Warden's Edge Privacy Policy
Version 1.2 · 4 October 2026
In short
- We collect as little as we can. We never sell your data, and we show no ads.
- To run the game, we keep your Telegram or Discord user id with your progress, items, Crowns and purchases. We don't keep your Telegram or Discord name, unless you give it to us yourself, for example when you withdraw from a purchase or ask for help.
- We count how the game and our website are used, on our own server, to make the game better. No outside analytics or trackers. You can turn play statistics off in Settings.
- If you chat, we keep your messages for 30 days. Our own filter checks them; no outside company does.
- If you tell us you're under 13, your game moves to your device, and we delete your account on our server the same day.
- Our database is in the EU. To see, download or delete your data, email support@crosum.app. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
The full policy below is what counts.
1. Who is responsible for your data
The controller of your personal data is CroSum, the Dutch business that makes, runs and sells Warden's Edge ("we", "us").
| Address | Beneluxflat 19, 4701 BD Roosendaal, the Netherlands |
|---|---|
| support@crosum.app | |
| Chamber of Commerce (KvK) number | 42069368 |
| VAT number | NL005470805B28 |
For any privacy question, write to support@crosum.app.
2. What this policy covers
This policy covers Warden's Edge in Telegram (the game and its bot), in Discord, and our website wardensedge.com. For Warden's Edge, it replaces Telegram's standard privacy policy for bots and Mini Apps. Telegram and Discord have their own privacy policies for what they do with your data.
Our website sets no cookies and stores nothing on your device. The game sets no cookies either; it stores on your device only what section 3.9 lists.
3. What data we use
3.1 When you open Warden's Edge in Telegram
Telegram sends the game: your Telegram user id, name and username, language, a link to your profile photo, whether you have Telegram Premium, whether our bot may message you, where and through which link you opened the game, the time, and a signature that proves it came from Telegram. Like any website, the game also receives your IP address and some details about your device.
What we keep: your Telegram user id, and whether our bot may message you. If you opened the game from one of our website's Play links, we keep which one, and its campaign name if it is one of our own campaigns (section 3.13). With play statistics on, the game also tells us the kind of app and system you play on, for example Telegram on Android (section 3.13). We use the rest only to check the signature and to set up the game (for example its language), and we don't store it.
3.2 When you open Warden's Edge in Discord
The first time you open the game in Discord, Discord asks whether Warden's Edge may see basic information about your account. If you allow it, Discord gives us your Discord user id, username, display name and avatar, and tells the game which server and channel you are in.
In Discord, the game reaches our server through Discord's own proxy, so we don't see your IP address or your country.
What we keep: your Discord user id. With play statistics on, the game also tells us the kind of device you play on, a computer or a phone (section 3.13). We don't store your name, or the server or channel you play in.
3.3 Before Warden's Edge opens to everyone
Until our opening day, only the testers we invite can sign in. If you open Warden's Edge before then, our server checks the sign-in information from Telegram or Discord, shows you that Warden's Edge is opening soon, and keeps nothing about you. If you buy something on Discord's own store page before then, it reaches Warden's Edge on our opening day; until then, we keep nothing about that either.
3.4 Your game data
On our server, linked to your user id, we keep:
- your Crowns (bought and free kept apart), Shards, items (and how you got, upgraded and re-rolled them), loadout and unlocks, such as 2x speed and colours;
- your campaign progress, Season pass progress and daily calendar rewards;
- the Store's offers you have seen and the one-time deals you have claimed;
- how many times you have started the game, and your time zone, as your device gives it, so your daily rewards change at your midnight;
- your league and your weekly results. In leagues other players see the name you chose (section 3.12), or "Warden" and a number, never your Telegram or Discord name;
- run records: what each run started with (the stage, the game version and your gear) and, when it ends, its record (your choices and checkpoints), so that our server can replay and check the run before it gives you rewards;
- your month and year of birth, if you are 13 or over, from the age question (section 11), and the date from which you count as an adult, which our server works out from them;
- the version of the Terms of Sale you accepted, and when;
- a random public player id (how other players and our moderators know you, never your Telegram or Discord id); your name in the game, chosen or made up, and when you last changed it; whether your chat is on, and when you accepted the Community Rules; and the players you blocked.
