Privacy notice

Version: 2026-11-07

In short

There are no advertisements in the game, what you do is not tracked and sold to anyone, and your data is kept only so the game can run. This notice covers the game itself: your world, the game server and the data inside the game. Your central account, membership, payments, Steam link and the HLauncher app are in HLauncher's privacy notice: https://hlauncher.hakantopcu.dev/legal/privacy.en.html.

Who answers for your data

Hakan Topçu answers for your data. To get in touch: https://hakantopcu.dev/#contact.

What is kept about your game account

The game server your world runs on keeps the following, apart from your central account:

• Your username. If you entered with your central account, this name is made from your central account number in a way that cannot be turned back, and it ties the game account to the central account. It is not shown to other players.
• Your display name, if you chose one. Other players see you by it, as the owner of a neighbouring world; you can change or remove it at any time.
• Your email address, if you gave one. It is stored encrypted.
• Not your password itself, but a digest of it that cannot be turned back.
• The moment you created the account, the moment of your last sign-in and the days you signed in.
• A random device number the game makes once per installation. It is not taken from your computer's hardware. It is kept to tell your devices apart and to notice abuse.
• The session opened when you choose "Remember me". It lasts 30 days.

Your network address

The network address (IP) you connect from is held in the server's memory for a short time, to limit sign-in and registration attempts. It is written down in two cases: a failed sign-in attempt and an "I cannot get into my account" request. The network address in these records is deleted after 30 days.

What is kept about your game

• Your world, your characters, the names you gave them and everything that happens in the world. Your world runs either on the game server on your own computer or on the game server you play on together.
• When you play with your central account, a copy of your world, its latest state with the inputs after it, is kept on the central server, so you can open your world on another computer.
• Your settings and the tendency profiles you saved.
• The problem reports you send: the text you wrote, the screenshot and the game's latest records. They are deleted after 30 days.

What leaves the game

• Email delivery (Resend): your email address and your username, when a message is sent to you. Verification, password reset and undo links and the notices about your account come this way.
• Backups (Google Drive): the server's daily backup is uploaded encrypted.
• The connection (Tailscale): the connection between the game and the server passes through this service's tunnel; it sees your network address too.
• Fault alerts to the administrator (Telegram): on a connection fault the alert names your account by a pseudonym that does not show who you are; your username is not sent.

What goes out for payments and Steam is in HLauncher's privacy notice. Beyond these your data is shared with no one.

What other players see

The names of your characters can be seen by other players: a character who goes to a neighbouring world is seen there by name. Your email address and your network address are shown to no player.

How long it is kept

• Your game account and your world: until you delete them.
• A session: 30 days.
• Problem reports: 30 days.
• Backups on the server: 3 days.
• Encrypted backups outside the server: 14 days.
• The network address in failed sign-in records and in "I cannot get into my account" requests: 30 days.
• These records themselves and the account log: no deletion time is set for these; when you delete your account, your lines in the log stop showing you.

If you delete your game account

The request waits 24 hours. Then your game account, your sessions, your email address, your problem reports, your settings, your world and its memories are deleted. The archives of finished worlds are encrypted with a key of your account alone; the key is destroyed, so they can no longer be read. Deleted data also drops out of the backups when the times above run out.

One thing stays: the lines of your account remain in the account log, but without showing you. Your username, your password digest and your encrypted email address are removed from these lines; what is left is the time and the kind of each line and a pseudonym bound to nothing.

This does not delete your central account or the copies of your worlds at the central service; how those are deleted is in HLauncher's privacy notice.

Your rights

• To see and correct your data: you can change your email address and your password from the Account section of the Settings.
• To delete it: you can delete your game account from the same place.
• To ask for a copy: write on https://hakantopcu.dev/#contact; a copy of what is kept about your game account is sent to you.

What is kept on your computer

In its own folder the game keeps your settings, the device number, your session if you chose "Remember me", the encyclopedia and your finished worlds so they can be read without a connection, and the records of the last run. They go when you remove the game and delete its folder.

Age

Cogito is for people over 18. An account found to belong to someone younger is deleted.

If this text changes

If the notice changes, the version date above changes. The current text is always in the About section of the Settings.