Your data in Throne Fracture
Last updated 6 October 2026
Throne Fracture is a free online strategy game at thronefracture.com. This page explains, in plain language, what the game keeps about you, why, who helps us run it, and how to have your data deleted. Questions or requests: privacy@thronefracture.com.
The short version
- We keep what the game needs to work: your account, your progress and your match results.
- No ads, no third-party trackers or analytics scripts, and we never sell your data.
- The only thing you can buy with real money is Stars, when Star packs are on sale. Stripe handles the payment: we never see or keep your card details.
- There's no chat. Other players see your commander name and the cosmetics you pick.
- Email us and we'll delete your account and data.
What we collect
- Your account: your username; your email address if you add one; your password, stored only as a salted one-way hash (we never see or keep the password itself); and, if you use them, your passkeys' public keys (the private key never leaves your device) and the ID Google gives your Google account.
- Your commander profile: the commander name you choose, your avatar, title, frame and deck.
- Your game record: ratings, wins, losses and draws, level and experience, in-game currencies, unlocked units and cosmetics, quests, season pass progress, and results of the matches you played (including your opponent's commander name).
- Usage counts: per player and day, how many times you visited, played, won, opened the store or spent in-game currency, plus when you reached milestones such as finishing the tutorial. We use these to balance and improve the game. They are tied to your player record, not to your name, device or location.
- Star pack purchases: if you buy Stars, a record of each purchase: Stripe's ID for the checkout and payment, the pack, its price, when it happened, and whether it was refunded or disputed. Your card, name and billing details stay with Stripe.
- Before you have an account: a random guest ID in a cookie, so your first tutorial and progress belong to this browser until you sign up.
We don't store your IP address, device, browser or location. Your IP address is used briefly, in memory, to rate-limit sign-in attempts and abuse, and is then forgotten. The companies that host the game (below) may keep standard request logs, which include IP addresses, for security and reliability.
Signing in with Google
If you choose “Continue with Google”, we ask Google only for the basic openid, email and profile permissions. We keep Google's ID for your account so you can sign in again, and your email address if Google says it's verified. Your name is used once to suggest a username and isn't stored. We get no access to your contacts, files, Gmail or anything else in your Google account.
Emails
If you add an email address we only send what you'd expect: a welcome email to confirm the address, and password reset links you ask for. No newsletters or marketing.
What other players see
Opponents see your commander name, avatar, title and frame during matchmaking and matches, and the emotes you send in a match (emotes aren't saved). A match's exported replay contains both commanders' names. Your username, email and game history aren't shown to other players.
Cookies and browser storage
We use only cookies the game needs. None are for advertising or tracking.
| Name | What it does | Kept for |
|---|---|---|
rift-session | Keeps you signed in. | 30 days |
rift-player | Your guest ID and recovery code. | 5 years |
rift-profile | Your commander name, avatar and deck. | 1 year |
rift-oauth | Protects a Google sign-in while it's in progress. | 10 minutes |
The game also saves settings such as sound, difficulty and which tips you've seen in your browser's local storage, and the match you're in for the current tab. That stays on your device.
Who helps us run the game
- Render hosts the game server (United States).
- Neon hosts the database with accounts and game records (United States).
- Cloudflare provides the domain, network and delivery of the game's art.
- Resend sends the account emails described above.
- Google, only if you choose to sign in with Google.
- Stripe processes Star pack payments, only if you buy one. Stripe collects your payment details on its own checkout page and keeps them under its privacy policy.
They process data only to provide those services to us. Your data is stored in the United States.
How long we keep it, and deleting it
Sign-in sessions expire after 30 days, email confirmation links after 24 hours and password reset links after 30 minutes. Your account and game records are kept for as long as your account exists, so your progress is there when you come back.
To see, correct or delete your data, email privacy@thronefracture.com from the address on your account, or tell us your username. Deleting removes your account, sign-ins, passkeys and game record. Totals that don't identify anyone (such as how many matches were played on a day) may remain. You can change your commander name at any time on the Commander tab, and signing out ends that session.
Children
Throne Fracture isn't meant for children under 13, and they shouldn't create an account. If you believe a child under 13 has given us personal data, email us and we'll delete it.
Changes
If what the game collects changes, we'll update this page and the date at the top.