Privacy Policy

Welcome to Fractara ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you play our game.

We collect the following types of information:

• Account Information: Email address, username, authentication data through Clerk, and profile information provided by your chosen sign-in service
• Game Data: Your in-game progress, inventory, buildings, friends, and interactions
• Location Data: Precise location used with your permission for GPS relocation, and coarse location observations linked to your account for travel review
• Device Information: Browser type, device type, IP address, a random identifier created for each browser or app install, and a push notification token if you allow notifications in the iOS or Android app
• Usage Data: How you interact with the game, session duration, and features used
• Community Safety Data: Chat messages, player reports, blocks, and moderation actions
• Diagnostics: Crash reports, performance measurements, and technical logs that may be linked to your account to investigate problems
• Purchase History: When purchases are available, product and transaction identifiers, purchase status, and fulfillment or refund records. Payment card details are handled by the payment provider rather than our game.

We use your information to:

• Provide and maintain the game experience
• Authenticate your account and prevent fraud
• Enable location-based gameplay features
• Communicate with you about updates and changes
• Improve and optimize the game
• Ensure fair play and enforce our terms of service

Fractara uses precise location with your permission for GPS relocation and nearby gameplay. After the in-game location explanation, occasional foreground checks help operators review suspicious travel. These checks do not block otherwise valid actions. Review observations are rounded to approximately 100 metres and linked to your account; they are not anonymous. We do not collect location while the game is in the background. You can revoke permission in your device or browser settings. Missing checks do not count as evidence of cheating. GPS relocation itself still requires location and follows the game's normal travel rules.

Players may run more than one account. To spot accounts that one person uses to gain an unfair advantage, such as feeding a main account or farming rewards, we record keyed hashes of the IP address, the install identifier, and a simplified form of the email address that each account signs in with, by day. We do not store those raw values for this purpose. Operators can see which accounts share a hash and what gold, trades, and kills passed between them. Sharing a network or a device is not by itself treated as cheating.

Chat can be translated into your language. Unless you change the setting, messages are translated automatically; you can switch to translating only the messages you choose, or turn translation off, in Settings. To translate a message, we send its text and the target language to OpenAI, which provides the translation for us. Your setting controls only what you read: other players' settings decide whether messages you write, including private messages, are translated for them. We do not send your account details with the request, but names or anything else written in the message are part of its text. We turn off OpenAI's optional storage of these requests; under its API terms, OpenAI does not use them to train its models and may keep them for a limited time to detect abuse. We keep each translation with the original message.

One encounter, the Doppelganger, can use the same service to write the lines the monster says during a fight. For those lines we send fight details, including the names of the characters involved, the weapon type, health percentages, and the monster's recent lines. We do not send chat messages or account details for this.

If you allow notifications in the iOS or Android app, we store your device's push token, the notification types you have turned on, and the sign-in session it belongs to. Notification text, such as an invite and the name of the player who sent it, is delivered through Apple Push Notification service or Firebase Cloud Messaging. If you turn notifications off, we stop sending them right away. We remove the token itself within about an hour after you sign out or your session ends, after 90 days without an update from the app, or when you delete your account.

We do not sell your personal data. We may share information with:

• Service Providers: Third parties that help us operate the game (hosting, authentication, crash diagnostics, chat translation, push notification delivery, and payment processing)
• Other Players: Your username and in-game actions are visible to other players
• Legal Requirements: When required by law or to protect our rights

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

Coarse travel-check observations are scheduled for deletion after 30 days. Current trace locations and expired challenges are scheduled for cleanup after 24 hours. GPS relocation audit events and fair play identity signals have a 90-day retention period. Cleanup is scheduled periodically in bounded batches.

We retain your personal data for as long as your account is active or as needed to provide you with services. You can delete your account from Settings inside the Game.

You can also request account and associated personal-data deletion without opening the game. Follow the email request instructions on our account deletion support page.

Account deletion removes your sign-in and personal identifiers, revokes every session, and permanently deactivates your characters. We may retain anonymized or de-identified gameplay, safety, and transaction records when necessary for service integrity, financial reconciliation, fraud prevention, safety enforcement, or legal compliance. Those retained records are no longer connected to an active account.

Chat messages you posted, and their translations, stay in the conversations where you posted them, under the name you used at the time. They are not removed when you delete your account. Reported messages may be kept for moderation.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

Fractara is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

If you have questions about this privacy policy or our practices, please contact us: