Last updated: October 14, 2026
EmberForge is a non-commercial, community-run project based in Yellowknife, Canada. We collect only what we need to run your account and the game, we never sell your data, and we don't run advertising trackers.
What we collect
Your account
- Your email address, display name and a securely hashed password (if you use email sign-in).
- If you sign in with Discord: your Discord user ID, username and avatar.
- If you sign in with Google: your Google account ID, email address and whether it's verified.
- If you turn on two-factor authentication: an encrypted authenticator secret and hashed recovery codes.
Playing the game
- Your characters, progression, inventory and in-game transactions.
- Server logs of in-game activity used for anti-cheat (Aurora Borealis), fair-play enforcement and troubleshooting.
- Session information such as sign-in times and a device label, so you can see and end active sessions.
The website
- If you join the waitlist: your email address, your preferred region and when you confirmed.
- If you contact us: your name, email address and message.
- Security information: we store a one-way hash of your IP address for rate limiting and abuse prevention, not the address itself.
Optional contributions
If you choose to contribute, payments are handled by our payment processor (Stripe). We receive confirmation of the payment and which cosmetic it unlocks — we never see or store your card details.
Why we use it
- To create and secure your account, and sign you in to the website, launcher, game and Discord with one identity.
- To run the game and keep your progress.
- To keep the game fair and the community safe.
- To email you when you've asked us to (waitlist), or to reply when you've contacted us.
- To deliver cosmetics you've unlocked.
Cookies
We use only the cookies needed to keep you signed in and to protect sign-in. We don't use advertising or cross-site tracking cookies.
Who we share it with
We don't sell or rent your data. We share it only with services that help us run EmberForge — our hosting provider, Discord and Google (when you choose to sign in with them), and our payment processor — or when the law requires it.
How long we keep it
- Account data: while your account is open. When you close it we delete or anonymise it within 30 days, except where we must keep records for fair-play enforcement or legal reasons.
- Fair-play logs: as long as needed to enforce the rules and handle appeals.
- Waitlist: until you unsubscribe or we launch in your region and no longer need it.
- Contact messages: up to two years.
Your choices and rights
You can view and update your account details on your account page, unlink sign-in providers, turn two-factor on or off, and end sessions. You can ask us for a copy of your data, or to correct or delete it, through support. Depending on where you live (for example under Canada's PIPEDA or the EU/UK GDPR), you may also have the right to object or complain to your data-protection authority.
Children
EmberForge is not intended for children under 13 (or the minimum age of digital consent where you live). If you believe a child has created an account, contact us and we'll remove it.
Security
Passwords are hashed, authenticator secrets are encrypted, and the game and website communicate over encrypted connections with signed tokens. No system is perfect — turning on two-factor authentication is the best thing you can do to protect your account.
Changes and contact
We'll post any changes here with a new date. Questions or requests: contact us through support.