Your privacy matters.
Updated 1 October 2026. This notice describes the information used by the Caveraft service.
Account information
Registration stores your email, screen name, a hashed password, date of birth, UK eligibility, and the time and version of accepted terms. It also stores your fictional-credit balance, round history, favourites, game preferences, reminder settings and any account break. Passwords are not stored as plain text.
Guest visits
A random session identifier links your browser to temporary guest state in server memory. Guest balances and rounds are not written to the account database. They expire after two hours, are deleted when you end the visit and are lost if the service process restarts. No email or date of birth is collected for guest play.
Why information is used
Account data enables sign-in, age and region declarations, saved balances, game history, support and your chosen controls. Optional Google Analytics is available only with your permission. Advertising trackers and third-party sign-in tools are not active. Cloudflare provides DNS, connection security and content delivery; our hosting provider runs the application.
Support and recovery
Support requests contain your reply email, topic, message and a reference. Brevo delivers support and password recovery email. ImprovMX forwards messages sent to hello@caveraft.com to our support inbox. These providers process the addressing and message information needed for delivery. The application stores delivery status, not the body of production recovery emails. Do not submit payment details, identification documents or passwords.
Storage and retention
Account information and game activity are stored in the application database until removed through an account deletion request. Daily maintenance removes expired sessions and reset tokens, support requests and delivery records older than 90 days, and development mail captures older than 24 hours. Database backups are retained for up to 15 days. Recovery links expire after 30 minutes and work once.
Your choices
Manage reminder settings from your profile and account breaks in Player Care. Request access, correction or deletion through Support or hello@caveraft.com. Browser favourites can be removed using the heart controls or by clearing browser storage.
Optional Google Analytics
With your permission, Google Analytics 4 processes page views, cookie identifiers and browser/device information to help us understand visits. We do not send your email, screen name, date of birth, messages, account balance or recovery tokens. Page addresses exclude query strings and fragments. Google may process information outside the United Kingdom, including in the United States. Advertising features are disabled. You can decline or withdraw permission at any time through Storage preferences in the footer. Withdrawal stops future measurement; it does not erase data already received by Google.