3.5 Your purchases
- Telegram: the order number, what you bought, the price in Stars and its value in euros, the date and time, Telegram's payment references, your request for immediate delivery, the version of the Terms of Sale you accepted, and any withdrawal (including the name you gave), refund or reversal. We also keep the country your internet connection came from when you ordered, because tax law requires us to know where each buyer is (section 3.10).
- Discord: Discord's record of what you bought: the item, the date, Discord's references, and whether it was used or refunded. On Discord, Discord sells and handles the payment. If you buy on Discord's own store page without ever opening Warden's Edge, our server creates an account for your Discord user id to hold what you bought.
We never see your card or bank details, on either platform.
3.6 When you contact us
If you contact us by email, or through our bot's /paysupport command, we use your messages and what we need to help you: for example your Telegram username, your email address and your order numbers. Your /paysupport messages are passed to our support chat in Telegram.
3.7 Feedback you send in the game
If you send us feedback from the game, we receive what you write, the game version and your platform, linked to your account on our server, so we can look into what you describe. Please don't put personal details in it.
3.8 Crash reports
If the game crashes and sends our server a crash report, the report holds the game version, the stage, the run's starting setup and how far it got, the error message, and the run's saved state. A crash report contains no user id or name, and we don't store your IP address with it.
3.9 Data that stays on your device
The game stores some data on your own device, in Telegram's or your browser's storage. We don't receive it:
- your settings (such as the speed you play at, and whether play statistics are on), an unfinished run so that you can continue it, and run results waiting to be sent to our server;
- if you answered the age question with a month and year under 13: that answer, and from then on your whole game (section 11);
- for play statistics (section 3.13): the events waiting to be sent to our server; a random device id, which lets two open copies of the game share one waiting list; a tag our server gives your account, so that a device never sends one account's events as another's; when the game was first opened on that device; how many sessions and runs it has counted; and which runs are still open, so that a run the game never finished can be reported. The device id and the first-open time stay on the device: they are never sent. If you turn play statistics off, all of this is deleted from the device; if you told us you are under 13, none of it is recorded there.
This data is needed for the game to work, except what is kept for play statistics. Clearing the game's data in Telegram or your browser deletes all of it.
3.10 Your country
When you use Warden's Edge in Telegram, our hosting provider, Cloudflare, tells our server which country your internet connection comes from. We use it:
- to keep Warden's Edge unavailable where we don't offer it (Brazil);
- to sell in the Store only in the 27 countries of the European Union. Elsewhere, or if the country can't be told, you can look around the Store, but not buy;
- to record, with each Telegram order and purchase, the country of the buyer, which tax law requires (section 3.5).
Our server also counts how many game sessions begin in each country, as totals that name no one (section 3.13), and our website's visits by country (section 3.14). We don't store your country for any other reason. In Discord we don't see it.
3.11 Server logs and security
Our server writes short technical logs: what happened, errors, our own random order and run numbers, and a tag that links one player's lines within a single day and changes every day. The logs never contain your IP address, country, user id or name. To protect our server from attacks, it limits how often sign-ins can be tried, and how often our website's visit counter can be sent, from one internet address; for this it uses a scrambled form of your IP address, kept only for the minute that the limit counts and never written to our logs or database.
3.12 Chat, names and reports
We keep these only if you open the chat or the name screen, turn the chat on, choose a name, block a player or report something. Opening the game alone doesn't create anything here. Nor does a request we turn down (for example a name our filter refuses). If you do, we keep:
- your messages: the text exactly as it was shown, or the quick-chat message you picked, and when you sent it;
- messages our filter blocked are counted by type, without their text. A block for self-harm words isn't linked to you at all. The only exception: if you ask us to look again at a blocked message (Wrongly blocked?), you send its text to us, and we keep it with your request;
- if our filter blocks several of your messages in a day for personal questions, sexual words, threats, contact details, links or scams, the counts by type (never the words), which a person checks. If they keep it as evidence, it also holds a copy of the messages of yours that other players could still see then;
- reports you make, and reports about you, with a copy of the message or name reported and up to 10 messages around it (which can include other players' messages). Players can report grooming, or that a player may be under 18;
- our decisions about you and their reasons (for example a removed message, a mute or a name reset), the messages that told you about them, and your requests to look again. When we tell you we removed one of your messages (or reset your name), we repeat its words, so you know which one;
- if a moderator is worried about you after something you wrote, a message from us with helplines, and that we sent it.
