Privacy policy — ADRENOCHROME

This page lists everything adrenochrome.org stores about you, why it stores it, how long it keeps it, and how to get it back or have it deleted. It is written to be read, not to be skipped.

You can use this site without an account

The prologue and Chapter One play as a guest. As a guest, your progress is kept in your own browser's local storage and is never sent to us unless you choose to sign in and upload it. We do not require an email address to play.

What we store if you create an account

Account data, purpose and retention
Data	Why	Kept for
Email address	Sign-in, password reset, receipts, ticket replies	Until you delete the account
Password hash (Argon2id)	Sign-in. We never see or store the password itself	Until you delete the account
Display name	Shown on leaderboards and in co-op sessions	Until you delete the account
Game saves, evidence, puzzle state, endings	So you can stop and resume, and so scores can be validated	Until you delete the account
Achievements and leaderboard entries	Standings	Until you delete the account
Settings (contrast, motion, text size, subtitles)	So the game looks the same on your next device	Until you delete the account
Hashed IP address at registration and at sign-in	Abuse prevention and account-takeover detection. Stored as a one-way hash, never in plain form	90 days
Consent records (which terms and privacy version you accepted, and when)	Legal record	6 years after account deletion, as a minimal record with no game data attached
Order and refund records	Accounting and tax law	As long as tax law requires, typically 6 years

What we do not store

Your password in any readable form.
Card numbers. If purchasing is enabled, payment details go directly to the payment processor and never touch this server.
Your precise location. We do not use GPS and we do not ask for it.
A raw IP address in the game database — only a salted hash.
Anything from your microphone or camera. The site asks for neither and the browser permission policy blocks both.

Analytics

Two separate things count activity here:

Site analytics shared with the small network this site is hosted on: a page view row per public HTML page, a session row, and a row when you submit a search. It records the path, a coarse country, a bot flag and a truncated user agent. API calls, media files, health checks and known bots are excluded.
Game analytics, stored only in this site's own database: which room was entered, which puzzle was attempted, which ending was reached. For a signed-in player these are linked to the account so your own progress page can be accurate; for a guest they are linked to a random session identifier that is not tied to you.

There is no third-party analytics script on this site. No Google Analytics, no Facebook pixel, no session recorder.

Advertising

Public pages may show advertising served by Google AdSense and by the network's own house ads. Google may set cookies and use them for ad measurement and personalisation according to its own policies; you can control that at Google Ads Settings. House ads are counted by us with an impression and click count per slot, with no profile attached. Advertising never appears inside a chapter.

Cookies and browser storage

Listed in full on the cookies and storage page, including which are strictly necessary and which you can refuse.

Email

We send email for four reasons: verifying an address, resetting a password, replying to a support ticket, and confirming a purchase. There is no marketing list and we do not send one. Mail is sent from this server through noreply@adrenochrome.org.

Support tickets

The contact form opens a ticket held in the shared network ticket system. It stores the name, email and message you supply, plus a hashed IP for spam control. Tickets are visible to the operator of the network. They are deleted 12 months after being closed.

Who we share data with

Nobody, for money. We do not sell or rent personal data.
The hosting provider, which necessarily processes traffic to the server.
Google, for advertising on public pages, under its own terms.
A payment processor, if and when purchasing is enabled, for the purchase itself.
Law enforcement, only where legally compelled.

Your rights

Access and portability. Download everything on your account as JSON from account settings. It is generated on demand, not on a queue.
Correction. Change your display name, email and settings yourself at any time.
Deletion. Request deletion in account settings. There is a short grace period during which you can cancel it by signing in; after that, account data is removed and leaderboard entries are withdrawn. Minimal consent and accounting records are retained as described above.
Objection and restriction. Write through the contact form and say what you object to.
Complaint. If you are in the UK or EU you may complain to your national data protection authority.

Legal bases

Running your account and delivering what you bought is contract. Security logging, abuse prevention and basic traffic counting is legitimate interest. Personalised advertising cookies are consent, which you can withdraw. Keeping accounting records is legal obligation.

Security

Passwords are hashed with Argon2id. The site is served over HTTPS only, with HSTS. Sessions are rotated on sign-in and on privilege change. The game state is authoritative on the server, so tampering with a save in the browser changes nothing. Administrative actions are written to an audit log with the acting user, the reason and the time.

Children

The game is for players 16 and over and accounts are not knowingly created for anyone under 13. If you believe a child has created an account, tell us and it will be deleted.

Changes

Material changes update the version recorded against your account, and you are asked to accept the new version on your next sign-in. The date at the top of this page is always the current version.

Contact

Use the contact form for any privacy request. It opens a tracked ticket, which means your request has a reference and cannot quietly get lost.