Privacy & Terms
Privacy policyTerms of playContact
In short: you can play as a guest without giving us a name or email. We still process the technical and gameplay data described below (for example a random code from your browser and which story steps you reach). If you create an account we keep your username, email, a salted hash of your password (not the password itself) and your game progress so you can continue on other devices. We ask you to confirm you are 18 or over and don’t store your date of birth. We don’t sell your data, and the game currently shows no paid ads.
Privacy policy
This policy explains what Chronicles of the Past (“the game”, “we”) collects, why, and your rights under the Nigeria Data Protection Act 2023 and similar laws. The game is operated by Helixus Ltd.
What we collect
| Data | When | Why |
|---|---|---|
| Username, email address | When you create an account | To sign you in, show your name to other players and on the leaderboard, and (if switched on) send account emails such as password resets. |
| Password | Account | Your password is sent to our server over an encrypted connection so it can be checked. We store a salted password hash (PBKDF2), not your plaintext password, and we never log it. |
| Date of birth | Sign-up | We ask for it to confirm you are 18 or over. We store only the time you confirmed, not the date of birth. |
| Game progress and scores | Accounts | To keep your progress across devices and show the leaderboard. |
| Country and device type | All players, including guests | Once a day, the country you are connecting from (worked out by Cloudflare from your connection) and whether you use a phone, tablet or computer and which operating system, linked to the same random browser code. For accounts we also note the country you signed up from and last played from. We use this only to see where players come from and which devices to support. We do not store your internet address. Kept for up to 2 years. |
| Progress events | All players, including guests | A random code stored in your browser, plus which story steps you reached and when, so we can see where players get stuck. These rows contain no name, email or account ID. Because the code stays the same on that browser, events from one browser can be grouped together. Kept for up to 2 years. The “explorers” counts shown in the game count these browser codes, so they are approximate. |
| Reports | If you report a player | The reported name, reason, your note, and your username (or “guest”), so our team can review it. Closed reports are deleted after 12 months. If an account is deleted, its name is removed from reports. |
| Live position and chat | While you play online | Passed live to other players in the game world. Your latest position is held in memory while you are connected. We do not keep a chat-history or movement database. Our hosting provider may keep short-lived technical logs. |
| IP address | Sign-in, sign-up, password reset and report attempts | Used, on its own or together with the account name you typed, to limit repeated attempts (8 per 15 minutes). These records are deleted by a daily clean-up once the 15-minute limit ends, so they are kept for at most about a day. Our hosting provider also processes IP addresses to deliver the website. |
| Device storage | All players | Your browser stores your save, settings and sign-in so the game works offline and remembers you. This is not used for advertising. |
Who helps us run the game
- Cloudflare hosts the website and stores account data and saves.
- Resend sends account emails, if email is switched on.
- Google Fonts and jsDelivr deliver fonts and the 3D graphics library. They receive your IP address when your browser downloads these files.
- Account emails (such as password resets) are only sent if email is switched on for the game; if it is not, Resend receives nothing.
Some of these providers may process data outside Nigeria. We choose providers that publish data-protection commitments for their services.
How long we keep it
Account data and saves are kept until you delete your account or ask us to. Expired sign-ins and password-reset links are deleted daily. Progress events are kept for up to 2 years. Closed reports are kept for 12 months. Ratings and comments you send with the in-game feedback form (with an anonymous ID, the place in the game and your device type) are kept for 12 months. Our admin activity log is kept for 2 years and never keeps the name or email of a deleted account.
Your rights
You can ask to see, correct, export or delete your data, or object to how we use it, by contacting us (below). You can delete your account yourself from the title screen (“Delete account”, under your name). Deleting your account removes your username, email, password hash, online save and leaderboard score, and replaces your name with “deleted account” in reports and our admin log. Progress events are not linked to accounts, so they are not affected. You can also complain to the Nigeria Data Protection Commission (NDPC).
Age
Online play (accounts, live rooms, chat and the leaderboard) is for adults aged 18 and over. Players under 18 can play in Young Explorer mode: the game and its saves stay on their own device, and the game sends us nothing about them (no account, no visit counts, no progress events, no messages). Nothing is sent to our server before a player has answered the age question. If you believe someone under 18 has created an account, contact us and we will delete it.
Terms of play
- Age. You must be 18 or older to create an account or play online. Players under 18 can play offline in Young Explorer mode.
- Be respectful. No offensive usernames, hateful or bullying messages, harassment, cheating, or impersonating others. We may remove names, hide scores, suspend or delete accounts that break these rules.
- History and fiction. The game is a fictional story inspired by real history and set in places inspired by Nigeria, starting with a compressed map inspired by Lagos Island and your family’s hometown. History cards show their sources and are labelled Documented or Tradition. The characters, their families, conversations, shops, prices and the main plot are fiction, and scenes such as Eyo day are reconstructions. Language and cultural details are still being reviewed. We work to be accurate; if you spot a mistake, tell us.
- Your account. Keep your password private. You are responsible for activity on your account.
- The game. The game is provided as it is, and may change, pause or have errors. In-game money, items and scores have no real-world value.
- Our content. The game, its art, music, code and text belong to us or our licensors. Please don’t copy or redistribute them.
- Law. These terms are governed by the laws of the Federal Republic of Nigeria.
Contact
Questions, data requests or reports: helixus@sautive.com