Privacy Policy

Version 2026-09-24. Effective 24 September 2026.

Regna is a location-based kingdom game played in your browser. This page explains what we collect when you play, why, who helps us run it, and how you delete it.

What we collect

• Account: your email address, your username, and your password. Passwords are hashed by our authentication provider. We never see or store the plain text.
• Your agreement: the version of these documents you accepted and the time you accepted them.
• Location: your device position, only after your browser asks and you allow it. The game uses it to check that you are near a place before you build or interact there. We do not keep a history of your movements. We do save the map coordinates of the Homes, Castles and other buildings you place.
• Game data: your buildings, units, resources, quests, titles, friends, blocked players, global chat messages, and private messages you send or receive.
• Purchases: if you buy Crowns, a record of the purchase: the date, the pack, the amount and currency, the payment reference and whether it was refunded. Your card details go to our payment provider and are never seen or stored by us.
• Feedback: the bug reports and suggestions you send from the menu, with your username.
• Usage records: the days you connected to the game, and, tied to your account, when you open the Crown store, start or finish a checkout, or tap something that costs more Crowns than you have (with how many Crowns you were short). We also record a few milestones and outcomes tied to your account: when you first place a Barracks, survive your first raid, and how long your first session lasted; how each bandit raid or attack on you or by you ended; which items you buy and use; and, at most once an hour, that your account was sending messages faster than the game allows. We do not record where you are, your map taps or your movements. Other counts, such as why a building could not be placed or how connections ended, are totals for all players and are not tied to you. We use these to run the store, balance the game, keep it fair and see whether players come back. They are not shared with anyone and are used for nothing else.
• Technical data: anonymous counters about how features are used, error logs that may include your account ID, and your IP address, which our servers use briefly to limit abuse and which appears in server logs.
• On your device: a sign-in session and a few settings in your browser storage. We use no advertising or tracking cookies.

What other players can see

Your username, your buildings and their locations, and your public title can be seen by other players who come near them. Your private messages are visible only to you and the sender or recipient. Do not place your Home or Castle at your real home address. The game asks you not to.

Why we use it

To run your account, keep your kingdom saved, show the map, enforce fair play, prevent abuse, fix bugs, and keep the service secure. We do not sell your personal data and we do not show advertising.

Who processes it for us

• Supabase: database and sign-in. It also sends your confirmation and password reset emails.
• Vercel: hosts the website.
• DigitalOcean: hosts the game server.
• Stripe: takes payments when you buy Crowns and tells us the result. Stripe handles your card details under its own privacy policy.
• Map tile provider: map images are loaded from OpenStreetMap-based tile servers, which receive your IP address and the map area you view.

These providers may process data in the United States and other countries.

How long we keep it

We keep your data while your account is active. When you delete your account, we deactivate it: you can no longer sign in, and your buildings and their locations, units, resources, quest progress and friends list are removed from the game right away. We keep your email address, username, your private messages and global chat messages, and the records of your Crown purchases and Crown spending, so that we can meet accounting, tax and fraud-prevention duties, deal with payment disputes, and restore your account if you ask. If you ask us to restore it, your username, private messages and chat history come back; your buildings, units, resources and quest progress do not, and you start those over as a new account would. Error logs and anonymous counters are kept without your account link.

If you want your data erased instead, email us and we will erase it, except records we are required to keep, such as payment records.

Your choices and rights

• Delete your account: open the account window and choose Delete my account. This deactivates the account as described above. Email us to have it reactivated or fully erased.
• Location: you can turn off location in your browser settings. The game cannot place buildings without it.
• Access, correction, export, erasure: email us. Depending on where you live (for example the EU, UK or California), you may also have the right to object to or restrict processing, and to complain to your data protection authority.

Children

Regna is for people aged 13 and over. We do not knowingly collect data from children under 13. If you believe a child has an account, contact us and we will remove it.

Changes

If we change this policy in a way that matters, we will update the version and date above and ask you to accept it again where the law requires.

Contact

Questions or requests: support@tofusolutions.tech