Privacy Policy
In short: we collect only what the game needs: your email to sign you in, your game progress, and anything you choose to add (a name, an avatar link, feedback). There are no ads, no analytics and no tracking cookies, and we never sell your data. You can delete your account yourself at any time from your Profile.
Who we are
Wen Lambo is run by Puppy Tools Ltd, a company registered in England and Wales (company number 17243531) ("we", "us"). We are the controller of the personal data described here. Contact: privacy@playwenlambo.com.
What we collect, and why
| Data | Why | Legal basis (UK/EU GDPR) |
|---|---|---|
| Email address | To create your account and send you sign-in codes and links. We don't send marketing emails. | Contract (running your account) |
| Sign-in codes and sessions | To keep you signed in. Codes are stored hashed and expire within minutes; a session lasts up to 30 days. | Contract |
| Game save and progress (skills, stash, actions you take and when) | To run the game, check progress is genuine, and keep your save across devices. | Contract; legitimate interests (fair play) |
| Days you were active (the date only, once per day) | For playtest retention stats, which staff see only as totals. Deleted with your account. | Legitimate interests (improving the game) |
| Your Discord account, only if you link it (your Discord user id and username) | To give you roles on the Wen Lambo Discord server (and add you to it when you link). We never see your Discord password or messages. Deleted when you unlink or delete your account. | Consent (you choose to link it) |
| Display name, avatar link, chosen title (optional) | Shown publicly on your profile, leaderboards and event boards. We store only the link to your avatar image, never the image. | Contract |
| Event contributions and rewards | To run community events, rank contributors and pay out rewards. | Contract |
| Invites: who invited you (if you joined from an invite link or code), when, and whether it counted | To give you the Welcome Fren boost, and the player who invited you their invite rewards. The player who invited you sees your display name and total level on their invite card. | Contract |
| DAO membership: your DAO, rank, when you joined, and what you donated to it | To run DAOs. Your DAO, its tag and your rank are public; donations are shown as DAO totals. | Contract |
| Feedback and bug reports you send | To fix problems. Technical details (app version, screen, browser, last error) are attached only if you tick the box. | Legitimate interests (improving the game) |
| Reports and moderation records | To handle reports about names or avatars, and to keep a record of staff actions with their reasons. | Legitimate interests (a safe community) |
Things we don't collect
- No analytics, advertising or tracking tools, and no third-party cookies.
- We don't store your IP address. It's used briefly in memory to limit abuse (rate limiting) and then discarded, and our web server doesn't keep access logs.
- No payment details, crypto wallets or wallet addresses: the game has no real money or real crypto in it.
- We don't knowingly collect data from children (see below).
Cookies and storage on your device
We use one strictly necessary cookie to keep you signed in. The game also keeps a copy of your save, unsent actions and a few preferences (such as which notices you've dismissed) in your browser's local storage, so it works offline. None of this is used for tracking, so no cookie banner is needed. Signing out or deleting your account clears it.
What's public
If you set a display name, other players can see it with your avatar link, levels and XP on the leaderboards, your profile and skill board, event ranks and titles. Your email address is never shown to other players.
Who we share data with
We share data only with the service providers that run the game for us, under contracts that require them to protect it:
- Hosting: OVHcloud, in a data centre in Canada: runs the game and stores its database and backups. Canada is recognised by the UK and the EU as giving personal data adequate protection.
- Email delivery: Resend (United States): sends sign-in emails. This involves a transfer outside the UK/EU, protected by standard contractual clauses.
- Discord (United States), only if you link your Discord account: we tell Discord which roles to give you on our server. Discord's own privacy policy covers your Discord account.
We don't sell or rent your data, and we'd only disclose it otherwise if the law requires it.
How long we keep it
- Account data: for as long as you have an account. Deleting it removes your email, name, avatar, save and leaderboard places straight away.
- Backups: rotated, so deleted data disappears from them within 30 days.
- Kept after deletion, linked only to a random ID that no longer identifies you: event contribution and reward records (so event results stay correct), invite records (so the other player's invite count stays correct), moderation records, and anonymised feedback.
- Sign-in codes: expire within minutes. Sessions: end after 30 days or when you sign out.
Your rights
Depending on where you live (including under the UK and EU GDPR), you can ask to access, correct, export or delete your data, or object to or restrict how we use it. You can delete your account yourself under Profile → Account → Delete my account. For anything else, email privacy@playwenlambo.com and we'll reply within one month. You can also complain to your data protection authority (in the UK, the Information Commissioner's Office).
Children
Wen Lambo isn't meant for children under 16, and you must be 16 or older to create an account. If you believe a child has given us their data, contact us and we'll delete it.
Security
We use HTTPS everywhere, store sign-in codes and session tokens only as hashes, keep server secrets out of the code, and limit staff access by role. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities as the law requires.
Changes
We'll update this page if anything changes, and tell players in the game's "What's new" notes about anything significant.