Privacy

The short version

No cookies, no ads, no trackers

Ambryx Obscura sets no cookies at all. There is no advertising, no third-party analytics script, no social pixel, and nothing that follows you to other websites. We do not sell or share your data, and we never will.

You can play the whole game without an account. In guest mode your warbands, talents and match record live only in your own browser. The single thing that leaves your device is an anonymous record of how the game is used — that it was opened, that an opponent was sought, and how matches went — used to balance the cards and to see whether anyone is waiting alone. You can switch that off.

If you create an account, we store the least we can: who you are with our sign-in provider, your decks, your talent choices and your match record, so they follow you between devices.

Playing as a guest

What stays in your browser

The game keeps its state in your browser's local storage. This is not a cookie: it is never sent to a server automatically, and no other website can read it. It holds your warbands and deck slots, your talent choices, your active deck, your Ledger of past duels, your audio and animation-speed preferences, whether you have played before, and a reconnect token so a dropped online duel can be resumed.

Clearing your browser's site data for this domain erases all of it, permanently, and no copy remains anywhere unless you have signed in.

The balance record

What we learn from your play

A card game cannot be balanced blind. At three moments — when you open the game, when you look for an opponent, and when a duel ends — the game sends a small anonymous record to our match server. Those records contain exactly this and nothing else:

When you open the game:

• that someone opened it, once per browsing session — not once per page you load;
• roughly how many duels you have played before, as a broad band (none, 1–2, 3–9, 10–49, 50 or more) and never as an exact number.

When you look for an opponent:

• which character you were waiting with, and the warband's name;
• how it ended — you were paired, nobody came, you stepped out, or the connection failed — and how many seconds you waited;
• a random identifier joining those two, and nothing more.

When a duel ends:

• whether the duel was against the computer or another player;
• which character you played, and which you faced;
• whether you won, lost or drew, and how many turns it took;
• the warband you brought — its name and its list of cards;
• the talents you chose, and the cards you actually played;
• a random identifier for that single match.

Each record carries a random identifier for your browser, so we can tell one player's hundred duels from a hundred players' one duel. It is a random number. It is not derived from you, it is not linked to any name or address, it is not shared with anyone, and clearing your site data replaces it with a new one.

Your IP address is never stored with these records. Our server sees it while the request is in flight — every server does — and uses it only, in memory, to stop one machine flooding the service.

You can turn this off. Open the game, and in the account panel on the start screen use Balance record to opt out. When you do, the game stops recording, discards anything still waiting to be sent, and forgets the random identifier.

With an account

What we store when you sign in

Accounts are optional and exist for one reason: so your warbands survive a new device. You can sign in with Discord, with Google, or with an email address and password.

Sign-in is handled by Supabase, which stores an account identifier, your email address, a display name and an avatar image address taken from the provider you chose, and the times you signed in. We never see or handle your password — that is Supabase's to hold, and for Discord and Google we never receive one at all.

Alongside that we store your deck slots (their names and card lists), your talent choices, your active warband, and your Ledger — the count of duels played and won that the start screen shows you. Nothing else. We do not ask for your real name, your address, your age, or your payment details, because we have no use for them.

Duels and letters

Playing others, and writing to us

During an online duel our match server holds the state of your match in memory so it can referee it. When the duel ends and the room closes, that state is gone. There is no chat with strangers in Ambryx Obscura — opponents can only send a small set of fixed, pre-written seals, and you can mute those entirely.

If you write to us with the feedback quill inside the game, your message is delivered to our team through Discord, together with the page you were on, the version you were running, and your anonymous identifier so we can make sense of the report. Please don't put anything private in that box — write only what you want us to read.

The others in the room

Who else your data passes

We run on other people's machines, and honesty requires naming them:

• Vercel — serves this website and the game to your browser.
• Railway — runs the match server that referees online duels and receives the balance records.
• Supabase — holds accounts and saved warbands. Our project is hosted in the EU.
• Sentry — receives automatic crash reports when the game breaks, configured never to attach personal details.
• Discord — only if you sign in with Discord, or when you send feedback, or when you follow us to our server.

Each of these has its own privacy policy governing what it does as our supplier. We add no one else, and we send them nothing beyond what is described on this page.

Yours to take back

Your rights, and how to use them

If you are in the EU or the UK, the law gives you the right to see what we hold about you, to correct it, to have it deleted, to take a copy elsewhere, and to object to what we do with it. We honour those rights for everyone, wherever you live.

Some of it you can exercise yourself, right now: playing as a guest and clearing your site data erases everything; opting out of the balance record stops it at the source; and signing out ends the session on that device.

For anything that touches an account — a copy of your data, or deleting your account and everything attached to it — write to us and we will do it. We are a very small team, so please allow us a few days.

Contact: our Discord server reaches us fastest. [SET BEFORE LAUNCH: a privacy contact address for people who will not use Discord — this line must not ship as-is.]

Two last things

Age, and changes to this page

You must be at least 13 years old to create an account. Younger than that, the Glade is still open to you as a guest — no account, no sign-in, nothing stored anywhere but your own browser.

The game is in open beta and changes weekly. If what we store changes, this page changes with it, and the date below moves. We will not quietly start collecting something that is not written here.

Last updated 24 July 2026 · See also the Terms of Use.