You can read every message about your account from the last 12 months in the game (Settings › Chat & name › Messages about your account).
We don't keep your IP address for the chat. Our moderators see your public player id and name, your age group, how old your account is, how much you have played, and whether your chat is limited or paused: never your Telegram or Discord id.
On your device only, the game compares a name you type with your Telegram or Discord name, to warn you if they look alike. Nothing of this is sent to us.
3.13 Play statistics
To learn where the game is too hard, unclear or broken, what players like, and which parts of the Store and our website work, the game sends our own server a record of how it is played: when you play and the screens you open, your runs and the cards you pick, what you do in the Store, the settings you change, whether you answered the age question or closed it (never your answer), and crashes. It counts how many times each button was tapped (by the button's name only), and where other taps landed and what was there. With it go the game version, your platform and its system, the size class of your screen (small, medium or large, never its exact size), and which of our website's Play links you came from, with its campaign name only if it is one of our own campaigns (any other link is only counted as "another link", never with its words).
It is linked to your account on our server by our internal account number, never your name or your Telegram or Discord id. Nothing in it identifies your device: no device id, no install time, no time zone. We read it as totals. We also count our own records of your play the same way, as totals (the runs our server checked, Crowns spent, crafting and claims), to improve the game. We never use any of it to decide anything about you, and it never changes what we offer you or the prices. No outside company receives it, and it is never used for ads or marketing.
Your choice: turn it off in the game's Settings (Terms & privacy, Play statistics). It stops at once, on every device signed in to your account, and we delete what we hold about you; from then on our own records of your play are left out of the totals too. Only purchases are still counted whatever you choose, because they are our accounts (section 3.5). If you told us you are under 13, nothing is recorded on that device from then on, and what was recorded before goes with your account (section 11).
If your account was made before this version of the policy: the earlier versions promised that we would ask you first, and never ask anyone under 16. So we only ask (once, in the game) if we know from the age question that you are 16 or over. Until you answer, the game records and sends nothing for play statistics, and our server stores nothing for your account, whatever it receives; what the game noted on a device before our server's answer reached it is deleted there, unsent. Until we know you are 16 or over, Settings shows play statistics as off, and our own records of your play are left out of the totals; you can still switch them on yourself.
3.14 Our website
Our website, wardensedge.com, counts its visits. Each visit sends our own server: the page, where you came from (the other website's name only, or the campaign name in our link), the kind of device and its system, whether the page was opened inside another app, the language, the width class of your screen (phone, tablet or desktop), how far you scrolled and what you saw, how long the page was open, and which of our links you clicked. Cloudflare tells our server your country. A Play link into Telegram tells the game which button you used, and your visit's campaign name, so we can see which parts of the website bring players; the game keeps the campaign name only if it is one of our own campaigns.
No cookies, nothing stored on your device, no IP address kept, and nothing that tells one visitor from another: we count visits, not people. With Global Privacy Control or Do Not Track switched on in your browser, the page sends nothing, and its Play links don't tell the game which button you used. The record of each visit is kept 90 days, then only totals.
