What we keep about you

Privacy · last changed 20 October 2026

Deze pagina in het Nederlands

Lumenwick is for everyone, young and old. Children play it too, so this page is written to be read just as easily by a child as by a grown-up. It says exactly what is stored, where it is, and how to get rid of it. Nothing here is a summary of something longer — this is the whole thing.

What we ask for

Two things, and neither of them is about the real you:

• A name you make up. It does not have to be your real one, and it is better if it isn't.
• A password. We never keep the password itself. It goes through a one-way calculation with a random extra ingredient, and only the result is stored. From that result nobody can work out your password — not us either.

You also get a recovery code of four words. That is the only way back in if you forget your password, so we keep it. Write it down somewhere.

An email address — only if you want one

On your account page you can link the email address of a grown-up to your account: your own if you are 16 or older, otherwise a parent's or guardian's. You don't have to. Without one, everything works exactly the same.

We send a link to that address. Only when someone clicks it is the address linked. That click is how the grown-up says yes. An address that is not confirmed within 24 hours is deleted.

We keep the address and the date it was confirmed. For a short while we also keep a scrambled version of the code in the link, so we can recognise it.

We use the address for two things only: sending a link when the password and the recovery code are both lost, and messages about that account, for example when the address is unlinked. No newsletter, no adverts, and our emails contain no tracking.

Other players never see it. You can unlink it at any time on your account page, and then it is deleted from the account. A parent can also ask us to remove it: write to [email protected]. Either way the address gets one last email to say it was unlinked. It stays in the backups until those run out (thirty days at most).

What the game remembers while you play

• Your lamplighter: level, experience, health, sword and fishing skill, what you are carrying, what is in your chest, what you are wearing, your furniture.
• Where you live: your own room at the inn, any room or house you bought, and how you arranged it.
• What you have done: which quests, how many enemies, which lanterns and beacons you lit, your companions, and where you were standing when you left.
• Your gold. Every change is one line in a ledger that stays — that is how we can tell whether something went wrong with someone's money.
• Your friends, the requests you sent or received, and who you blocked.
• The private messages between you and your friends.
• When your account was made and when you were last online.
• The address of your internet connection — the IP address; every website you visit sees it — and a rough guess of the country and town it comes from. The guess is made by Cloudflare, the company that carries the game's traffic, and it is often the town of your internet provider rather than yours. Only the owner of the game can see this, on the moderation page, and it is there for two things: keeping out someone who was banned, and noticing when one person makes many accounts to get around that. It is wiped ninety days after you were last online.

Reports and moderation

If you report someone, we keep who reported whom, what you wrote as the reason, which room it happened in, when, and later who dealt with it. We also keep a log of everything a moderator does — muting, removing someone from a room, reading a reported conversation. That log is there so a moderator can be checked, including by us.

A moderator can read a reported conversation, including messages someone hid afterwards. That is precisely what the report button is for. Nobody else can read your messages.

A report also keeps the last few room messages (at most ten) of the person you report, as everyone in the room saw them, so after the filter. That way a moderator can see what happened. To make that possible, the server holds everyone's last ten room messages in its memory for ten minutes. If nobody is reported, they are gone after those ten minutes (or when the server restarts), and they are never written to disk.

The filter

What you type in a chat or in a report passes a filter that removes anything that looks like a phone number, an email address, a web address or a name on another app (such as Snapchat or Instagram), and questions about someone's age, home town or school. Not because those are rude, but because your contact details do not belong in a game. Anyone who has something removed three times within ten minutes cannot talk for five minutes after that.

Counting visitors

Since 28 September 2026 this website (lumenwick.com, not the game) uses Cloudflare Web Analytics to count visits. It tells us how many people came, which page they opened, which site sent them here, and roughly which country and what kind of browser or phone they used. It uses no cookies and stores nothing on your device, it does not follow you to other websites, and it cannot tell us who you are or recognise you when you come back. We look at it only as totals, to see whether anyone found us.

Cookies

There are none. The game keeps a few things on your own device so you stay logged in and can play offline. You can wipe those at any time through your browser; you will just have to log in again.

Where it all is

• The game runs on one server in Germany, rented from Hetzner.
• This website is hosted by Cloudflare, which therefore sees that someone visited — that is unavoidable for any website.
• Backups go to Cloudflare R2, encrypted. They are locked with a key that never leaves our own computer, so nobody at Cloudflare can read them.
• Emails are sent by Lettermint, a Dutch company, from servers in the EU. Lettermint sees the address and the email we send, and nothing else about you.

Backups are kept for two days by the hour, fourteen days by the day, and thirty days off-site. After that they are gone.

Who else can see you

Other players see your name, what your lamplighter looks like, what you are wearing, where you walk and what you say out loud in a room. They cannot see your password, your recovery code, your gold, your private messages or anything you did anywhere else.

We never sell anything to anyone, and there is nobody we hand it to.

How long we keep it

As long as you play. Ask us and it goes. Two things go by themselves: private messages after ninety days, and the address of your connection ninety days after you were last online.

Two things stay even then, and it is fairer to say so than to hide it. The gold ledger keeps its lines, because it is a set of books and books with holes in them are worthless. And a beacon you lit stays lit — that happened in a world other people share, and no one can undo it. Neither of those two says anything about who you are.

What you can ask for

Write to [email protected] and you can ask us to show you everything we have about you, to correct it, or to delete it. You do not have to explain why, and it costs nothing. If you are under sixteen, ask a grown-up to send the message with you.

If you are under sixteen

In the Netherlands a child under sixteen needs a parent's permission before a website may keep personal details. That is exactly why we ask for none: you play under a made-up name, and a parent does not have to hand over anything.

A grown-up can link their email address to your account, so it can be recovered if the password and the code are both lost. That is a choice, it is for the parent, and it is never required to play. Clicking the link in our email is how the parent gives that permission.

If something changes

The date at the top says when this page last changed. If something changes that matters — a new kind of data, a new company involved — it will say so in the game as well, not only here.

Who is behind this

Lumenwick is made and run by the makers of Lumenwick, in the Netherlands. Questions, complaints or requests: [email protected]. We answer every one of them ourselves.

If you think we are handling your details badly and we do not sort it out with you, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.