YOUR PLAYER PASSPORT

Play curious. Share by choice.

This notice explains the new Aurism player-profile feature. The existing site privacy policy also applies, including any existing hosting analytics.

What a profile stores

A random player ID, chosen nickname and avatar, private game saves, mission stars, scores and achievements. Do not use a real name or contact information as your public nickname.

Guests and connected accounts

A guest uses an essential, secure session cookie. The session lasts up to 30 days. Clearing cookies or changing browser can make a guest profile inaccessible. Local game saves also remain on your device. Google and phone login are prepared but require owner configuration before they can be used.

When enabled, Google supplies a verified account identifier. Aurism stores the Google account identifier, not your Google password or mailbox contents. Phone verification uses Twilio Verify; your phone number is sent to that provider to send and verify a code. Aurism stores a keyed hash of the verified number as the login identifier, rather than the readable number. Provider privacy policies also apply.

Public rankings are optional

Profiles start private. Only connected players who opt in are shown publicly. Public information includes the player nickname, chosen avatar, per-game scores, completed mission counts, stars and achievement badges. Contact details, private saves and inventions are never part of the public profile. You can opt out in My profile.

Saving and score limits

Game saves are associated with your player ID. Cloud saves can restore a connected account across devices. Conflicting drafts ask for your choice. Community rankings use progress reported by the games; they are not verified competitive or prize results.

Essential security data

Session tokens are stored as hashes on the server. Temporary request-rate counters help prevent abuse and SMS fraud. When phone login is enabled, Cloudflare Turnstile checks that the request is legitimate. No new advertising or marketing tracking is added by the profile feature.

Your controls

My profile lets you choose a nickname/avatar, turn public ranking on or off, download your private profile data, sign out, or delete the profile and server saves. Deletion also removes this player's local profile copies from the browser used to request deletion; other devices or files you downloaded can retain offline copies.

Connected profiles are kept until you delete them. Guest profiles without an active session or recent save become eligible for cleanup after 90 days. Temporary expired security records are cleaned up during service activity. Cloudflare is the hosting/database provider. The published player service uses a Cloudflare-hosted database. Development previews use a separate database. Google and SMS login remain unavailable until configured. Guest cloud backups are limited to 128 KiB per game; larger drafts remain on the device and can be exported.

For younger explorers

A parent or guardian should help younger players with account setup and public sharing. Guest play needs no email address or phone number. Public profiles are off by default; there is no public messaging or contact-detail field.

Questions or deletion help: [email protected].