Privacy

Last changed 7 October 2026.

Who is responsible

Carrion Sun is made and run by the maker of Carrion Sun, an independent developer in the United States ("we"). For anything about your data, write through the contact page. We answer within one month.

What the game collects, and why

Kept in your browser only

Your lives, saves, seals, settings and language are stored in your browser's local storage so the game can work, including offline. They are not sent anywhere unless you sign in (below). Clearing your browser's site data removes them.

Anonymous play data (on unless you turn it off)

While you play, the game sends: which class, race and kit you chose; every choice made in a life and where that life ended; which screens were opened; error messages from the game itself; whether you are on a phone or a computer; your browser's language; the game's version; and the site that sent you here (for example "t.co"), with any campaign tag on the link.

This goes out under random ids that last for one visit or one life. Nothing is stored to connect one visit to the next, and we cannot tell who you are from it. Your hero's name is never sent.

We use it to see where the game is too hard, too dull or broken. Our legal ground is our legitimate interest in improving the game with data that does not identify you. You can object at any time: turn off Share anonymous play data in Settings and it stops.

A count of finished lives

When a life ends, the game counts it with no id of any kind: won or lost, race, class, level, where it ended, what killed you, and which life it was. This cannot be connected to you or to anything else you did, and it is sent even when play data is off.

Remembering your browser (only if you say yes)

The game asks once whether it may keep a random id in your browser's local storage. If you agree, your play data goes out under that id, so we can tell that the same player came back. Our legal ground is your consent. You can withdraw it at any time in Settings by turning off Remember this browser between visits, and Delete the play data this browser has sent erases what we hold under that id.

Signing in with Google (optional)

If you sign in, we keep your Google account id, your email address and a copy of your save, so your records and your purchase follow you between devices. A session cookie keeps you signed in. Our legal ground is providing the service you asked for. You can sign out, or delete the account and its save, in Settings at any time.

The daily board

The board is read when you open it. If you post a score, the game sends the name you type, the choices of that one life, and a random id made only for the board so your line can be shown as yours.

Buying the game

Payments are taken by Stripe. Stripe collects your email address, payment details and country; we never see your card number. We keep a record of the order: your email, country, the amount, the date and your licence key. Our legal grounds are our contract with you and the tax and accounting rules that apply to us.

The waitlist

If you leave an email address on the waitlist, we keep it, with the page it was left on and the site that sent you, to send you one message when the whole game goes on sale. Our legal ground is your consent. Ask through the contact page and we remove it.

Writing to us

A message sent through the contact page is kept with the reply address you give, if any, so we can answer.

This website

The website counts how many times its page was seen and its buttons pressed each day, and from which referring site. These are plain totals with no id behind them. The page sets a marker in your browser's session storage so that one visit is counted once; it is gone when you close the tab. There are no cookies on the website, no advertising trackers and no third-party analytics.

The server

Like every web server, ours sees your IP address when your browser connects. We use it in memory to limit how fast one address can send requests, and we do not store it with your play data. Our hosting provider may keep its own technical logs for security.

Who else handles the data

• Replit hosts the website, the game's server and its database, in the United States.
• Stripe takes payments, if you buy.
• Google confirms who you are, if you choose to sign in.

We do not sell personal data, share it for advertising, or give it to anyone else unless the law requires it.

Where the data is

The data is processed in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, that means it leaves your country. We rely on the safeguards our providers offer for such transfers, such as standard contractual clauses.

How long it is kept

• Play data and the count of finished lives: 24 months, then deleted.
• Messages from the contact page: 12 months, then deleted.
• A waitlist address: until the message has been sent, or you ask us to remove it.
• An account and its save: until you delete it.
• Order records: for as long as tax and accounting rules require.

Your rights

Wherever you live, you may ask us what we hold about you, and ask us to correct or delete it. If you are in the EEA, the UK or Switzerland, the law also gives you the right to object to processing, to have it restricted, to receive your data in a portable form, and to withdraw consent at any time without affecting what was done before. Residents of some US states have similar rights. We do not sell or share personal data as those laws define it.

Most of this you can do yourself in the game's Settings. For the rest, use the contact page. Anonymous play data carries nothing that identifies you, so we cannot look it up for a named person; if your browser is remembered, Settings can delete what it sent.

You also have the right to complain to the data protection authority where you live, for example the CNIL in France or the ICO in the United Kingdom.

Children

Carrion Sun is a grim game written for adults. It is not directed at children under 16, and we do not knowingly collect personal data from them.

Automated decisions

We make no decisions about you by automated means and do no profiling.

Changes

If this page changes in a way that matters, the date at the top changes, and where the game needs a new answer from you it will ask again.