Privacy Policy

When you sign up and sign in, we store:

• Your username, which you choose.
• Your password, stored only as a salted scrypt hash. We never store the password itself, and the hash can’t be turned back into it.
• Your first and last name, the last name only if you give it.
• Where you heard about playtesting, which you choose from a list, and the event’s name or your own words if you add them.

Only Basilika’s administrators can see your name and where you heard about playtesting. They never appear on the sites or to other players.

If you email us, we keep your email address and what you wrote, to answer you.

• Session records: when each sign-in session was created and when it expires.
• Your client address (the IP address your requests come from), in the limits that slow down repeated sign-in attempts and in our server logs.
• Technical details that every web request carries, such as your browser type and the page you asked for, in our server logs.
• Your cookie choice: when you accept cookies, your browser stores that choice in its local storage, so we don’t ask again.

When you sign in, we set one cookie, basilika_session, which keeps you signed in on basilika.net and play.basilika.net. Scripts on the page can’t read it, and it’s sent only to our own servers.

It’s strictly necessary for signing in, so it isn’t covered by the cookie banner: it’s set only when you sign in, whether or not you’ve accepted cookies, and signing out removes it.

We use LaunchDarkly, a feature-management service, to turn parts of this website on or off without releasing a new version. It only runs after you accept cookies; until then you see the site’s default content and nothing is sent to LaunchDarkly.

Once you accept, your browser stores a randomly generated, anonymous identifier in local storage so you see consistent content between visits. Your browser keeps a connection open to LaunchDarkly to receive updates, and sends it that identifier along with which features were shown to you. LaunchDarkly also receives the technical details any web request includes, such as your IP address and browser type. We never send your name, email address, or any other personal details, and we only use this to decide what content to show. LaunchDarkly handles that data under its own privacy policy, and we aren’t responsible for its practices.

We use this information only to sign you in, to keep you signed in, to run and fix the sites, and to protect accounts from abuse, such as someone guessing passwords. We use your name and where you heard about playtesting to know who our playtesters are and which events and channels bring them. We don’t sell it or use it for advertising, and we share it only with the companies that host the service, or when the law requires us to. Feature flags, above, are a separate service with their own disclosure.

Account data is stored in the Basilika game service’s database, on a server hosted by QuakeAI in the United States, and in that database’s backups. If you use the sites from outside the United States, your information is transferred to and stored in the United States.

• Sessions: up to 90 days, or until you sign out, whichever comes first.
• Accounts: until you ask us to delete yours, or until we delete it under the Terms and Conditions.
• Backups: 14 days. Data you’ve deleted leaves the backups within 14 days.
• Emails you send us: as long as we need them to answer you and to keep a record of what we agreed, such as an account deletion.

We take reasonable measures to protect your information, such as hashing passwords, encrypting connections between your browser and our servers, keeping the session cookie out of reach of the page’s scripts, slowing down repeated sign-in attempts, and limiting who can reach the servers.

No method of sending or storing data over the internet is completely secure, so we can’t guarantee your information’s security. To the fullest extent the law allows, we aren’t responsible for unauthorized access to, or loss of, your information that happens despite those measures or that is beyond our reasonable control. Keep your password to yourself, and don’t reuse one you use elsewhere.

To delete your account, email support@basilika.net with your username. We may ask you to confirm that the account is yours. We then delete the account and its sessions; any copy in our backups is gone within 14 days.

The sites aren’t intended for children under 13, and we don’t knowingly collect personal information from them. Children under 13 may not create an account. If you believe a child under 13 has given us personal information, email support@basilika.net and we’ll delete it.

The sites and the game are provided “as is” and “as available,” without warranties of any kind, express or implied, including that they will be uninterrupted, error-free, or secure.

To the fullest extent the law allows, Basilika, LLC and its owners, employees, and service providers aren’t liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of data, that results from your use of the sites, your inability to use them, or any unauthorized access to your information. Some places don’t allow these limits, so they may not all apply to you; nothing in this policy limits a right the law gives you that can’t be waived.

The Terms and Conditions set out these limits in full, and they apply here too.

When this policy changes, we update it here and change the date at the top of this page. Using the sites after a change means you accept the updated policy.

For any question about this policy or your data, email support@basilika.net.