Last updated 2026-09-27.
In short: no ads, no trackers, no selling your data, and no third-party scripts. The website counts visits without cookies. The game keeps your worlds and settings on your own device, and sends us crash reports so we can fix problems. If you make an account, we keep what it needs to work. You can ask us about, correct or delete your data at any time.
Who we are
Mantlenaut and mantlenaut.com are run by the game's developer in the United Kingdom, who is the controller of your personal data under UK data protection law. You can reach us through the contact page.
What we collect, why, and for how long
| What | Why | Kept |
|---|---|---|
| Visits to this website: the page you opened, the website that sent you (its name only), a campaign name if the link had one, and the kind of device, browser, system and language you use. Your address and browser are turned into a code that changes every day and is never stored, so we can count how many different people visited that day, but we can't follow you from one day to the next or work out who you are. | To know how many people visit and what they read. Legitimate interests. | 400 days |
| Messages you send us from the contact page: your name and email if you give them, your message, your connection's address and your browser. | To answer you, act on reports and stop spam. Legitimate interests. | Until dealt with, and at most 2 years |
| Crash and error reports from the game: what went wrong, the game's version, your graphics chip, browser, screen size and settings, a random number for that play session, and your connection's address. | To find and fix problems, and to spot devices the game struggles on. Legitimate interests. | Normally deleted within 90 days |
| Play activity while the game is open: a random device number made by the game and kept in your browser, the game version, graphics settings and frame rate, the kind of device, the mode you play in, and roughly how long you play. | To see how many people are playing and whether the game runs well for them. Legitimate interests. | 400 days after you last played |
| Alpha testers: a sign-in cookie, and your connection's address and browser when you sign in. | To let testers in and keep the alpha secure. Legitimate interests. | Sign-ins 30 days; security records 90 days |
| Player accounts (when you make one): your player name, a scrambled copy of your password, your birth year (to check you are 13 or over), and your email, country and "about me" if you add them; the addresses you sign in from; your sessions; any warnings or actions taken on your account; store credit; and worlds you keep in the cloud. | To run your account and keep it and other players safe. Contract, and legitimate interests. | Until you delete your account; sign-in addresses 180 days |
| Online play: game messages passed between you and your friends through our relay. | To let you play together. Contract. | Not kept: passed on and forgotten |
"Legitimate interests" means we use the data in ways you would reasonably expect, to run and improve the game and keep it safe, where that doesn't override your own interests. You can object at any time: see your rights.
Cookies and storage on your device
This website sets no cookies when you read it, and uses no advertising or tracking cookies anywhere. The only cookies are sign-in cookies, set when you sign in:
| Name | What for | Lasts |
|---|---|---|
| __Host-mn_alpha | Keeps an alpha tester signed in | 30 days |
| __Host-mn_player | Keeps you signed in to your player account | 30 days |
| __Host-mn_admin, __Host-mn_form | Our own team's sign-in, and protecting sign-in forms from forgery | 12 hours at most |
The game keeps your worlds, settings and a random device number in your browser's storage on your device. Worlds and settings are needed for the game to work; the device number lets the game tell us it is being played (see "Play activity" above). You can clear them at any time in your browser's settings, but clearing them deletes the worlds kept there, so export any you want to keep first.
Who sees it
We don't sell or rent your data, and we don't share it with advertisers. It is kept on our own server, hosted by one.com. We only share personal data when the law requires it, for example with the police, or to protect someone from harm. Fonts and pictures on this site come from our own server, so nothing about your visit goes to anyone else. If we ever move data outside the UK, we will make sure it is protected as the law requires.
Children
Player accounts are only for people aged 13 and over. Younger players can play without an account: their worlds and settings stay on their own device, and the only things we receive are the anonymous visit counts, play activity and crash reports described above. The game has no open chat, and online play is only with people who have your join code. Parents or guardians can contact us about anything at any time.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, to object to how we use it, or to have it in a form you can take elsewhere. Just contact us; we will reply within a month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, but please talk to us first so we can try to put it right.
Keeping it safe
Everything travels over an encrypted connection. Passwords are stored only as strong one-way scrambles, and sign-in tokens and recovery codes only as fingerprints, so even we can't read them. Sign-ins are limited to stop guessing, and only our own team can reach the data.
If this notice changes, we will update the date at the top, and tell players in the game about anything important.