Privacy Policy

The short version

• We collect what the game needs to run: your account, your game progress, purchases, and simple usage and error reports.
• No ads and no advertising trackers. We use Google Analytics only if you tap Accept, and never for players under 13. We never sell your personal information.
• You can download your data or delete your account any time in Settings > Privacy & data.
• Accounts are for players 13 and older. Younger players can play offline, or with a parent's consent.

Who we are

Lost Chapters is made by DevBerri Inc. ("DevBerri", "we", "us"), 255 South Orange Avenue, Suite 104 #1419, Orlando, FL 32801. Contact: mrdr10000@gmail.com. Website: developmentindustries.org.

What we collect and why

• Account: your username, email address, password and recovery code (both stored only as secure one-way hashes, never readable), and a record that you agreed to our Terms and this policy (version and time). If you are 13 to 17 we keep your birth year so we know when a parent's permission is needed for purchases; for adults we only keep "13 or older, confirmed". Why: to create your account, sign you in and help you get back in if you forget your password.
• Game data: your collection, decks, gold and Gems, progress, ratings, match history and replays, Society membership and friends list (and, for older accounts, the record of trade offers made before player trading was retired in October 2026). Why: to run the game and save your progress on any device.
• Guest play: when you open the game online we create a guest record with a random name so you can play before signing up. It has no email or real name.
• Purchases: what you bought, the price, the time, the status, the PayPal order reference, and your agreement to the purchase terms. PayPal handles the payment itself: we never see your card or bank details. Why: to deliver your Gems, keep receipts and meet accounting and tax rules.
• Feedback and error reports: what you type into the Feedback form, and technical reports when something breaks (the error, the screen, the game version and your browser type). Why: to fix bugs and answer you.
• Usage events: simple first-party events such as "match started" or "pack opened", linked to a random device id kept in your browser and, when signed in, your account id. We do not store IP addresses with them. Why: to see what works and improve the game.
• Analytics (only if you accept): if you tap Accept on the analytics choice, Google Analytics records which pages and game screens you view and a few game moments (signing up, finishing the tutorial, your first match, opening a pack, a purchase with its price and receipt reference, a Steam wishlist click, earning the Founder badge), plus your device and browser type, screen size, the page that sent you to us, and an approximate location (country or city) that Google works out from your IP address. Google Analytics 4 does not log or store IP addresses. We send no name, email, username or account id, and we keep Google's advertising features and Google signals switched off. Why: to see which parts of the game and the website work and improve them. Legal basis: your consent, which you can withdraw at any time.
• Parent requests: if a player under 13 asks for a parent's consent, the parent's email address they enter. Why: to contact that parent once about consent.
• Device and network signals (fair starter rewards): when an account is created and when a starter reward is claimed (free packs, creator or friend codes, beginner rewards), we store the random device id kept in your browser, a one-way hash of your network prefix (the first part of your IP address, never the full address) and a short hash of your browser type. We use no invasive fingerprinting: no canvas, font or hardware probing. Why: to stop one person farming new-account rewards with many accounts, while families sharing a network are unaffected (legitimate interests). Kept while the account exists.
• Discord (only if you link it): your Discord user id and Discord name, so we can add you to our Discord server and keep your community roles (Founder, Playtester, level) in step with the game. We use Discord's sign-in once and never store your Discord password or login token. If you choose "Post to Discord", your display name and that replay link or card are posted in our public Discord channel. Unlink any time from your account; deleting your account deletes the link. Not available to players under 13. Why: to run the community features you asked for.
• Short-lived technical data: our servers see your IP address when you connect; we use it in memory to stop abuse (for example too many sign-in attempts). Our hosting providers may keep standard server logs for a short time for security.

We do not collect your location, contacts, photos or microphone, and we do not use advertising IDs.

Who helps us run the game

We share data only with service providers that run parts of the game for us, under their own privacy terms:

• Railway (United States): the game server and database.
• Netlify: hosts the game's web pages.
• PayPal: processes payments when you buy Gems (PayPal's own privacy statement applies to what you give PayPal).
• Discord: our community server, only if you link your Discord account or post to it (Discord's own privacy policy applies to your Discord account).
• Resend: sends account emails (welcome, password reset, friend notices) once email is switched on.
• Google Analytics (Google LLC, and Google Ireland Limited for players in the EU and UK): measures how the game and website are used, only after you accept. Google processes this data for us as our service provider (processor) under its data processing terms, and may process it in the United States.

The game's fonts and its 3D graphics library are served from our own site, so loading them doesn't send anything to another company.

We may also share information if the law requires it, to protect players or the game from fraud or abuse, or as part of a sale or merger of the business (this policy would still apply). We never sell or rent personal information and never share it for advertising.

What other players see

Your display name or username, avatar and calling card, level, rating, match results, Society and friends activity (such as online status to your friends). Never your email address.

How long we keep it

• Account and game data: while your account exists. When you delete it, it is removed from the live database right away and from our backups within 30 days.
• Usage events and error reports: 90 days. Feedback messages: 365 days.
• Google Analytics data (only if you accepted): up to 14 months, then Google deletes it. The analytics cookies in your browser expire after 13 months, or when you decline or clear them.
• Backups: nightly copies, each kept for 30 days.
• Purchase records: kept as long as accounting and tax law requires, even after an account is deleted; they are then no longer linked to your account.
• Parent requests: until handled, and at most one year.

Your choices and rights

• See and download: Settings > Privacy & data > Download my data gives you a copy of your account data as a file.
• Correct: change your email or password in your account settings, or ask us to fix anything else.
• Delete: Settings > Privacy & data > Delete my account, or email us from your account's email address.
• Analytics: choose Accept or Decline when we first ask. Change your mind any time with Cookie settings (in the website footer, or Settings > Privacy & data in the game). Declining stops Google Analytics and removes its cookies. You can also use the Google Analytics opt-out add-on.
• Ask us anything: mrdr10000@gmail.com, or by mail to DevBerri Inc., 255 South Orange Avenue, Suite 104 #1419, Orlando, FL 32801. We answer within 30 days.

Depending on where you live (for example the EU, the UK or California) you may have further rights, such as to object to or restrict some uses, or to complain to your data protection authority. We give every player the same rights. Where EU or UK law applies, we use your data to provide the game you asked for (contract), to keep it secure and improve it (legitimate interests), where you agreed (consent), and to meet legal duties such as accounting.

Children

Accounts are for players 13 and older. We don't knowingly collect personal information from children under 13 without a parent's consent. Younger players can play offline, where progress stays only in their own browser and nothing is sent to us, or a parent can give consent by emailing mrdr10000@gmail.com. We never load Google Analytics for players under 13 (offline-only mode or an under-13 account), or in the Steam version of the game. If we learn that we collected a child's information without consent, we delete it. Parents can contact us to review or delete their child's information.

Security

Passwords and recovery codes are stored only as one-way hashes, connections use HTTPS, and only the operator can reach the database. No system is perfectly secure, so please use a password you don't use anywhere else.

Where data is stored

Our servers are in the United States. If you play from elsewhere, your data is transferred to and stored in the United States.

Changes

If we change this policy we update the date below. For important changes we ask you to accept the new version in the game.

Related

Terms of Service · Refund Policy · Cookie Policy