Privacy

What this page is

The Shattered Sun is a card game you play in your browser. This page says what the game keeps about you, why, and how to have it removed. Until the game's company is founded, it is run by its developer.

On your device

Your settings, decks, progress and records are kept in your browser's storage on this device. The game sets no cookies and shows no ads. Its fonts, pictures and sounds come from the game itself; it loads nothing from other sites.

Without an account

The game sends anonymous play data to its server: the screens you open, the moves and results of games against the bot, and how long things take. It carries a random id made on this device, never your name. It shows what is confusing and what is unfair, and it is deleted after 90 days. You can switch it off under Settings.

A game against the bot that counts for rewards is sent as a record of its moves, so the server can check the result. A guest's rewards are kept under a random guest id.

With an account

The server keeps: your name; your password and your recovery code only as one-way hashes, which nobody can read back; your login sessions, also hashed, which end after 90 days unused; your rating, games, wins and season results; your rewards, quests and run scores; your saved decks and settings, so they follow you to other devices; your friends and challenges; your online matches with every move; and the replays you choose to share.

Your name, rating and results are seen by other players on the leaderboard and in matches.

Notifications

If you turn on notifications, your browser gives the server an address at its push service (for example Google, Mozilla or Apple) to send them to. It is removed when you turn notifications off or delete your account.

News by email

If you leave your email address on theshatteredsun.com, the server keeps it, with the language you read the page in, to write to you about the game: when it opens and when something new arrives. The first email asks you to confirm the address, nothing else is sent until you do, and every email has a link that deletes it. It is used for nothing else. To have it deleted sooner, write with the Feedback button.

Feedback and error reports

What you send with the Feedback button is kept, with any contact you choose to leave, until it is handled, and at most one year. When the game hits an error, it sends the error message and the screen it happened on, with nothing about you; these are deleted after 30 days.

Where it is kept

On a server rented from DigitalOcean, with a nightly backup. Nothing is sold or shared with anyone.

Your rights

You can delete your account at any time under Online, Delete account. That removes everything above that belongs to it; your name in old matches becomes "Deleted player". To ask what is kept about you, to have it corrected or removed, or about anything on this page, write with the Feedback button. Laws such as the GDPR give you these rights, and the game honours them wherever you live.

Age

Accounts are for players aged 16 and older.

Changes

When this page changes, the date below changes with it.

Last changed: 3 November 2026