Privacy Policy

LoongClan (龙族) builds offline-first cultural games and apps. Our architecture is designed so that we cannot collect what we never receive. This page explains exactly what happens to your data.

1. Your passphrase never leaves your device

Your 3-part passphrase (part1.part2.part3) is your identity across all LoongClan apps. It is processed entirely in your browser. We derive two hashes locally with SHA-256:

• UserHash — a 64-character public identifier used for leaderboards;
• SyncToken — a 64-character private credential used to authenticate sync requests.

Only these hashes are ever sent to our API. The plaintext passphrase is never transmitted, never logged, and never stored on our servers. Requests containing a raw passphrase are rejected server-side with plaintext_kouling_rejected.

2. What we store

When you explicitly choose to upload a backup, we store:

• the application id (appId) and your UserHash;
• your SyncToken hash (to verify future requests are really you);
• the nickname you typed (displayed on leaderboards);
• the snapshot payload you uploaded, stored verbatim as an opaque blob;
• a version number and timestamps.

We do not interpret the contents of your payload. We do not store IP addresses in our database (rate limiting keys are aggregated counters, pruned daily).

3. What we do not do

• No accounts, no email, no phone number, no password.
• No third-party analytics, advertising, or tracking scripts.
• No cookies for tracking. Language preference is kept in your browser's localStorage.
• No selling or sharing of data with third parties.

4. Your rights: export and erasure

Your local device is the source of truth. At any time you can:

• Export — retrieve a full JSON copy of your cloud snapshot;
• Purge — permanently delete your cloud snapshot and leaderboard entries. This is immediate and irreversible.

Locally, clearing your browser storage removes everything on your device. Because your passphrase is the only key, losing it means the data cannot be recovered — please back it up safely.

5. Leaderboards are public

If you submit a score, your nickname and UserHash become publicly visible on that leaderboard. Your SyncToken is never exposed. Do not use personal information as your nickname.

6. Security

All traffic is served over HTTPS/TLS. Server-side we enforce rate limiting, request validation and constant-time credential comparison. However, no system is perfectly secure; use a passphrase you do not reuse elsewhere.

7. Children

Our apps are family-friendly and collect no personal information from anyone, including children.

8. Changes

If this policy changes, the "Last updated" date above will change. Material changes will be noted on the home page.

9. Contact

Questions about privacy: open an issue at github.com/allen2life/loongclan.