Last updated 4 October 2026
This is a small, independently-run project — there's no dedicated legal or privacy team, but here's a straightforward account of what data Caldreth collects and what happens to it.
Account data, from Discord. When you sign in, Discord (via Supabase Authentication) shares your Discord user ID, username, and avatar, and may share your email address depending on the permissions you grant during sign-in. We never see or store your Discord password.
Gameplay data. Your character's name, levels, inventory, in-game currency, guild membership, and other progress — stored against your account so it's there when you come back.
Usage data, to balance and fix the game. While you play we record how you use Caldreth: pages visited, buttons pressed, game milestones (such as starting a task, levelling up, or dying in a fight), errors the app runs into, and recordings of your sessions so we can see where something went wrong. Anything you type is masked in recordings. This is tied to your account's internal ID, never your email or Discord details, and is never used for advertising. We also keep a history of your in-game progress (experience, gold, items gained and spent) for up to 90 days, to tune game balance.
You can turn off usage data at any time under Settings → Share usage data. It applies to every device you sign in on, and stops collection straight away.
We don't collect payment information: there is currently no real-money purchasing in Caldreth.
Caldreth uses one strictly-necessary cookie, set by Supabase Authentication, to keep you signed in. Our usage analytics run without cookies or local storage — nothing is saved on your device for them. We don't use advertising cookies, and don't track you across other sites. If you install Caldreth as a Progressive Web App, a service worker caches the app's own files on your device for faster loading — it doesn't collect or transmit any data.
Supabase hosts our database and handles authentication. Discord provides sign-in — its handling of your Discord account is governed by Discord's own Privacy Policy, not this one. Vercel hosts and serves the application. PostHog (EU region) processes the usage data described above on our behalf. We don't sell your data, and don't share it with anyone else for marketing purposes.
We keep your data for as long as your account exists. You can ask us to delete your account and the data associated with it at any time (see Contact, below).
If you're in the UK or the EU, you have rights under data protection law, including the right to access, correct, or delete your personal data, and to object to or restrict how it's processed. To exercise any of these, get in touch (see Contact, below).
Caldreth isn't directed at children under 13. Signing in requires a Discord account, which itself carries a minimum age requirement.
We take reasonable measures to protect your data, but no online service can guarantee absolute security.
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent change.
For privacy questions or to request deletion of your data, join our Discord.