Legal

Privacy Policy

Last updated October 2026

This page explains what information Death Maze collects, why, and the choices you have over it.

Information we collect

Creating an account stores your email address, the name you register with (also your display name), and a hashed password. Playing the game stores your saves: party state, gold, exploration progress, the house rules and mods you choose, a step-by-step history used for replays, and the title and visibility of each save. Signing in creates a session record that includes your IP address and browser details. If you use the contact form, your name, email address and message are emailed to us; they aren't kept in the game's database.

Cookies and local storage

The site sets a session cookie and a security (XSRF) cookie on every visit, signed in or not; they keep you signed in and protect forms, and last up to two hours. Ticking "Remember me" at login adds a longer-lasting cookie. A small cookie records your cookie choices for six months. Your browser's local storage remembers your theme and keeps a copy of your latest game position in case a cloud save fails. Analytics cookies are only set if you accept them (see below).

Analytics

With your permission we use Google Analytics to understand aggregate traffic and usage patterns. Until you accept analytics cookies in the banner, nothing is sent to Google and no analytics cookie is set. If you accept, Google sets cookies in your browser and receives your IP address and details such as the page viewed, your device and your browser. You can change your choice at any time with "Cookie settings" in the footer, which also removes the analytics cookies.

Other services we use

Cloudflare delivers and protects the site, so your traffic, including your IP address, passes through it; its Turnstile check on the contact form tells people from bots. Sentry receives technical reports when the server hits an error, and is set up not to send personal data. Account emails (address verification and password resets) are sent through Mailtrap.

Sharing your data

We never sell your data. Others can open a save only if you mark it Unlisted (anyone with the link) or Public (listed on Public Games, and open to live viewing and replays); either way your display name is shown with it. The leaderboards on the home page and the Hall of Fame are built from Public saves only, with your display name next to the figure (blocks explored or gold) and anonymous hero pick counts. Private and Unlisted saves never appear there. Save titles can be seen by anyone who can see that save, so choose them with care.

Your data and choices

You can delete your account at any time from your profile settings, which permanently removes your account, your saves and their replay history. Contact form messages stay in our mailbox until we delete them, and analytics data is kept by Google under its own retention settings. To ask what we hold about you, or to have something corrected, get in touch.