Privacy Policy

This game is made by Encyon, a company based in Sweden. It is a game for families, so this policy is written to be read in two minutes, not by a lawyer.

The short version: the game asks for a name and a wizard hat, and everything it saves stays on your headset. It does not ask for anything else, and it never will without telling you first.

One thing on this website is different, so it is worth saying at the top: if you put your email address on the beta list, we do hold that address, on our own server, until you ask us to delete it. That is a form on a web page, not part of the game, and it is the only place in this whole document where we have a copy of anything.

What the game saves

When you make an apprentice in the game, the headset creates three things:

• A display name. Up to 12 letters, typed by you on the in-game letter grid. Letters A to Z only.
• An avatar. Wizard or witch. That is the whole choice.
• A random ID. A long random number the headset makes up on its own. It is not your Meta account, your email, or your device serial number. It is not linked to you in any way; it is just a label so your scores stay yours.

When you finish a run, the game records what happened in it:

• the day it happened (the date, not the time)
• which arena you played
• how many enemies you banished
• which level and wave you reached
• how many coins you collected

That is the complete list. Six numbers and a name. Nothing is recorded while you are playing; the row is written when the run ends.

Why we save it: so the game can show your best scores and keep your progress between sessions. The scoreboard in the game is your own logbook; it shows your past runs, nobody else's.

What we do not collect

We want to be specific here, because "we care about your privacy" means nothing on its own. The game does not collect, ask for, or transmit:

• No email address, phone number, postal address or real name. The beta signup on the website is a separate thing and does ask for an address; see the beta list
• No account, login or password; there is nothing to sign up for inside the game
• No location or GPS data
• No microphone, camera or passthrough recording; the game never listens or looks at your room
• No voice chat, text chat or messaging of any kind. Players cannot contact each other
• No photos, videos or screen recordings
• No eye tracking, face tracking, or biometric data
• No hand or body tracking data leaves the headset; the controllers move the wands and that is where it ends
• No advertising, and no advertising IDs
• No third-party analytics, crash reporting, or tracking SDKs. There are no other companies' tools inside this game at all
• No contact list, calendar, photo library or other files on your device
• No payment information. There is no way to spend money in this game at all; coins are earned by playing and mean nothing outside the game

We also do not build a profile of you, sell anything to anyone, or use your data to train anything.

Where it is stored

On your headset, and nowhere else. Everything above is saved in the game's own storage on the device. The game has no server behind it, no cloud saves and no sync; nothing is transmitted, whether you are online or not. Uninstalling the game removes everything it ever saved.

That is true of the game as it stands today. A leaderboard update is planned, and it will send two things; see what is coming below.

The website is a different machine. An email address you type into the beta form on games.encyon.com is stored on our server, not on your headset, and nothing about it ever reaches the game. It is described in full under the beta list.

How long we keep it

For everything the game saves, we don't; we never have it. The only copy lives on your headset, so it exists exactly as long as you keep it there. Delete an apprentice from the ledger in the main menu and that profile and its runs are gone. Uninstall the game and everything goes with it. There is no automatic expiry; a score from two years ago is still a score, but only in your own headset.

A beta address is the exception, because that one we do hold. We delete the whole list when the beta is finished, and yours sooner if you ask; see the beta list.

Who we share it with

For everything the game saves: nobody. Today that is not even a promise; it is how the game is built. That data never reaches us, so there is nothing at Encyon to share, sell, rent or hand over. No advertiser, no data broker, no analytics partner, and no "trusted partners".

If a court or the police ever lawfully demanded player data from us, what we could hand over is: nothing. The one file we do have is the beta list, and what is in it is set out under the beta list below, nothing that says anything about how anyone plays.

For a beta address there is one name: Slack. When you sign up, our server writes the address to its own database and also posts it into a private Slack channel so we notice it. Slack is a US company and keeps that message on its servers under its own terms. Nobody else gets it, and it is not used for anything but sending you an invite. See the beta list.

When leaderboards arrive this changes again, and Meta joins the list. We would rather say that plainly here than leave you to find it out.

What is coming: leaderboards

This is not in the game yet. We are telling you now because it changes the answers above, and we would rather you read it here than notice it later.

A future update will add leaderboards run by Meta, so you can see how your best run compares with other players in the same realm. When that arrives, two things will leave the headset: the name you chose and the score. Other players will see them. Meta stores them, under Meta's own privacy policy.

The name stays yours to pick. The letter grid is not going anywhere. You will simply also be offered your Meta account name as a shortcut, and you can take it, type something else, or change it later. So the advice below still holds: a first name, a nickname or something silly is the right choice, and it is the right choice because other people will read it.

Deletion will split in two. Anything on the headset stays yours to delete, as it is today. A leaderboard entry held by Meta has to be removed by Meta; email us and we will tell you exactly how, or ask on your behalf.

Nothing else is planned. No chat, no voice, no friends list, no way for players to contact each other. Before that update ships, this page will be rewritten to describe what the game actually does, and the date at the top will change.

The beta list on this website

This part is about the website, not the game. On games.encyon.com there is a form where you can ask for an invite to the closed beta. Everything above still describes the game exactly as it was; this section describes the one place where we do end up holding something of yours. If you never used that form, none of it applies to you.

When you sign up, our own server stores:

• The email address you typed. We ask for the one on your Meta account, because that is where a Quest invite can arrive.
• Which headset you have, and which country you are in. The build targets Quest 3 and 3S, and the country decides which store region the account sits in and therefore whether an invite can reach it. The country is stored as a two letter code, not as a place you live.
• Which language the page was in. So we write to you in Swedish or English rather than guessing.
• The date and time. Places are limited and we work down the list in the order people arrived, so the timestamp is the queue.
• A scrambled version of your IP address, and your browser's user agent string. Only to stop a script from filling the list with junk. The IP address is hashed with a secret the moment it arrives; we never write down the address itself and cannot work backwards to it. Neither of these two ever leaves the server, and neither is ever exported.

