What we keep about you

Privacy · last changed 12 September 2026

Lumenwick is for everyone, young and old. Children play it too, so this page is written to be read just as easily by a child as by a grown-up. It says exactly what is stored, where it is, and how to get rid of it. Nothing here is a summary of something longer — this is the whole thing.

What we ask for

Two things, and neither of them is about the real you:

• A name you make up. It does not have to be your real one, and it is better if it isn't.
• A password. We never keep the password itself. It goes through a one-way calculation with a random extra ingredient, and only the result is stored. From that result nobody can work out your password — not us either.

You also get a recovery code of four words. That is the only way back in if you forget your password, so we keep it. Write it down somewhere.

What the game remembers while you play

• Your lamplighter: level, experience, health, sword and fishing skill, what you are carrying, what is in your chest, what you are wearing, your furniture.
• Where you live: the room or house you bought, and how you arranged it.
• What you have done: which quests, how many enemies, which lanterns and beacons you lit, your companions, and where you were standing when you left.
• Your gold. Every change is one line in a ledger that stays — that is how we can tell whether something went wrong with someone's money.
• Your friends, the requests you sent or received, and who you blocked.
• The private messages between you and your friends.
• When your account was made and when you were last online.
• The address of your internet connection — the IP address; every website you visit sees it — and a rough guess of the country and town it comes from. The guess is made by Cloudflare, the company that carries the game's traffic, and it is often the town of your internet provider rather than yours. Only the owner of the game can see this, on the moderation page, and it is there for two things: keeping out someone who was banned, and noticing when one person makes many accounts to get around that. It is wiped ninety days after you were last online.

Reports and moderation

If you report someone, we keep who reported whom, what you wrote as the reason, which room it happened in, when, and later who dealt with it. We also keep a log of everything a moderator does — muting, removing someone from a room, reading a reported conversation. That log is there so a moderator can be checked, including by us.

A moderator can read a reported conversation, including messages someone hid afterwards. That is precisely what the report button is for. Nobody else can read your messages.

The filter

What you type in a chat or in a report passes a filter that removes anything that looks like a phone number, an email address or a web address. Not because those are rude, but because your contact details do not belong in a game.

Cookies

There are none. The game keeps a few things on your own device so you stay logged in and can play offline. You can wipe those at any time through your browser; you will just have to log in again.

Where it all is

• The game runs on one server in Germany, rented from Hetzner.
• This website is hosted by Cloudflare, which therefore sees that someone visited — that is unavoidable for any website.
• Backups go to Cloudflare R2, encrypted. They are locked with a key that never leaves our own computer, so nobody at Cloudflare can read them.

Backups are kept for two days by the hour, fourteen days by the day, and thirty days off-site. After that they are gone.

Who else can see you

Other players see your name, what your lamplighter looks like, what you are wearing, where you walk and what you say out loud in a room. They cannot see your password, your recovery code, your gold, your private messages or anything you did anywhere else.

We never sell anything to anyone, and there is nobody we hand it to.

How long we keep it

As long as you play. Ask us and it goes. Two things go by themselves: private messages after ninety days, and the address of your connection ninety days after you were last online.

Two things stay even then, and it is fairer to say so than to hide it. The gold ledger keeps its lines, because it is a set of books and books with holes in them are worthless. And a beacon you lit stays lit — that happened in a world other people share, and no one can undo it. Neither of those two says anything about who you are.

What you can ask for

Write to [email protected] and you can ask us to show you everything we have about you, to correct it, or to delete it. You do not have to explain why, and it costs nothing. If you are under sixteen, ask a grown-up to send the message with you.

If you are under sixteen

In the Netherlands a child under sixteen needs a parent's permission before a website may keep personal details. That is exactly why we ask for none: you play under a made-up name, and a parent does not have to hand over anything.

Later there will be a way for a grown-up to link an email address to an account, so it can be recovered if the password and the code are both lost. That will be a choice, it will be for the parent, and it will never be required to play.

If something changes

The date at the top says when this page last changed. If something changes that matters — a new kind of data, a new company involved — it will say so in the game as well, not only here.

Who is behind this

Lumenwick is made and run by the makers of Lumenwick, in the Netherlands. Questions, complaints or requests: [email protected]. We answer every one of them ourselves.

If you think we are handling your details badly and we do not sort it out with you, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.