4. Why we use your data, and our legal basis
The law (the GDPR, Article 6) lets us use personal data only with a legal basis. Ours are:
| Why | What data | Legal basis |
|---|---|---|
| To run the game: your account, progress, items, Crowns, unlocks, the Season pass, the calendar and leagues | User id, game data | Our contract with you: the Terms of Service |
| To sell and deliver purchases, and handle confirmations, withdrawals and refunds | User id, purchase data | Our contract with you: the Terms of Sale |
| To keep purchase records for tax, including each Telegram buyer's country | Purchase data, country | A legal obligation: Dutch tax law and EU VAT law |
| To sell in the Store only where we can, and keep Warden's Edge unavailable in Brazil | Country of your connection | Our legitimate interest in selling only where we meet the tax rules, and offering the game only where we choose to |
| To check runs, prevent cheating and fraud, and take back items after refunds | Run records, purchase data | Our legitimate interest in a fair game, and in protecting players' purchases |
| To set the game up for your age | Your month and year of birth: with your account if you are 13 or over; under 13, on your device only | Our legitimate interest in protecting younger players: no buying under 13, no countdowns or offers after a win for under-18s, and no account on our server for anyone who tells us they are under 13 |
| To answer your questions, complaints and feedback | Your messages, feedback, contact details | Our contract with you, and our legitimate interest in helping players and improving the game |
| To run the chat and names you choose to use: sending and showing messages, your name, your blocks | Messages, your name, your public player id, your chat settings, your blocks | Our contract with you: the Terms of Service and the Community Rules |
| To handle reports, give reasons for our decisions, look again when you ask, answer orders from authorities, and keep evidence when the law requires | Reports, the copies they hold, our decisions, your requests to look again | A legal obligation: the EU Digital Services Act, and the EU rules on terrorist content online |
| To keep the chat safe: our filter, rate limits, pauses, the quick-chat limit, and the evidence a moderator needs; and to report a child at risk to the police, in the EU or the UK | Messages, names, counts of blocked messages, your age group, how long you have played | Our legitimate interest in a safe game, weighed with care for younger players' interests |
| If someone may be at risk of harming themselves: to send them help and, if a life may be in danger, to tell the police | A self-harm report, and that we sent help | This is information about health. We rely on the need to protect someone's life, and, for what was posted in the chat, on it having been made public. We keep it linked to you for 7 days only |
| To find and fix crashes | Crash reports | Our legitimate interest in a game that works |
| To improve the game: play statistics (section 3.13) | The events of your play, by our internal account number, and our own records of your play, counted as totals | Our legitimate interest in improving the game, its balance and its Store, and fixing what breaks. You can turn it off in Settings |
| To count our website's visits (section 3.14) | The page, where the visit came from, the device, and what was seen and clicked, with no identifier | Our legitimate interest in knowing what of our website works |
| To keep our servers safe and working, and to recover from failures | IP address (for a moment), logs, backups | Our legitimate interest in security |
Where we rely on our legitimate interest, you can object (section 10). We don't ask for your consent for anything at the moment.
We don't send you marketing messages. Our bot sends you only messages about your own orders, withdrawals, refunds and support questions.
5. Who else handles your data
| Who | What they do | Their role |
|---|---|---|
| Cloudflare, Inc. (USA) | Hosts the game, our website, our server and our database; delivers the game to you; protects it against attacks; keeps our logs and database backups | Works for us, under our instructions and Cloudflare's data processing agreement (a "processor") |
| Anthropic, PBC (USA) | Provides Claude, an AI assistant that helps us run Warden's Edge. Claude reads totals and summaries about the game (how runs go, errors, sales), which name no player; for play statistics, through a read-only key that opens those totals and nothing else. Claude never reads chat messages, names or reports. The text of feedback players send reaches Claude only through Anthropic's API for businesses, never through a personal account. Claude doesn't receive your user id, name or purchase details | For feedback text, works for us under Anthropic's Commercial Terms and data processing addendum (a processor), which don't let Anthropic train its models on it |
| Our email provider | Handles our email | Works for us (a processor) |
| Telegram | Runs the platform; sends us your Telegram data when you open Warden's Edge; handles Stars payments and refunds; delivers our bot's messages; holds our support chat | Its own controller, under Telegram's privacy policy |
| Discord (Discord Netherlands B.V. for players in the European Economic Area; Discord Inc., USA, elsewhere) | Runs the platform; sends us your Discord data with your permission; sells what you buy on Discord. Your chat messages also travel to us through Discord's proxy. We send Discord only what its services need, such as that a purchase was delivered | Its own controller, under Discord's privacy policy |
| Discord's payment providers, such as Stripe | Handle the payment when you buy on Discord | They work for Discord, not for us. We never receive your payment details |
| Apple and Google | Sell Stars when you buy them in Telegram's phone apps | Their own controllers. That purchase is between you, them and Telegram |
| Our accountant, and the Dutch Tax Administration | Receive purchase records when the law requires | As the law requires |
| Authorities and courts | Only when the law requires it | As the law requires |
No outside company checks the chat or names. Our own filter runs inside our own server, and our own moderators read reports.
