Privacy Policy

Who we are

Elsewild is a cozy pixel survival adventure made by Eeriecast, LLC, a company in the United States ("we", "us"). Eeriecast is responsible for the information described here. This policy covers the game itself (in a browser, on Newgrounds, and the desktop app), its online play, and the emails it sends. For anything about your information, write to support@elsewild.io.

Playing alone

When you play alone, everything stays on your device. Your worlds, your Wanderer, your settings and keybindings are saved in your browser's local storage, or in the desktop app's own folder. None of it is sent to us. Clearing your browser's site data, or uninstalling the app, removes it.

The game uses no cookies, no advertising and no analytics. Nothing about how you play is reported anywhere.

Playing online

Online play (public worlds, friends, joining by a code) needs a free account. Here is everything we keep, and why:

What	Why
Your account name	It's how friends find you, and what other players see in worlds and lists.
Your email address (if you give one)	To send you sign-in codes. That's all it's used for: no newsletters and no marketing.
A password, as a salted hash (if you choose one)	To check it when you sign in. We never keep your password itself and can't read it.
Your Newgrounds user ID and name (if you sign in with Newgrounds)	To know it's you. Newgrounds tells us these when you sign in through them.
Sign-in sessions	A random token that keeps you signed in on a device. It expires after 120 days, or when you sign out.
Friends, friend requests and invites	So friends can see each other and invite each other. Invites expire after 30 minutes.
Whether you're online, and which world you're in	So friends can see you're on and join you. A world kept private isn't shown to anyone.
Online worlds and your Wanderer in each	The world's changes (what's built, cleared, planted and stored) and your character in it, so the world goes on when the host is away and your Wanderer is yours on any device.
Public world listings	A world opened to everyone is listed by its name, its host's name, how many are playing and its rules.

Messages you send while playing (your moves, what you build, a thrown item) pass through our server to the other players in that world. There's no text chat.

Sign-in emails

When you ask for a code, we email it to you. We keep the code only as a scrambled hash, for ten minutes, plus a count of how many codes went to that address today (so the system can't be used to flood an inbox). We only email you when you ask for a code. If you didn't ask for one, you can ignore the email: nobody can get in without the code.

Your network address

Like every website, our server sees the IP address your connection comes from. We use it only for the moment it takes to stop abuse (limits on how many sign-ins, rooms and connections can come from one place in a minute). We don't store it with your account or keep logs of it.

Who handles it for us

Elsewild runs on Cloudflare: its servers host the online worlds and accounts, protect them from attacks, and send our emails. Your information is stored and processed on Cloudflare's network, which spans many countries. Cloudflare handles it only on our behalf, under its own privacy policy.

If you sign in with Newgrounds, you do that on Newgrounds' own page, under their privacy policy. We never see your Newgrounds password.

We don't sell, rent or share your information with anyone else, for advertising or any other reason.

How long we keep it

• Your account, until you delete it.
• Sign-in sessions, up to 120 days, or until you sign out.
• Sign-in codes, ten minutes; the record that one was sent, two days.
• Online worlds, while they're in use. A world that was made but never filled is deleted after an hour. A daily backup of each world is kept for seven days, so a world can be put back if something goes wrong.

Your choices and rights

Wherever you live, you can ask us to:

• see what we hold about you, or have a copy of it;
• correct it (you can change your email in the game yourself);
• delete your account and everything tied to it;
• stop anything you object to.

To delete your account, open ONLINE in the game, then YOU, and press DELETE MY ACCOUNT (it asks twice). It removes, at once and for good: your name (anyone may take it after), your email, your password hash, your Newgrounds link, your sessions, friends and invites, and your Wanderer in every online world. Worlds you opened online are taken down with it. Copies in the daily backups are gone within seven days. A Newgrounds account signs in fresh next time, as a new Elsewild account.

For anything else, or if you can't get into the game, write to support@elsewild.io from the email on your account (for a Newgrounds account, tell us your Newgrounds name). We'll answer within 30 days.

If you're in the EU, the UK or a similar place: Eeriecast, LLC is the controller of your information, and it's stored and processed in the United States and elsewhere on Cloudflare's network. We use your information to provide the online play you asked for (the contract between us), and to keep the service safe from abuse (our legitimate interest). You can also complain to your local data protection authority. If you're in California: we don't sell or share personal information.

Children

Anyone can play alone. Online accounts aren't meant for children under 13 (or the age of digital consent where you live). If you're a parent and think your child made one, write to us and we'll delete it.

Keeping it safe

Everything between the game and our server is encrypted. Passwords and sign-in codes are kept only as salted hashes. Sign-in attempts are rate-limited, and only you are ever shown your own email address. No system is perfect, but we keep as little as we can.

Changes

If this policy changes, we'll update the date at the top. If a change matters to how your information is used, we'll say so in the game before it takes effect.

Questions about any of this? Write to support@elsewild.io.