Privacy policy

Dustline Outpost: Privacy Policy
Version 2026-08-08.1

WHAT WE COLLECT

1. Account data (optional)
   - Email address and display name, only if you register or convert a guest
     account. Passwords are stored as scrypt hashes; we never see or store
     your actual password.
   - Guest accounts store no email and no password.

2. Game saves
   - Your outpost state (buildings, resources, contracts, progress) so you
     can sync between devices. Saves are private to your account.

3. Gameplay telemetry
   - Events such as: session start/end, new game, save uploaded/loaded,
     sol completed, building placed/removed, rover purchased, route
     created/removed, contract offered/accepted/completed/failed, upgrade
     purchased, overlay toggled, graphics quality changed, shortage started,
     night skipped.
   - Each event may carry a few numeric or short text properties (for
     example building type or contract id). Events never contain free-text
     input, chat, or personal content.
   - Raw events are kept for at most 90 days and then deleted. Per-day
     counts (how many times each event happened) are kept long term.

4. Technical data
   - IP address and user agent are recorded with consent records and
     refresh sessions for security auditing. Our hosting providers
     (Cloudflare, Railway) process standard request logs.

WHAT WE NEVER COLLECT

- Precise location, contacts, photos, microphone, advertising identifiers.
- We do not run ads and we do not sell or share personal data with
  advertisers.

WHY WE COLLECT IT

- To let you save and sync your game.
- To understand progression and balance (which contracts are hard, where
  players get stuck) so we can improve the game.
- To keep accounts secure (session rotation and abuse prevention).

YOUR CHOICES

- Play offline without an account: nothing leaves your device except what
  is needed to load the game.
- Play as a guest: only gameplay telemetry and saves are stored.
- You may request deletion of your account and all associated data at any
  time; the delete option removes saves, telemetry and consent records
  automatically (they are linked to your account and cascade on deletion).

COOKIES AND STORAGE

- We use one httpOnly cookie for session refresh and browser local storage
  for settings, consent state and your local save. No third-party tracking
  cookies.

CONTACT

- For privacy requests, contact the address listed on the project page.