Alerts to our moderators. When a player is reported, contests a decision, or has their typing paused by our filter, our bot tells our moderators in Telegram at once: what kind of alert it is (for a report, its reason, which can be that a player may be under 18) and that player's public id and name in the game. Never the reported message or who reported it, and nothing about a player in a self-harm report. The alerts can't be forwarded, and stay in the moderators' Telegram, under Telegram's privacy policy, until a moderator deletes them.
If Warden's Edge is ever run by a company that we set up, or taken over by someone else, your data goes with it. We will tell you first.
We don't sell or rent your data, and we don't share it for advertising.
6. Data outside the EU
- Our database is stored in the EU (Cloudflare's EU jurisdiction for our database). Cloudflare's network may still handle some data in passing, such as your IP address, or a message on its way to our database (our filter checks it there), in the country closest to you or in the USA.
- Cloudflare and Anthropic are US companies. Our transfers to them are protected by the EU's Standard Contractual Clauses in their data processing agreements, and, for Cloudflare, also by its certification under the EU-US Data Privacy Framework. To get a copy of these safeguards, write to us.
- Telegram's and Discord's own privacy policies explain their transfers.
7. How long we keep your data
| Data | How long |
|---|---|
| Your game account: user id, progress, items, Crowns, unlocks, pass and calendar, and your month and year of birth (13 and over) | As long as you have the account, or until you ask us to delete it. If you haven't opened Warden's Edge for 3 years and never bought anything, we delete it; never an account with bought Crowns or items |
| The record of each run (your choices and checkpoints) | 90 days after the run |
| The rest of each run (stage, date, result, your gear, game version) | With your account, for your progress and for league disputes |
| League results | The current week and the 12 weeks before it |
| Purchase records, including each Telegram buyer's country | 7 years, as Dutch tax law requires, or 10 years for the EU's One Stop Shop for VAT. If you delete your account, we keep them apart, without your user id |
| Telegram orders that were never paid | With your account; the country of the connection is deleted 30 days after the order expired |
| Support messages | 2 years after your question is closed |
| Chat messages | 30 days after they were sent. Other players see the last 12 hours |
| Reports, with the copies they hold, and requests to look again | 12 months after we decided. Longer only while the law requires us to keep them as evidence, for example for the police |
| The messages that told you about a decision | 12 months |
| Our decisions | 2 years, and as long as a report or a message still points to them. The count of blocked messages: 90 days. The counts a person checked after several blocks in a day: 12 months after they decided, or longer while kept as evidence |
| If we sent you help because someone was worried about you | That record stops pointing at you after 7 days. A self-harm report that ended in help, or in no action, is deleted after 7 days, with every message we sent about it (to you, or to whoever reported it) |
| Your name, chat settings and the players you blocked | As long as you have the account |
| Feedback and crash reports | 90 days |
| Play statistics: the detailed record of your play | 90 days after we receive it (sooner if the whole record grows too large) |
| Play statistics: the days you played | 120 days |
| Play statistics: when you first reached each step of the game (your first run, first win, first boss, first purchase) and where you came from | As long as you have the account, or until you turn play statistics off |
| Our website: the record of each visit | 90 days |
| Totals that name no one (how many players, runs and visits, and so on) | Kept |
| Server logs | 7 days |
| Backups | Cloudflare keeps a 30-day history of our database, and we keep the last 4 weekly copies, encrypted, on our own computer. Data deleted from the database is gone from all backups within 5 weeks. If we ever restore a backup, we delete again what was deleted after it was made |
| Data on your device | Until you delete it, by clearing Telegram's or your browser's data |
| Everything, if Warden's Edge closes | We delete it all when Warden's Edge stops running, except the purchase records that tax law makes us keep |
8. How we protect your data
- Data travels encrypted (HTTPS), and our database and its backups are encrypted where they are stored.
