Website, game and launcher
This policy distinguishes between creatureswarm.com, the game and the launcher. The game is in development: descriptions of game features reflect the current implementation and apply when you use the relevant feature. Visiting the website alone does not create a player account.
Data during website visits
Our servers process your IP address, connection time and request data needed to deliver the website and prevent abuse. Server logs may include the requested URL, response code, browser information and referring page. The legal basis is our legitimate interest in keeping the service operational and secure (GDPR Article 6(1)(f)).
The landing page has no registration form, newsletter, advertising or tracking analytics. Fonts, illustrations and videos are served from our domain. We do not embed YouTube players or third-party advertising pixels.
Language and browser storage
When you manually choose a language, we save its code in localStorage under creature-swarm-language. This only remembers your setting; it is not used to identify you or for advertising. It remains until you change your choice or clear the site's data. You can remove it using the button below.
Automatic language selection uses your browser's language preferences. We read the reduced-motion preference from your device. The website does not set its own cookies or require marketing consent to use it.
Data in the game
The game can create a guest account with an identifier and nickname. The backend supports sessions and optional links to Steam, Apple, Google or an OIDC provider. A guest account is pseudonymous, not anonymous. Linking a platform is optional; availability depends on the released version.
The profile includes progress, in-game currencies, unlocked keos, equipment, quests, achievements, the pass and expedition history. The backend also stores results, rankings, profile change records and reward settlements. Social features store friends, blocks, invitations, presence, parties, clans and chat messages.
Your nickname, selected profile details, presence and results may be visible to other players according to the feature you use. Messages go to their recipient, party or clan. Do not put information in your nickname or chat that you do not want to share with those people.
Device storage and launcher
The game stores an offline profile, an online profile cache, graphics and sound settings, and credentials that let you return to your account. Credentials are stored in the system credential store or application files, depending on the platform. The launcher checks versions and downloads updates; it has no separate login.
We process data needed for accounts and gameplay to provide the service you request (GDPR Article 6(1)(b)), and diagnostics and abuse prevention on the basis of legitimate interests (point (f)). Handling data rights requests fulfils legal obligations (point (c)). Without the data required for a connection or account, the relevant online feature will not work.
How long we keep data
Settings and local files remain until you change or delete them on your device. The landing page container’s logs rotate automatically: we keep up to three files of 5 MB each, overwriting older entries. Retention therefore depends on traffic volume, rather than a fixed number of days.
We keep the account, profile and settlement history while the account is maintained. The current prototype does not automatically delete inactive accounts. Expiring sessions and tickets have their own validity periods; their expiry does not delete the entire account. Logging out or uninstalling the game does not delete server data. Contact the controller to request deletion. We assess requests taking into account legal obligations and the protection of legal claims.
Delete your game account and data
To request deletion of your Creature Swarm account and associated data, email support@creatureswarm.com. Include your player name or ID if you know it. Do not send passwords or tokens.
After verifying that the account belongs to you, we will delete the account and associated data, except information we must retain for legal or security reasons. We will tell you what was retained and when the request is complete.
Request account deletionProviders and data recipients
Authorized technical staff operate the infrastructure using Hetzner and OVHcloud hosting. Cloudflare handles the domain's DNS; the landing page does not currently use its proxy to deliver website content. DNS services may operate globally. When you use platform login or distribution, the relevant provider's policies also apply.
We do not sell data or use the landing page for advertising profiling. Information about providers' processing and international transfers is available in their policies linked below. You can request details about data entrusted by the controller using the contact address.
Your rights and contact
Under the conditions of the GDPR, you may request access, rectification, erasure, restriction of processing and, where applicable, data portability. You may object to processing based on legitimate interests. You may lodge a complaint with the President of Poland's Personal Data Protection Office (UODO) or the competent supervisory authority in your country.
Send your request to the controller's address shown on this page. We keep correspondence while handling the matter, then only as needed to demonstrate compliance with our obligations or protect legal claims during the applicable limitation period. Specify the service concerned and your account identifier, if available. Do not send passwords or session tokens. If necessary, we will ask for information to verify your identity securely.