Privacy Policy

Effective August 5, 2026

This policy explains what personal data Horizon Era collects, why, and what rights you have over it. It's written to comply with Malaysia's Personal Data Protection Act 2010 (PDPA), and extends the same core rights to players elsewhere (including the EU/GDPR) as a matter of good practice.

1. Who Controls Your Data

Horizon Era is developed and operated by Badrul Akmal, an individual developer based in Malaysia (not yet a registered business entity). For any privacy question or request, contact akmalvll96@gmail.com.

2. What We Collect

  • Account data: email address and a hashed password (we never store your plaintext password), plus your chosen display name.
  • Location, at signup only:if you allow it, your browser's geolocation is read once during registration to place your first in-game flag near your real-world position. This is optional — declining or ignoring the browser permission prompt just places you near Kuala Lumpur instead. We do not track your location after signup.
  • Gameplay data: your in-game position, inventory, structures, friends list, profile status message, and similar progress data, so the game state persists between sessions.
  • World Chat: messages you send are broadcast live to other connected players but are not saved to our database — there is no chat history log.
  • Technical data: standard request metadata (IP address, timestamps) generated by normal web server operation, used only for security/abuse prevention, not analytics or advertising.

3. Why We Collect It

Account data is used to let you log in and identify your character. Location is used solely to place your starter flag. Gameplay data is used to run the game itself. We do not sell your data, and we do not use it for advertising or marketing.

4. Where It's Stored

Game data is stored in a Postgres database hosted in Singapore, on the same server that runs the game's backend, with nightly backups retained for 7 days. Passwords are hashed before storage; authentication uses signed session tokens.

5. Third Parties

The map background loads tiles directly from OpenStreetMap's tile servers, which — like any web request — will see your IP address when a tile loads; this is governed by OpenStreetMap's own tile usage policy. We don't use any analytics, advertising, or tracking third parties.

6. How Long We Keep It

We keep your data for as long as your account exists. If you want your account and associated data deleted, email us (see above) — there is no self-service delete button yet, so deletion requests are currently handled manually.

7. Your Rights

You can ask us, at any time, by emailing the address above, to:

  • access a copy of the personal data we hold about you;
  • correct inaccurate data;
  • delete your account and associated data;
  • withdraw consent for location data (this only affects future signups — we don't re-request it after your first flag is placed).

8. Children's Privacy

The Game is not directed at children under 13, and we do not knowingly collect data from anyone under that age. See our Terms of Service for the full age requirement.

9. Changes to This Policy

If this policy changes materially, we'll update the effective date above. We recommend checking back occasionally.

See also our Terms of Service. Back to registration