- Our server checks Telegram's or Discord's signature on every sign-in.
- Our secret keys are kept apart from the data.
- Only the owner of CroSum can reach the server and its data. Claude, the AI assistant that helps us, reads only what section 5 says.
9. Decisions made by computer
- Run checks: our server replays each run automatically before it gives rewards. A run that fails the check earns no rewards. If you think that was wrong, contact us and a person will look at it.
- Leagues are worked out automatically from your results.
- Your country (in Telegram) is checked automatically (section 3.10).
- The chat filter blocks messages and names automatically before anyone sees them, and pauses your chat for 10 minutes after several blocks in a short time. If our filter blocks several messages of yours in a day for asking personal things, sexual words, threats, contact details, links or scams, typing is paused for 24 hours and a person checks it the same day. A message reported by several players is hidden until a person looks at it. A person decides every longer mute, every ban, every name reset and every quick-chat limit. If other players report that you may be under 18, or a moderator sees it in the chat, a moderator may limit your chat to quick chat. You are always told the reason, and you can ask a person to look again (Contest).
- No profiling for offers. Prices are the same for everyone. What the store offers depends on how far you are in the campaign, not on how much you spend or how you play. Things you already own, and deals you have already claimed, aren't offered again. Your age group decides only whether you see countdowns and an offer after a win, and, under 13, that nothing can be bought.
None of these decisions has legal effects on you or affects you in a similarly serious way.
10. Your rights
You have the right to:
- see the data we have about you, and get a copy;
- correct it if it is wrong;
- delete it;
- limit how we use it;
- object to our using it on the basis of our legitimate interest;
- take it with you, in a common file format.
Your right to object to play statistics: turn them off in the game's Settings (section 3.13), or write to us. On our website, Global Privacy Control or Do Not Track stops the visit counter (section 3.14).
How: write to support@crosum.app, or, for a purchase, use /paysupport in our bot. It is free. We answer within one month; if a request is complicated, we may take up to two more months, and we tell you if we do. We may ask for something that shows the account is yours, such as an order number. A copy of your chat data comes by email. To object to our chat filter, switch the chat off: the filter is part of using it.
When you delete your account, you lose your progress, items and Crowns, including bought ones. Your chat messages, your name, your blocks and your play statistics are deleted too (totals that name no one stay). We keep only the purchase records that tax law makes us keep, and reports and our decisions for as long as the law requires (section 7).
Complaints. If you are unhappy with how we handle your data, please tell us first. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the data protection authority in the country where you live or work.
11. Children and your age
- Warden's Edge is not made for children, but we know younger players play it. Telegram's own terms say that users in the European Union must be at least 18. Discord's say users must be at least 13, or older where the law of their country requires it.
- The first time you open the Store or the chat, we ask for your month and year of birth, once. One answer covers both. Please answer honestly: to correct a wrong answer, contact us.
- If you are 13 or over, we keep your month and year of birth with your account, never the day, so that the game treats you the same way on every device.
- If you tell us you are under 13, the game stops using our server: your progress moves to your device, and we delete your account and your Telegram or Discord id the same day. Our server doesn't store or log your answer. From then on, Warden's Edge plays on that device only, even after you turn 13: you can look around the Store but nothing can be bought, not even with Crowns, and leagues aren't played there. Because we keep nothing, we can't reconnect that device later.
- The one exception: if someone buys on Discord's own store page with that Discord account, Discord delivers the purchase to a new account on our server, as for any Discord user (section 3.5).
- Until you answer, the game treats you as under 18, and nothing can be bought.
- Under 18: the Store shows the date of its next change instead of a countdown, and we never show an offer after a win.
