Privacy Policy

Draft of 10 October 2026. Not yet in force, and not yet reviewed by a lawyer. Nothing is sold in Brightmere yet. Highlighted words are still to be filled in.

This says what Two Fires Studio LLC ("we") keeps about you when you play Brightmere, why, and what you can do about it. We keep as little as the game needs. We do not sell your information, and the game has no advertising and no advertising trackers.

1. What we keep

Your account: the account name you chose, and a scrambled form of your password (a salted hash) from which the password itself cannot be read. We do not ask for your real name.
Your characters: their names, looks, levels, belongings, quests and other progress, and the choices you made in the game.
A record of rewards: what the server paid your characters for fights, so that saved games can be checked for cheating.
What you own: membership dates, founder status, cosmetics, and gift codes made or used.
While you play: where your character is in the world, what it looks like and how it moves, which is shown to other players nearby; and the name of your account and character.
Technical records: your internet (IP) address and the times you connect, kept in the server's log and used to limit sign-in attempts; a random identifier the game makes for your device; reports the game sends when something goes wrong (the error, and how long things took to load); and how much graphics memory the game is using on your device.
Payments: when you buy something, our payment provider (Stripe) collects your payment details and email address. We receive only what we need to know: that a payment was made, for what, and a way to match it to your account. We never see your card number.
Messages you send us: if you write to support, we keep the message and your email address.

2. What is kept on your own device

The game stores your settings, a copy of your saved game, and your sign-in on your device (in the browser's local storage) so that it works between visits and when you are offline. We do not use advertising cookies or third-party analytics.

3. Why we keep it

to run the game and keep your characters;
to let players see and play with each other;
to keep the game fair: to detect cheating and abuse and act on it;
to keep the service secure and working, and to fix faults;
to take payments and keep the records the law requires;
to answer you when you write to us.

4. Who else sees it

Other players see your account name, your character's name and looks, where it is and what it does in the world.
Companies that work for us: our hosting provider [HOSTING PROVIDER] and our payment provider Stripe, who may use the information only to provide their service to us.
When the law requires it, or to protect our rights, our players or the public.
If the game is taken over by another company, the information goes with it under the same promises.

We do not sell your personal information and do not share it for advertising.

5. How long we keep it

Your account and characters: until you delete them or ask us to, or until an account has been unused for [24 months].
Server logs and error reports: up to [90 days].
Payment records: as long as tax and accounting law requires.
Records of accounts closed for breaking the Terms of Use: as long as needed to keep that person from returning.

6. Your choices

You can delete a character in the game at any time.
You can ask us for a copy of what we hold about you, to correct it, or to delete your account, by writing to [SUPPORT EMAIL]. We will answer within 30 days. We may need to confirm the account is yours.
Depending on where you live (for example the EU, the UK or some US states), you may have further rights, such as to object to some uses or to complain to a data protection authority. We will honor any right the law gives you.

7. Children

Brightmere is not for children under 13, and we do not knowingly keep information about them. If you believe a child under 13 has made an account, write to [SUPPORT EMAIL] and we will delete it.

8. Security

Passwords are stored only in scrambled form, sign-in attempts are limited, and connections are [encrypted (HTTPS) once the game is hosted]. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

9. Where it is kept

The servers are in the United States. If you play from elsewhere, your information is sent to and kept in the United States.

10. Changes

If we change this policy in a way that matters, we will say so on the title screen before the change takes effect.

11. Contact

Two Fires Studio LLC, [MAILING ADDRESS], Georgia, USA. Privacy questions: [SUPPORT EMAIL].