Who this policy covers
This policy applies to the Project Afterlight mobile game, the website at projectafterlight.fun, and the game's account and cloud services. Project Afterlight is developed and operated by michealjwm.
Information we collect
Depending on the features you use, the service may process:
- Account information, such as a username and authentication credentials. Passwords are stored as secure hashes, not readable text.
- Game information, including cloud saves, progression, inventory, gold, owned settlers, quests, and settings.
- Social and service information, such as friends, clan activity, market listings, trades, and support messages.
- Security and diagnostic information, such as connection address, request time, game build, and errors needed to prevent abuse and keep the service working.
- If purchases are enabled, store transaction identifiers and entitlement status. Project Afterlight does not receive or store complete payment-card details.
How information is used
Data is used to provide accounts and cloud saves, restore progress across devices, operate social and market features, deliver purchases, answer support requests, prevent cheating or fraud, protect the service, diagnose problems, and meet legal obligations.
Sharing and service providers
Project Afterlight does not sell player personal information. Limited information may be processed by hosting, database, platform, payment, crash-reporting, or security providers only as needed to operate the service. Google Play and Apple process store accounts and payments under their own privacy policies.
Storage and security
Online data is designed to be sent over encrypted HTTPS connections and stored in a protected hosted database. Game clients never receive direct database access. A small local save and rotating recovery copies may remain on a player's device for offline play. No system can guarantee absolute security, but access controls, session tokens, request limits, backups, and server-side validation are used to reduce risk.
Retention and deletion
Account data is kept while the account is active or as needed to provide the service. When a verified deletion request is completed, the account and associated player data are deleted or anonymized, except limited records that must be retained for fraud prevention, transaction reconciliation, security, or legal obligations. Residual backup copies may remain for a limited operational period before they expire.
See the account deletion page for the current request process.
Children
The online account service is not intended to knowingly collect personal information from children below the minimum age required in their country without appropriate parental permission. If such information is identified, a parent or guardian may request deletion.
Changes and contact
This policy may be updated as features and service providers change. The effective date will be revised when material changes are published. For privacy questions, use Account → Support inside Project Afterlight. Account deletion is also available through the secure web form on this site.