- The chat, 13 to 17: quick chat only (ready-made messages); you never receive typed messages; you can type a name (our strictest filter checks it; don't use your real name, your age or a name you use elsewhere) or pick one from our word lists. If you told us you are under 13: no chat and no name.
- Play statistics: if you tell us you are under 13, the game records no play statistics at all on that device from then on, and what was recorded before you answered is deleted with your account. Play statistics are on for players of 13 and over, and for players who haven't told us their age, as for everyone: you can turn them off in Settings (section 3.13). They are only used to improve the game, never for marketing, ads or profiles of you.
- Purchases rely on parental controls outside the game too: Apple's and Google's, when Stars are bought in Telegram's phone apps, and Discord's.
- Parents and guardians: to see or delete your child's data, write to support@crosum.app.
12. Where your data comes from, and whether you must give it
Your data comes from you (your month and year of birth, your feedback, your messages and your chat), from Telegram or Discord (sections 3.1 and 3.2), from your play (sections 3.4, 3.5 and 3.13), and from other players' reports (section 3.12).
You need a Telegram or Discord account to play, and our server needs your user id to keep your progress and purchases: without it, Warden's Edge can't work. The age question is needed before you can buy anything or use the chat. Feedback, the chat, a chosen name and play statistics are your choice.
13. Changes to this policy
When we change this policy in an important way, we tell you in the game before the change takes effect. The version number and date at the top show which version you are reading.
What changed in version 1.2 (4 October 2026). It replaces version 1.1, which went online on 4 October 2026 (dated 12 October 2026, the day we planned to open to everyone):
- Play statistics (new section 3.13). The game now sends our own server a record of how it is played, linked to our internal account number, to make the game better; no outside company receives it. Before, a record of taps and runs stayed on your device (section 3.9). You can turn it off in the game's Settings (Terms & privacy, Play statistics): it stops at once and we delete what we hold. If your account was made before this version, we ask you once in the game, and only if we know you are 16 or over; until then nothing is recorded or sent for your account, and our server stores nothing for it. Nothing is recorded on a device of anyone who told us they are under 13, and players of 13 and over are counted unless they turn it off (section 11). What we now keep from Telegram and Discord (sections 3.1 and 3.2: which of our website's Play links you came from, and the kind of app and system you play on); what the game keeps on your device for it (section 3.9: a random device id that is never sent, among others; and section 2); Claude reads its totals through a read-only key (section 5). The new purposes, retention times and your choices are in sections 4, 7, 10 and 12.
- Our website (new section 3.14) counts its visits on our own server: no cookies, nothing stored on your device, no IP address kept, nothing that tells one visitor from another. The summary at the top, section 2 and section 3.11 say so too.
- The chat's safety (section 3.12, and sections 4, 7, 9, 10 and 11): what we keep only once you use the chat or a name; self-harm blocks not linked to you; the counts by type a person checks when several of your messages are blocked in a day (typing paused for 24 hours); reports for grooming and for a player who may be under 18, and the quick-chat limit a moderator may set; what our moderators see (also how long you have played, and whether your chat is limited or paused); help after a worry about self-harm, linked to you for 7 days only; players of 13 to 17 may type a name, which our strictest filter checks; and the game comparing a typed name with your Telegram or Discord name on your device only.
- Alerts to our moderators (section 5): when a player is reported, contests a decision or has their typing paused by our filter, our bot tells our moderators in Telegram at once, with what kind it is and that player's public id and name in the game; never the reported message, never who reported it. Telegram receives these alerts, under its own privacy policy.
- Smaller changes: your chat messages travelling through Discord's proxy (section 5) and Cloudflare's network (section 6); a copy of your chat data by email, and objecting to the chat filter by switching the chat off (section 10); what deleting your account deletes (section 10).
- Everywhere: plainer wording and a short summary at the top; no change in what we do.
Contact
CroSum · Beneluxflat 19, 4701 BD Roosendaal, the Netherlands · support@crosum.app · KvK 42069368 · VAT NL005470805B28