What the game keeps about you

Graveacre asks for no email and no real name: a survivor name is all you need to play. Here is everything the game keeps, why, and for how long.

On the server

• Your account: your survivor name, your game (levels, bag, refuge…), the dates you arrived and last visited, and your device’s time offset, so that night in the game is your night. Your password, if you set one, is never kept as is: only a salted hash, which cannot be turned back into the password.
• What other players see: your survivor name, your levels, your gear, your companions, your achievements, what your survivor is doing and the date you arrived (leaderboards and public profile), as well as your market listings.
• The market and the mail: your listings, the trade history (without names, for the prices), parcels and their short note, the operator’s answers to your messages.
• Notifications, if you turn them on: the subscription address your browser provides, and the language of the messages. They go through your browser’s notification service (Google, Mozilla, Apple or Microsoft).
• Your “Send feedback” messages: the text, its date, your survivor name and, to understand a bug, the state of your game at that moment, the screen you were on, your screen size, your browser and the game’s version. They are read by the game’s developer, who can answer in writing (the answer is kept with your message and reaches you by mail); a copy goes to the game’s Discord (below).
• Your IP address is not stored: it is used, for the length of a request, to slow down abuse (too many login attempts, too many accounts created). To count the accounts created from one connection, only a hash of the address is kept, deleted after two days. The country Cloudflare infers from it picks your survivor’s identity card, on their sheet; it isn’t stored either.

In your browser

• Your browser’s local storage keeps your session key (to stay logged in), your language, the look you chose (classic or pixel), whether the radio speaker is on, whether you closed the invitation to turn on notifications, when you closed the one to install the game, when you went through or skipped the refuge tour, when you closed the notice that the horde went by, whether you saw the game’s small aids (the dot on “…”, the tip about the notebook’s plan), the sort and the filters you chose in the bag and at the market, the tier you chose in the recipes, the notebook page you last opened, the last message from Madame Irma you read on the Minitel, whether bone meal is ticked for sowing, your Google Ads measurement choice and, for the “Newest first” sort, the quantity of each stack in the bag and when it grew. For as long as a tab stays open, it also keeps the version of the game the page reloaded for after an update and, during that reload, what your session brought in (“Since you got here,” the XP per hour, and the summary of your absence if it was open), picked up within two minutes. None of this is sent to the server. The game itself sets no cookies.
• If you turn notifications on, a small script of the game (a service worker) stays installed to receive them.

At Cloudflare

• The game is hosted by Cloudflare: the servers and the database. Its technical logs (requests, errors) are kept for a few days, for troubleshooting.
• When you sign up and log in, a bot check by Cloudflare (Turnstile) may run in your browser: Cloudflare then receives technical information about your browser and your IP address, under its privacy policy.
• Cloudflare Web Analytics measures visits, pages viewed, traffic sources and site performance, without cookies or cross-site tracking. The game sends it no survivor name, save data or session key. Statistics are available for six months. The administration page and local development are excluded.
• The game displays no ads. Fonts and icons are served by the game itself.

At Google

• The Google Ads tag helps measure visits and advertising campaign results. It loads on the site’s pages and in the game, but all four of its consent types are denied by default: until you agree, it sets and reads no cookies, and Google only receives cookieless signals (the time of the visit, your browser, the page you visit and the one you came from, and your IP address, as with any web page), which it uses to estimate campaign results as a whole. If you allow measurement, Google may also set and read advertising cookies and receive an ad click identifier. The game sends it no survivor name, save data or session key. See Google’s privacy policy.
• You can change your choice at any time. Choose Google Ads measurement

On Discord

• A copy of every “Send feedback” message goes to a private channel of the game’s Discord, read by the team only: the text, its type, the language, your survivor name, the screen, the game’s version and the kind of device (touch or not, installed or not). Never your game or your player ID. Discord (Discord Inc., in the United States) keeps it under its privacy policy, until the team deletes it.
• An idea you choose to share (the checkbox under your message) is also posted in the public ideas forum, with your survivor name, as you wrote it: anyone can read it. To take it down, tell the team through “Send feedback”.
• A message you write on the game’s Discord that waits for an answer from the team may be noted in the game’s admin page, for the time it takes to answer: your Discord name, the text, its link and its date. It is deleted 30 days after the answer, or after 60 days.

On Ko-fi

• “Support the game” is a plain link to the game’s page on Ko-fi: the game sends it nothing, neither your game nor your survivor name. If you donate, Ko-fi (Ko-Fi Labs Limited, in the United Kingdom) and your payment method (PayPal or Stripe) handle your data under their own rules; see Ko-fi’s privacy policy.
• A donation gives nothing in the game. The developer sees what Ko-fi shows them of your donation; the game itself keeps no trace of it.

For how long

• An account without a password that stayed in the first levels (total level 25 at most), with no open market listing and no visit for 30 days, is deleted along with everything that goes with it.
• A session expires after a year; logging out deletes yours.
• Collected mail and closed listings are deleted after 30 days, the trade history after 120 days, “Send feedback” messages and their answer after a year.
• Everything else lasts as long as the account does.

Your rights

• You can ask to see what the game keeps about you, have it corrected, or have it all deleted: write it from the game, with “Send feedback” in the menu. An account whose deletion is requested is gone within 30 days, along with everything that goes with it.
• The game’s settings also let you add or change your password, and turn notifications off.
• If you think your data is mishandled, you can contact the French data protection authority, the CNIL (cnil.fr).

Updated October 9, 2026.