Privacy Policy

What we keep in the village ledger, and why.

Last updated: 16 August 2026

Who we are

Wolves of Mirefall is a free, browser-based party game played by groups in the same room, one phone per player. This policy explains what information the game collects, why, and the choices you have. If you have any questions, write to us at privacy@mirefall.app.

What we collect

• An anonymous player ID. When you first open the game we create a random identifier for your device and store it in a cookie and in your browser. This lets us recognise your device between games without asking you to sign in. It is not linked to your real name.
• Your display name. The name you choose when you join a game, so other players can see who's who.
• Game history and statistics. Which games you played, the roles you were dealt, whether you won or survived, and timestamps — used to show your tally on the My tales page.
• Sign-in details (optional). If you choose to sign in, our authentication provider (Clerk) handles the sign-in and may use a provider you pick, such as Google. We store an account identifier so we can keep your stats across devices. Your name and email are shown to you while signed in but are not stored in our database.
• Donations (optional). If you donate, payments are handled by Stripe. Card details are entered directly with Stripe and never reach our servers. We keep a record of the donation (amount, currency, status, receipt link) and your email address only if you provide one for a receipt.
• Feedback (optional). If you send feedback, we store your message together with your IP address and browser User-Agent to help us understand and follow up on it.
• Basic server logs. Like most websites, our server records each request (the page, time, response, and IP address) for security and troubleshooting.
• Usage analytics. We use PostHog EU Cloud to understand how the site and game are used. Analytics starts when a page loads unless you have opted out or enabled Do Not Track. We identify events with the same stable random player ID described above and collect page views, page leaves, game creation, joining, starting and completion events, together with limited game counts and settings. PostHog also receives normal browser and network metadata such as browser type, device information and IP address. We do not send display names, email addresses, sign-in provider IDs, game invite IDs, roles, form contents or donation details to PostHog.

Why we collect it

• To run the game — dealing roles, tallying votes, and keeping the round in sync.
• To remember your device and keep your statistics, optionally across devices if you sign in.
• To process and record donations you choose to make.
• To read and respond to feedback you send us.
• To keep the service secure and prevent abuse (for example, rate-limiting requests).
• To understand which pages and parts of the game are used and where players leave the flow.

Cookies and local storage

We use a small number of strictly functional cookies and browser storage entries: an identity cookie for your anonymous player ID, a matching value kept in your browser's local storage, and your most recent display name for convenience. If you sign in, Clerk sets its own session cookie. PostHog stores its analytics identity and session data in this site's local storage only; its browser requests travel through our own domain. We do not use advertising or cross-site tracking cookies.

Third parties we rely on

To run the game we use a few trusted services, each with its own privacy policy:

• Clerk — sign-in and account management (only if you sign in).
• Stripe — payment processing for donations (only if you donate).
• PostHog EU Cloud — product analytics, processed in the European Union.

We do not sell your information, and we do not use analytics for advertising or cross-site tracking.

How long we keep it

We keep your player record and game statistics while the service operates and your account remains active, so your history is there when you return. Server logs are short-lived. You can ask us to delete your data at any time (see below). Analytics events already collected may remain in PostHog according to our retention settings.

Your choices and your rights

• You can play entirely anonymously — signing in is optional.
• You can reset your local identity by clearing this site's cookies and browser storage.
• You can choose Disable analytics in the footer at any time. This saves a preference in your browser, immediately stops future analytics collection on that device, and survives page reloads. The footer lets you enable analytics again. Opting out does not automatically erase events collected before you opted out; you can contact us to request deletion. We also ask PostHog to respect your browser's Do Not Track setting where the browser provides it.
• You can ask us what we hold about you, or ask us to delete it, by emailing privacy@mirefall.app. We handle these requests manually and will do our best to respond promptly.

Children

Wolves of Mirefall is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

We may update this policy from time to time. When we do, we'll change the date at the top of this page.

Contact

Questions or requests? Write to privacy@mirefall.app.