Privacy policy

Last updated: 13 October 2026

This policy explains what information Depthfall (depthfall.online) keeps when you visit the site or play the game, why, and what you can do about it. Depthfall is a free browser game.

Depthfall and this website are operated by XYZ Studio, which is responsible for the data described here. Questions or requests: contact@depthfall.online

What stays on your device

The game stores a few things in your browser's local storage so they're still there next time: your settings (sound, graphics, key bindings, controller and touch layout), your deepest floor, your last chosen hero, the name you last entered and your recent runs. This data never leaves your device unless you start a run or save your hero (see below). The game also keeps a random code for the current tab in session storage for the players online counter (see below); it is gone when you close the tab. You can delete it at any time by clearing this site's data in your browser.

Depthfall itself does not use cookies and does not run analytics or tracking scripts.

The Hall of Heroes leaderboard

When you start a run, a record for your hero is created on our server so it can appear on the global leaderboard. While the run is played the game updates it about once a minute and whenever you reach a new floor, and when the run ends the hero is listed as fallen. The record contains:

• the name you enter (or "Nameless Hero" if you leave it empty), your hero class, the floor you reached, your kills, how long the run has taken, how many stars it has earned and whether the hero is alive or fallen;
• a random secret made for the run, kept on our server only as a one way hash, which proves that later updates come from the same run;
• a scrambled, one way hashed form of your IP address. It is used only to limit how many heroes and saves one connection can make, to keep spam off the board. We don't store your IP address itself.

Leaderboard entries are public and are kept for as long as the leaderboard exists. Don't use your real name or anything personal as your hero's name if you don't want it shown. To have an entry removed, contact us with the name, class and approximate date of the run.

The legal basis for this is our legitimate interest in running a fair public leaderboard (Article 6(1)(f) GDPR).

Save codes

If you choose Save and Quit, the state of your hero (class, name, gear, inventory, gold, skill layout, floor and run timer) is stored on our server under a random 12 digit code, so you can continue on any device. The code is kept only in a keyed one way hashed form. The saved state is deleted the moment the code is used to load the hero, and automatically after 30 days. Anyone who has the code can load the hero once, so keep it to yourself.

The legal basis for this is performing the service you asked for (Article 6(1)(b) GDPR).

Players online counter

While the game is open in a visible browser tab, it tells our server about once a minute that someone is playing, so the website can show how many players are in the game right now. Each signal contains only a random code made for that browser tab (it is not linked to your name, scores or device) and, like the leaderboard, a scrambled, one-way hashed form of your IP address, used only to stop one connection from inflating the count. A tab that closes or stays hidden drops off within a few minutes, and these records are deleted within an hour. Only the total number of players is ever shown.

The legal basis for this is our legitimate interest in running the website and showing that the game is active (Article 6(1)(f) GDPR).

Donations

The Donate buttons open a payment page hosted by Stripe in a new tab. Payments are handled entirely by Stripe: we never see or store your card details, and the Stripe page is governed by Stripe's own privacy policy. Donating is optional and has no effect on the game.

Server logs

Like any website, our hosting provider may record technical request data (such as IP address, browser type, the page requested and the time) in server logs. These logs are used only for security and to keep the site running, and are deleted after a limited period.

Advertising

Depthfall is free to play and is supported by advertising served by Google AdSense. Where ads are shown:

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
• You can opt out of personalised advertising in Google's Ads Settings. Learn more in how Google uses information from sites that use its services.
• If you visit from the European Economic Area, the United Kingdom or Switzerland, you'll be asked for your consent before any advertising cookies are used, and you can change your choice at any time from the privacy link shown with the consent message.

Children

Depthfall is not directed at children under 13, and we do not knowingly collect personal information from them.

Your rights

If you are in the EU, the UK or another region with similar laws, you have the right to access the personal data we hold about you, to have it corrected or deleted, to object to its use and to complain to your local data protection authority. Because we only hold a hashed IP address and the name you chose, contact us with details of the run so we can find it.

Changes

If this policy changes, the new version will be posted on this page with a new date at the top.