Privacy, in plain English
Draft for this early game build · October 19, 2026
Local play
Without optional online services, game progress is stored in this browser’s local storage on this device. It includes cash, inventory, upgrades, shift progress, achievements, and mystery clues. Clearing the site’s browser data removes this local save.
Optional cloud save
If the operator configures Cloudflare Access and D1, opening the Cloud save panel while signed in creates or updates a player record with your Cloudflare Access subject (an account identifier). The game save is uploaded only if you choose to upload it; save data and timestamps are then stored in D1. The game does not store your email address in its own database. Restoring replaces the local save only after confirmation. Deleting a cloud save does not delete purchase records, entitlements, or the account row; a complete account-deletion process is not implemented in this build.
Optional test purchases
If the operator configures Stripe test mode, Extra Stories can open a hosted test checkout. The game sends the account subject and selected product details to Stripe, and stores verified test-session, product, amount, currency, and entitlement records in D1. Checkout rejects live Stripe secret keys. No real-money payment flow is implemented in this build.
Analytics and advertising
The game does not send gameplay analytics events. A Google H5 Games Ad Placement adapter is included but is dormant: no advertising script is loaded and no ad is requested. It must not be enabled before publisher approval and updated privacy disclosures.
Service providers and logs
When optional services are configured, Cloudflare Access, Pages, and D1 provide account and hosting functions; Stripe test mode provides Checkout. Those providers may process operational request or test-payment data under their own terms and the operator’s settings. Review the live provider configuration and retention rules before launch.
Before public launch
This is a draft description of the code, not a final legal policy. Replace it with the operator’s contact details, retention periods, deletion process, and current provider disclosures before collecting player data or publishing commercial content.