Last updated: 8 July 2026
This policy explains what data Bramblefen collects and why. Short version: we collect the minimum needed to run a game, we never see your card details, and we don't sell anything to anyone.
| Data | Why | Kept |
|---|---|---|
| Account name & a salted scrypt hash of your password | Logging you in. We cannot recover your actual password. | Until account deletion |
| Gameplay data (characters, items, progress, friends list, chat moderation records) | Running the game and enforcing the rules | Until account deletion |
| IP address | Rate-limiting login attempts and abuse prevention; server logs | Rotated with server logs |
| Payment metadata from Stripe (account name, amount, time) | Applying your membership and handling disputes | As required for accounting |
What we never collect: card numbers (payments happen entirely on Stripe's systems — see Stripe's privacy policy), real names, addresses, or tracking cookies. The website sets no advertising or analytics cookies.
We share data with no one, except: Stripe (to process payments you initiate), our hosting provider (Amazon Web Services, where the server runs), and authorities if legally compelled.
You can ask us at any time to: export the data we hold about your account, correct it, or delete your account and all its data (deletion is permanent and includes your characters). UK/EU players have these rights under GDPR; we extend them to everyone. Contact us via the details on the main site.
Bramblefen is not directed at children under 13 and we do not knowingly collect their data. If you believe a child is playing, contact us and we will remove the account.
Material changes to this policy will be announced in-game or on this site.
See also our Terms of Service.