Privacy Policy
Last updated October 22, 2026. Version 1.
Whispered Scrolls is a free online game run by William Ross ("we", "us"). This page explains what we collect when you play, why we need it, who else sees it, and how you can have it removed. We keep it as short and plain as we can.
What we collect
Your account
- Email address, if you sign up or sign in with one. We use it to let you sign in, to send you sign-in codes, and to tell you when your password or email changes. We don't send newsletters or marketing.
- Password, stored only as a one-way scrambled hash. We can't read it.
- Discord or Google account, if you sign in with one: the account's ID, its display name, and its email address if Discord or Google has verified it. We never see your Discord or Google password.
- Account name, for older accounts made before email sign-in.
- When you accepted these terms and this policy, and which version.
Playing the game
- Your characters and progress: names, appearance, skills, items, quests, and where you are in the world.
- Chat: we keep a record of chat messages so moderators can look into reports of harassment, scams or cheating.
- Gameplay statistics, like how often a monster is defeated or how long a quest takes, which we use to balance the game. These are counted in totals, not tied to a profile of you.
- Technical information: your IP address, browser or app version, and session times. We use these to keep the game running, stop abuse (for example, too many sign-up attempts from one address) and investigate problems.
When you send us something
- Bug and player reports include what you write, a screenshot, and a snapshot of the game's state at that moment (your position, settings, and similar), so we can understand the problem.
- Crash reports from the Windows app include technical details about the crash.
On your device
The game keeps a few things in your browser's local storage: your sign-in, your settings, and, if you play as a guest, the key that brings you back to your guest account. Clearing your browser data removes them. We don't use advertising or tracking cookies. If you arrived from one of our ads, we note which ad, without identifying you, so we know which ads work.
Who else sees it
- Resend sends our emails (sign-in codes and account notices), so it receives your email address and the message.
- Discord and Google are involved only if you choose to sign in with them.
- Our hosting provider runs the servers the game and its data live on.
- Other players see your character name, appearance, chat messages and hiscore rankings. They never see your email.
- Our moderators can see chat records and reports when handling them. Only the game's administrators can see email addresses and IP addresses.
We don't sell your information, and we don't share it with advertisers. We'd only hand it to anyone else if the law requires it.
How long we keep it
- Your account and characters stay until you ask us to delete them.
- Guest accounts that haven't been played for 30 days, and have no character above total level 20, are deleted automatically.
- Sign-in codes expire within 15 minutes. Resolved reports' screenshots are removed after a while, and database backups are kept for about two weeks.
- Chat records and technical logs are kept only as long as we need them for moderation and keeping the game safe.
Your choices
- You can change your email or password, or disconnect Discord or Google, at any time from the Account window in the game.
- You can ask us for a copy of your data, to correct it, or to delete your account and everything tied to it. Email us at support@whisperedscrolls.com or on our Discord. We'll confirm the account is yours before acting.
- Depending on where you live (for example in the EU, the UK or California) you may have further rights over your data, and you can complain to your local data protection authority.
Children
Whispered Scrolls is meant for players aged 13 and older. If you're under the age where your country requires a parent's consent to use online services, please ask a parent before you play. If you believe a child has given us their information without that consent, contact us and we'll delete it.
Keeping it safe
Connections to the game are encrypted, passwords are hashed, and access to player data is limited to the people who need it. No system is perfectly secure, but we take reasonable care and will tell affected players if something goes wrong.
Changes
If we change this policy in a way that matters, we'll update the date and version above and ask you to accept the new version in the game.
Contact
William Ross, support@whisperedscrolls.com, or our Discord.