Privacy notice

Version: 2026-11-02

In short

There are no advertisements in the game, what you do is not tracked and sold to anyone, and your data is kept only so the game can run. Below is what is kept, where it goes and when it is deleted.

Who answers for your data

The seller's details will appear here once the sole proprietorship is founded. Sales start on that date.

What is kept about your account

• Your username. You sign in with it; it is not shown to other players.
• Your display name, if you chose one. Other players see you by it, as the owner of a neighbouring world; you can change or remove it at any time.
• Your email address, if you gave one. It is stored encrypted. An email address is not required; without one you get a recovery code.
• Not your password itself, but a digest of it that cannot be turned back.
• The moment you created the account, the moment of your last sign-in and the days you signed in.
• Which account invited you, and the invites you gave.
• A random device number the game makes once per installation. It is not taken from your computer's hardware. It is kept to tell your devices apart and to notice abuse.
• The session opened when you choose "Remember me". It lasts 30 days.

Your network address

The network address (IP) you connect from is held in the server's memory for a short time, to limit sign-in, registration and invite code attempts. It is written down in two cases: a failed sign-in attempt and an "I cannot get into my account" request. The network address in these records is deleted after 30 days.

What is kept about your game

• Your world, your characters, the names you gave them and everything that happens in the world.
• Your settings and the tendency profiles you saved.
• The problem reports you send: the text you wrote, the screenshot and the game's latest records. They are deleted after 30 days.

What leaves the game

• Email delivery (Resend): your email address and your username, when a message is sent to you. Verification, password reset and undo links and the notices about your account come this way.
• Payment (iyzico): when you take the monthly subscription or the one-time purchase, your card details, your name, your billing address and your email address go to the payment institution iyzico. If you ask, iyzico keeps your card for the monthly renewals; a one-time purchase keeps no card. The game and the central service never keep it.
• Backups (Google Drive): the server's daily backup is uploaded encrypted.
• The connection (Tailscale): the connection between the game and the server passes through this service's tunnel; it sees your network address too.
• Fault alerts to the administrator (Telegram): on a connection fault the alert names your account by a pseudonym that does not show who you are; your username is not sent.

Beyond these your data is shared with no one.

What other players see

The names of your characters can be seen by other players: a character who goes to a neighbouring world is seen there by name. Your email address and your network address are shown to no player.

How long it is kept

• Your account and your world: until you delete them.
• A session: 30 days.
• Problem reports: 30 days.
• Backups on the server: 3 days.
• Encrypted backups outside the server: 14 days.
• The network address in failed sign-in records and in "I cannot get into my account" requests: 30 days.
• These records themselves and the account log: no deletion time is set for these; when you delete your account, your lines in the log stop showing you.

If you delete your account

The request waits 24 hours. Then your account, your sessions, your email address, your problem reports, your settings, your world and its memories are deleted. The archives of finished worlds are encrypted with a key of your account alone; the key is destroyed, so they can no longer be read. Deleted data also drops out of the backups when the times above run out.

One thing stays: the lines of your account remain in the account log, but without showing you. Your username, your password digest and your encrypted email address are removed from these lines; what is left is the time and the kind of each line and a pseudonym bound to nothing.

Your rights

• To see and correct your data: you can change your email address and your password from the Account section of the Settings.
• To delete it: you can delete your account from the same place.

What is kept on your computer

In its own folder the game keeps your settings, the device number, your session if you chose "Remember me", the encyclopedia and your finished worlds so they can be read without a connection, and the records of the last run. They go when you remove the game and delete its folder.

Age

Cogito is for people over 18. An account found to belong to someone younger is deleted.

If this text changes

If the notice changes, the version date above changes. The current text is always in the About section of the Settings.