Privacy Policy

Last updated: 6 July 2026

PLUNGEON is built to be played, not to harvest data. There is no account to create, no email to hand over, and no password. This page explains — in plain language — the little that we do process, and the rights you have over it.

1. Who we are

PLUNGEON ("the game", "we", "us", "our") is an independent game operated by Samu Aaltonen from within the European Union. This policy covers the game at play.plungeon.com, this website at plungeon.com, and the game's backend at api.plungeon.com.

For any privacy question or request, contact us at privacy@plungeon.com. For the purposes of the EU General Data Protection Regulation (GDPR), Samu Aaltonen is the data controller.

2. What we process

On your device

The game stores a few things in your browser's local storage (not cookies) so it can run and remember your progress between visits:

• Your game save — your run and progression (depth reached, credits, upgrades, achievements, and gameplay stats). No personal information is in it.
• Your settings — audio, visual and control preferences.
• An anonymous account ID and session token for the online save (see below), and a small timestamp used to show which achievements are new.

This data stays on your device. You can remove it at any time by clearing site data for the game in your browser, or with the in-game reset.

In the cloud (the online game)

So your progress can survive a cleared cache and appear on the leaderboard, the online game mirrors a copy to our backend. This is tied to a random, anonymous account — not to you.

• An anonymous account ID — a random identifier (UUID) generated in your browser the first time you play online, plus the date it was created. It is not linked to your name, email, or device identity.
• Your game save — the same progress data described above, stored as an opaque blob. It contains no personal data.
• An optional nickname — only if you choose to set one. It is limited to letters, numbers and spaces, and is shown publicly on the leaderboard alongside your best depth, net worth and lifetime ore. Setting a nickname is the one action that makes something about your play public; leave it blank and you never appear on the board.
• An optional passkey — if you choose to protect your save with a passkey, we store only its public key and a credential identifier. We never receive or store your fingerprint, face, or device PIN — those never leave your device; your device simply proves it holds the matching private key.

We also keep anonymous, aggregate community totals (for example, the total number of players and the total ore mined across everyone) to display on the site. These are counts only and can't be traced back to any individual.

If you play an offline build of the game, none of this cloud processing happens — the game runs entirely on your device.

3. What we do not do

• We do not collect your email, password, phone number, real name, or date of birth.
• We do not use advertising, ad networks, or ad identifiers.
• We do not run analytics, tracking pixels, fingerprinting, or third-party trackers.
• We do not use cookies.
• We do not log or store your IP address (see hosting, below).
• We do not collect biometric data.
• We do not sell, rent, or trade your data, and we do not build advertising or behavioural profiles.

4. Legal bases (GDPR)

Where the GDPR applies, we rely on the following bases:

• Providing the game and cloud save — to deliver a service you have chosen to use, and our legitimate interest in a game that keeps your progress.
• The public leaderboard nickname — your consent, given by the deliberate act of setting a nickname. You can withdraw it at any time by clearing your nickname or asking us to remove it.
• Passkey protection — your consent and our shared legitimate interest in keeping your save secure.
• Aggregate community totals — our legitimate interest in showing anonymous, non-identifying game statistics.

5. Hosting and third parties

We keep the list of third parties short and functional:

• Cloudflare hosts the game, the website, and the database, and delivers them over its global network. As with any website, Cloudflare's servers necessarily see your IP address in order to route your request; this is Cloudflare's own processing to serve and protect the site, and our code does not store it. See Cloudflare's privacy policy.
• Google Fonts serves the two typefaces used by the game and site. Your browser requests those font files from Google's servers, which makes your IP address and browser type visible to Google for that purpose. See Google's privacy policy.
• unpkg (a code CDN) serves a display library used only by this marketing website; your browser's IP and browser type are visible to it when loading the page. The game itself does not use it.
• Cloudflare Turnstile — we may use this privacy-friendly bot check to prevent abuse when you set a nickname. If it is active, your IP address is shared with Cloudflare solely to confirm you are not a bot; we do not store it, and Turnstile does not track you across sites.

Because these providers operate globally, your data may be processed in countries outside your own, including outside the European Economic Area, under the safeguards those providers maintain.

6. How long we keep it

Because there is no login, an anonymous cloud account and its save persist until you ask us to delete them. Clearing your browser removes the local copy and the link to your cloud account from that device, but the cloud copy itself remains until you request deletion. Anonymous, aggregate community totals are kept indefinitely, as they contain no personal data.

7. Your rights

Under the GDPR (and similar laws) you have the right to access, correct, delete, export, restrict, or object to the processing of your personal data, and to withdraw consent at any time. To exercise any of these, email privacy@plungeon.com.

Two practical notes, given how anonymous the game is:

• We hold no name or email to identify you by, so to act on a specific cloud save we may ask you for your anonymous account ID (it's stored in your browser under the game's site data) so we can find the right record. We cannot recover or delete a save we cannot identify.
• You can remove all local data yourself at any time by clearing the game's site data or using the in-game reset — no request needed.

We currently handle deletion and export requests manually; we aim to respond within 30 days. If you believe we have mishandled your data, you also have the right to lodge a complaint with your local data protection supervisory authority.

8. Children

PLUNGEON is not directed at children under 16, and we do not knowingly collect personal data from them. As described above, ordinary play collects no personal data at all. If you believe a child has provided us personal data (for example, a nickname containing personal information), contact us and we will remove it.

9. Security

All traffic is served over HTTPS. We minimise what we collect, store passkeys as public keys only, and keep no passwords. No method of transmission or storage is ever completely secure, but keeping so little data is itself a core part of how we protect you.

10. Changes to this policy

If we change how we handle data — for example, if we later introduce optional rewarded ads or a feature that processes new data — we will update this page and its "last updated" date before that change takes effect, and note material changes in the game or on the site.

11. Contact

Samu Aaltonen
privacy@plungeon.com