That is the whole list. No name at all, and no third party: the page still loads nothing from anyone else, and sets nothing on your device.

Counting visits

The landing page and the press kit count a few things. Our own server does the counting, and it counts events, not people. This page, the one you are reading, counts nothing. There is no Google Analytics here, no Plausible, no Meta pixel and no tag from anyone else; what is written down is a word and a timestamp, and nothing that could tie two of them to the same person.

The words are the only ones it accepts, and this is all of them: that a page was opened, that the beta button was clicked, that a signup went through, and that the video was started. Alongside each one we store the page name and the language, and nothing else.

What is deliberately not stored: no cookie, no identifier, no session, no profile, no IP address, and no referrer. That is also why we cannot tell you how many people visited, only how many times something happened; two clicks from you look exactly like one click each from two strangers. We would rather have the weaker number than the stronger file. If your browser sends Global Privacy Control or Do Not Track, nothing is sent at all.

Because none of it identifies anyone, there is nothing here to consent to and no banner to click away. The counts stay on our server and go nowhere else.

Why we are allowed to hold it: because you said we could. The legal basis is consent, GDPR Article 6(1)(a), given by the two boxes you tick on the form. Taking it back is as easy as giving it, and it costs you one email.

What we use it for. Sending you an invite to the beta, and nothing else. It is not a newsletter, it is not marketing, it is not merged with anything, and it is not for sale. Signing up is not a promise of a place: the beta is small, more people will sign up than we can invite, and we would rather say so here than imply otherwise.

Who else sees it. Our server posts each new signup into a private Slack channel so that a person notices it. That message contains your address, your headset and your country, because those are what an invite is made from. It means Slack, a US company, holds a copy of that message under its own terms. Nobody else receives it, and the counting described above is never posted anywhere.

How long we keep it. Until the beta is over; then the list is deleted, whether or not you got an invite. Sooner if you ask.

Getting off the list. Email robin@encyon.ai and the whole row is removed, address and all. We will not ask why, and we will not ask you to prove who you are first.

Children's privacy

This game is made for children and families, and it was built so that a child can play it without giving anything away.

• There is no account to create and no email to enter in the game
• There is no chat, no voice, no way for players to contact each other
• There is no advertising and nothing to buy
• No personal information is requested at any point in the game, and nothing typed in the game leaves the headset

The beta signup is an adult's job. The form on the website asks for an email address and asks you to confirm that you are 18 or older, so it is not something for a child to fill in. If your child wants to play the beta, sign up with your own address; the invite goes to a Meta account and to an inbox, and both of those belong to a grown-up. See the beta list.

The only thing a child types is a name of their own choosing. We still suggest a first name, a nickname or something silly rather than a real full name; the 12‑letter cap is there partly to encourage that. It is a good habit, and a name is easy to change at any time from the ledger in the main menu.

If you are a parent or guardian and your child has entered something they should not have, you can change or delete it right there on the headset. If anything is unclear, email robin@encyon.ai and we will help. We do not require you to prove anything first.

Deleting your data

Everything the game knows about you is on your headset, so deletion is in your hands and takes effect immediately:

• Delete an apprentice from the ledger in the main menu to remove that profile and every run attached to it.
• Uninstall the game to remove everything.

Neither of those needs a form or a request to us, because we hold no copy of what the game saves.

The beta list is the one thing we can delete for you. There is a form and there is a waiting list, and if your address is on it, email robin@encyon.ai and we take it off. The whole list is deleted anyway once the beta is finished.

You can ask us to delete data, wherever you live. Email robin@encyon.ai and a person will answer. We will delete anything we can reach, tell you plainly what we cannot, and help you get that removed too; a Slack message with your beta address in it, and later a leaderboard entry held by Meta, are the examples we expect. This is free, it is open to everyone in every country, and we will not ask you to prove who you are before helping.

Your rights under the GDPR

Encyon is based in Sweden, so the GDPR applies to everyone who plays, wherever they are.

Who is responsible. Encyon AB (reg. no. 559188‑6824) is the data controller. Contact: robin@encyon.ai

Legal basis. Two of them, for two different things. For what the game saves we rely on legitimate interest (Article 6(1)(f)): a game that keeps score has to remember the score, and we have kept it to the minimum that makes that work, stored on your own device. For the beta list we rely on consent (Article 6(1)(a)), which you give with the two checkboxes on the form and can withdraw at any time by writing to us. In both cases there is no profiling and no automated decision-making.

Your rights. You can ask to see the data, correct it, erase it, restrict or object to its use, and get a copy in a machine-readable format. For everything the game saves, the fastest way is the headset itself; the ledger shows what exists, lets you rename, and lets you delete. For anything else, or if you would rather talk to a person, email robin@encyon.ai. We answer within 30 days, and it is free.

If you are unhappy with how we handled it, you can complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY), at imy.se, or to the authority in your own EU country.

Changes to this policy

If a future update changes what the game saves, or adds any online feature such as shared leaderboards, this page will be updated first, before that version ships, and the date at the top will change. The same goes for the beta list: if what we store or who sees it changes, it is written here first. Significant changes also go in the game's patch notes; we will say so out loud rather than quietly editing this page.

Contact

Encyon AB
Söderköping, Sweden
robin@encyon.ai

Questions, deletion requests and complaints all go to the same address, and a person reads them.