Privacy Policy

Last updated: 2026-04-27

This page explains what data is collected when you visit Emberveil, the RSG Demos hub on GitHub Pages, or any of the sister demos hosted under the same property. The short version: we use Google Analytics 4 to count visits and gameplay milestones, and only after you tap Accept on the consent banner. Nothing leaves your browser otherwise.

What we collect (only with consent)

• Page views via Google Analytics 4 (anonymised IP).
• Gameplay milestone events — run start, run win, run death, level-up, boss kill, class unlock, fame thresholds. No player names. M330
• Browser metadata reported by GA4 (referrer, device class, region at country level).

What we never collect

• Email addresses (unless you sign up for cloud saves; in that case Supabase stores your address against your account so we can sync your saves — never shared with GA4).
• Save-game contents (those live in your browser's localStorage and, if you sign in, in your private Supabase row).
• Character names or chat input.

Consent

The first time you visit any page on this property, a banner asks whether you want analytics. The choice is stored in localStorage.rsg_consent_v1 and a same-site cookie. While the decision is granted, GA4 loads. While it is denied or unset, no analytics scripts hit the wire.

Same-origin browsers (Emberveil & the RSG Demos hub on radgh.github.io) share that decision automatically — you only consent once. The vanity domain emberveil.radgh.com is a separate origin and would prompt you again.

Changing your mind

Open Settings → Reset Progression in-game (which also wipes the consent flag), or clear site data in your browser settings. The banner re-appears on the next page load.

Cloud saves & account data

If you sign in (email/password or Google), Supabase stores:

• Your account email and an opaque user id (managed by Supabase Auth).
• Save slots in the saves table (one row per save you push).
• Per-run statistics in the run_stats table — capped at the latest 100 rows per account by an automatic trim trigger.

All of those tables enforce row-level security so only your account can read or modify your rows. Service-role access is internal only and not used to look at individual users.

Data retention

• GA4: as configured in our GA property (default 14 months).
• Cloud saves: stored as long as your account exists. Delete a save slot in-game or close the account to remove.
• Run stats: capped at 100 most recent rows per account; older rows roll off automatically.

Your rights (GDPR / CCPA)

• Access — sign in and visit Settings to see your stored saves and run history.
• Erase — Settings → Reset Progression wipes local data; deleting your account removes everything in Supabase.
• Withdraw consent — clear the banner choice and reject on the next visit.

Contact

Project owner: Radley Sustaire. Reach out via the project email for any privacy or data-handling question.