Privacy Policy

1. Who Controls Your Data

Horizon Era is operated by Badrul Akmal Bin Baharin, trading as a sole proprietorship registered with the Companies Commission of Malaysia (SSM) under registration number 202603241928 (003888628-A). For any privacy question or request, contact akmalvll96@gmail.com.

2. What We Collect

• Account data: email address and a hashed password (we never store your plaintext password), plus your chosen display name.
• Location, at signup and when you Relocate:if you allow it, your browser's geolocation is read during registration to place your first in-game flag near your real-world position, and again each time you press Relocate. This is optional — declining just places you near Kuala Lumpur instead. We keep only the last of these positions, rounded to about 11 km, and when it was taken, so the game can stop faked locations (a Relocate further than a real traveller could have gone is refused). It is never shown to other players and is not a location history: each new one replaces the last. We do not track your location in the background.
• Gameplay data: your in-game position, inventory, structures, friends list, profile status message, and similar progress data, so the game state persists between sessions.
• Chat:messages you send in the game's chat channels are shown to the players in that channel and saved so they can read recent history. We keep only the newest 300 messages of each channel; older ones are deleted automatically. Messages that are reported are kept for moderation.
• Purchase data: if you buy in-game Food through the Shop, our payment processor, Stripe, handles your payment details directly — we never see or store your full card number. We keep a record of the purchase itself (which item, when, and a Stripe session reference) so we can grant it and help with any support request. If you subscribe to Platinum Membership, we also keep your Stripe customer and subscription references, the tier, its status and renewal date, so we can grant its benefits and let you cancel it from the Shop.
• Performance & crash diagnostics: while you play, the game sends a small performance summary about once a minute (frame rate, memory use, which renderer is active, zoom level, how many objects are on screen) plus basic device details (browser/device type, screen size, processor cores), and a report if a previous session crashed or its graphics stopped working. These are linked to your account so we can look into a problem you report, contain no messages or location history, and we do not store your IP address with them.
• How you found us:when you first arrive from a link (for example our YouTube channel) or from another website, your browser remembers the link's campaign tags and the name of that website. If you then create an account, we save them with it, so we know which of our videos and posts bring new players. Nothing is saved if you came directly.
• Technical data: standard request metadata (IP address, timestamps) generated by normal web server operation, used only for security/abuse prevention, not analytics or advertising.

3. Why We Collect It

Account data is used to let you log in and identify your character. Location is used to place your starter flag and your character when you Relocate, and to check that a Relocate is a real one. Gameplay data is used to run the game itself. Performance and crash diagnostics are used only to find and fix lag, crashes and device-specific problems. How you found us is used only to count which of our own links bring new players. We do not sell your data, and we do not use it for advertising or marketing.

4. Where It's Stored

Horizon Era runs on a single Americas server, with its own Postgres database hosted on the same server that runs the backend. The server keeps nightly backups retained for 7 days locally, with an additional off-site copy for disaster recovery. Passwords are hashed before storage; authentication uses signed session tokens.

5. Third Parties

The map background loads tiles directly from OpenStreetMap's tile servers, which — like any web request — will see your IP address when a tile loads; this is governed by OpenStreetMap's own tile usage policy. If you make a purchase, Stripe processes that payment and will see whatever information you give it directly (name, card details, billing address) — governed by Stripe's own privacy policy. If you ask for a password reset, the email is delivered by our email provider, Resend, which receives your email address, display name and the reset link only to send that one message. The website uses Cloudflare Web Analytics for aggregate visitor statistics (page views, referrers); it sets no cookies and doesn't track you across other sites. We don't use any advertising or cross-site tracking third parties. The trailer on our home page is a YouTube video: nothing is loaded from YouTube until you press play, and it then plays in YouTube's privacy-enhanced player (youtube-nocookie.com), under Google's privacy policy.

6. How Long We Keep It

Performance and crash diagnostics are deleted automatically after 14 days. We keep the rest of your data for as long as your account exists. If you want your account and associated data deleted, email us (see above) — there is no self-service delete button yet, so deletion requests are currently handled manually.

7. Your Rights

You can ask us, at any time, by emailing the address above, to:

• access a copy of the personal data we hold about you;
• correct inaccurate data;
• delete your account and associated data;
• withdraw consent for location data (block location for our site in your browser; you can still play, and Relocate just won't be available).

8. Children's Privacy

The Game is not directed at children under 13, and we do not knowingly collect data from anyone under that age. See our Terms of Service for the full age requirement.

9. Changes to This Policy

If this policy changes materially, we'll update the effective date above. We recommend checking back occasionally.