Privacy
Last updated 19 October 2026 · applies to Drakeborne: the website, the marketplace and the game at https://drakeborne.com
Drakeborne is a free online game run by the team behind Drakeborne (“we”, “us”). This page explains what we collect when you visit or play, why, where it is kept, how long we keep it, and what you can do about it. We don’t sell your data, we don’t show ads, and we don’t use tracking or advertising cookies.
Where your data is kept
- On our game server (hosted by Railway): your saved character (level, XP, gold, items, tools and quest progress), so you can carry on from any device once you sign in, plus what other players need to see or what must not be faked, such as kingdoms and buildings, items and dragons owned by wallets, purchases, the weekly boards, market listings and the other records in the table below. It is kept on a private disk that only the game server can reach, with daily backups kept for 14 days.
- On your own device (your browser’s local storage): a copy of your character for when you’re offline, your settings, and your sign-in. Guests are recognised by a random id kept here, so a guest’s character can only be continued in the same browser; sign in with Google or a wallet to play anywhere.
- On the Solana blockchain: your wallet address and any purchase transaction, which are public and permanent by design.
What we collect, and why
| What | Why | How long |
|---|---|---|
| Your character as others see it: the name you choose, your look and level, and your kingdom, troops and buildings | To run the game and show you to other players | Your name, look and level only while you are online. Kingdoms whose ruler hasn’t played for 30 days are removed. |
| Your saved character: level, XP, gold, items, tools, quest progress and game stats | So you can continue on any device, and to keep the game fair: saves that show impossible progress are flagged and may be corrected | Wallet players: while the account is active. Guests: deleted 90 days after they last played. |
| Chat messages | Sent to the players around you, or to your kingdom and its allies if you choose. They are not private. | The server keeps your last 10 messages in memory only while you are online, so a report can include them, and the last 40 kingdom chat lines in memory so members who arrive can catch up (gone when the server restarts). If someone reports you, your messages are saved with the report. |
| Market listings: your name, what you sell and for how much | So other players can buy it, and the gold reaches you even when you are offline | Until it sells, you take it back, or 3 days pass. Sale prices (without names) are kept to show typical prices. |
| Anonymous play statistics: which days a player played, how long sessions last, and which beginner steps they reached | So we can see whether new players enjoy the game and where they get stuck | 90 days. Players are counted by a scrambled one-way code, never by name, wallet, guest id or internet address, and nothing is shared with anyone. We use no analytics companies. |
| A random guest id, stored in your browser | So your kingdom and progress stay yours without an account | Until you clear your browser data, or it is moved to your wallet when you sign in |
| Your wallet’s public address, if you sign in with one (Phantom, Solflare or Backpack), in the game or on the website’s marketplace | To prove the wallet is yours, keep your rating and weekly scores, record items and dragons you own, and send prizes | While the account is active. Wallet addresses and transactions are public on the Solana blockchain anyway. |
| Your Google account number, scrambled, if you sign in with Google | So your character is yours on any device. Google tells us your account number, name and email when you sign in; we keep only a one-way scrambled version of the number, and never your email. Your Google first name is offered as your game name, and you can change it. | While the account is active |
| A sign-in token, after you sign in with a wallet or Google | So you don’t have to sign again on every visit. It is shared by the game and the website on the same device. | 30 days, or until you sign out |
| Purchase records: which item, which transaction | To check payments on the blockchain and give you what you paid for | For as long as the game runs (needed to prove ownership) |
| Your internet (IP) address | To limit connections, stop one person from making many accounts to cheat invites or kingdoms, and enforce bans | Mostly kept only while you are connected. Saved longer with your progress record (to check invites), in moderation reports and in bans. |
| Alert subscriptions, if you turn alerts on: an address your browser’s push service gives us, your time zone, and which alerts you want | To send the alerts you chose, never between 23:00 and 08:00 your time | Until you turn alerts off, or the push service tells us the subscription has ended |
| Reports you send about other players | So moderators can act | The latest 500 reports |
Your browser also stores your saved game, settings, sound and voice volume, muted players and similar preferences on your own device (local storage). Clearing your browser data removes them. The characters’ voices are recordings that play on your device; we never use your microphone or camera.
Who else is involved
- Our hosting provider (Railway) runs the game server and stores its data.
- The Solana network and the service we use to read it see the wallet address and transaction when you buy something. Blockchain records are public and permanent.
- Your wallet app handles signing. We never see or store your private keys or recovery phrase, and we will never ask for them.
- Google, if you choose Sign in with Google: Google shows its own sign-in window, under Google’s privacy policy, and tells us who signed in. We don’t get your password or access to anything else in your Google account.
- Your browser’s push service (for example Google, Apple or Mozilla) delivers alerts if you turn them on.
- Google Fonts provides the game’s fonts, and jsDelivr provides the wallet code used when you buy something. Like any website, they see your IP address when your browser loads from them.
- When you share a photo to X, it goes through your own X app or account, under X’s terms.
We share data with others only as needed to run the game, or if the law requires it.
Why we’re allowed to use it
We use your data to provide the game you asked to play (our contract with you), to keep it fair and safe for everyone (our legitimate interest in stopping cheating and abuse), and where the law requires it. Alerts are sent only if you turn them on (your consent, which you can withdraw at any time).
Your choices and rights
- You can play as a guest without a wallet.
- You can turn alerts off at any time (Journal → Alerts).
- You can sign out of your wallet in Settings.
- Depending on where you live (for example under the GDPR in Europe and the UK, or US state privacy laws), you can ask us for a copy of the data we hold about you, to correct it, to delete it, or to stop or limit how we use it. Contact us at the contact address on our official channels with your wallet address or in-game name. We answer within 30 days. Some records (purchases, blockchain transactions) may have to be kept to prove what you own, and we can’t change the blockchain.
- If you think we’ve handled your data wrongly, you can also complain to your local data protection authority.
The game server is hosted by Railway. If you play from another country, your data may travel to the country where the server runs, protected by the measures below.
Children
Drakeborne is not meant for children under 13. Prizes are only for adults (see the prize rules). If you believe a child under 13 has given us personal data, contact us and we will delete it.
Security
- Everything between your browser and the game is encrypted (HTTPS), and browsers are told to always use it.
- Wallet sign-in uses a one-time message you sign. It is not a transaction and gives us no control over your wallet. Purchases are always approved by you, in your wallet.
- The server checks every payment on the blockchain itself before handing anything over, and decides the prize boards itself (duel results and damage to the world boss) rather than trusting the browser.
- The pages only load code from us and a short list of trusted services, can’t be embedded by other websites to trick you into clicking, and other websites can’t open game connections in your name.
- Staff tools need a secret key, and repeated wrong attempts are locked out.
No system is perfectly secure. Never share your wallet’s recovery phrase with anyone: we will never ask for it. If we learn of a breach that puts your data at risk, we will tell affected players and the authorities as the law requires. To report a security problem, contact the contact address on our official channels.
Changes and contact
If we change this page, we will update the date at the top, and tell players in the game for important changes. Questions: the contact address on our official channels.
← Back to Drakeborne · Terms of service