and the game will not let you use an email address.
Chat
Chat is only available once you have set a display name. Messages are sent live to whoever else is playing and are not stored on any server — there is no history, no log, and no archive we could hand to anyone. They exist in the browsers that were open at the time and nowhere else.
The practical consequence: anything you type is visible to strangers immediately. Do not share your real name, age, school, address, phone number, or anything else about yourself. See the Terms for the rules, and how to report someone.
Age
This game is not directed at young children, and you need to be 13 or older to make an account, set a public display name, or use chat. Playing without an account has no age requirement, because it collects nothing.
If you are under 13 and made an account anyway, or you are a parent who has found one, write to privacy@ageofagartha.com and we will delete it outright — no questions, no proof required, and faster than any deadline requires.
Who else touches your data
Two companies, both acting only on our instructions, neither given anything to use for its own purposes:
- Supabase — stores the accounts, saves, leaderboard and counters, and carries chat between players.
- Vercel — serves the game files. Like every web host, its servers necessarily see the IP address making a request, and keep short-lived operational logs. We do not read them, build profiles from them, or connect them to accounts.
Nobody else. We do not sell your data, share it for advertising, or hand it to data brokers. We have no advertisers to sell it to. If we were ever legally compelled to disclose something, we would tell you unless the law forbade it.
These providers run on infrastructure that may be outside your country, including in the United States. Both offer contractual protections for international transfers, and the amount of personal data involved here — an email address — is deliberately as small as we could make it.
How long we keep things
- Your account and save: until you delete it. See below.
- Your leaderboard row: deleted automatically with your account.
- Chat: never stored, so nothing to keep.
- The counters: the random id and the event name are kept as aggregate history. They contain nothing personal, cannot be traced to you, and cannot be deleted individually for the same reason — there is nothing in them that identifies you to delete.
Your rights
If you are in the UK, EU, California, or many other places, you have rights over your personal data. We honour them for everybody, wherever you are, because drawing a line by geography would be petty.
- See it. Ask, and we will send you everything tied to your account.
- Take it. Your save can be exported from inside the game at any time.
- Correct it. Ask, and we will fix it.
- Delete it. Settings → Cloud save → Delete account, inside the game. This erases your account, your stored save and your leaderboard row. It cannot be undone, and the save on your own device stays yours. The button tells you exactly what it managed to remove — if anything is left, it says so and gives you the address that finishes the job, and we will do it by hand the day you write.
- Object, or withdraw consent. Turn the counters off in Settings. Clear your display name to leave the leaderboard. Neither affects your ability to play.
- Complain. If we get this wrong, tell us first — but you are entitled to go straight to your data protection authority. In the UK that is the ICO; in the EU it is your national authority.
We do not charge for any of this and we will not make you jump through hoops. Requests are answered as fast as one person can, and always within a month.
Security, honestly
Accounts are protected by the database's own row-level rules, which means one player's account cannot read or write another's — that is enforced by the database, not by the game's code trusting itself. Passwords are hashed by our provider and are not readable by us. The game is served over HTTPS.
What we will not pretend: this is a small project run by one person, not a bank. We hold as little as possible precisely because that is the most honest protection we can offer. If something ever did go wrong in a way that put you at risk, we would tell you and the relevant authority, and we would not quietly hope you did not notice.
Changes
If this policy changes in a way that actually affects you, the game will say so rather than silently updating the date at the top — the date above always reflects the version you are reading. If you want to know what changed and when, ask at privacy@ageofagartha.com and you will be told.
← Back to the game