Privacy Policy

Effective [OWNER: date] · Last updated 8 November 2026

1. 1. Who we are
2. 2. What we collect, feature by feature
3. 3. What’s stored on your device
4. 4. Why we use it (legal bases)
5. 5. Your choices and consent
6. 6. How long we keep it
7. 7. Who we share it with
8. 8. International transfers
9. 9. Security
10. 10. Your rights
11. 11. Children
12. 12. Complaints
13. 13. Changes to this policy
14. 14. Contact us

1. Who we are

End Camp (the game at play.endcamp.com and the website endcamp.com) is provided by Libiny Solutions [OWNER: confirm exact legal name and entity type with the Oklahoma Secretary of State; probably “Libiny Solutions LLC”, per its LinkedIn page], a company organised in [OWNER: state of organisation — likely Oklahoma], United States, and based in Tulsa, Oklahoma (“we”, “us”). Our address is [OWNER: registered / business address].

We decide how and why your personal data is used, which makes us the controller under European and UK data protection law. For anything about this policy or your data, email privacy@endcamp.com.

• We haven’t appointed a data protection officer, because the law doesn’t require one for what we do. Our privacy contact above handles all requests.
• EU representative: [OWNER: appoint an EU representative (Art. 27 GDPR) — services exist for small studios — and add its name and address]
• UK representative: [OWNER: appoint a UK representative (Art. 27 UK GDPR) and add its name and address]

This policy covers the game and the endcamp.com website. It doesn’t cover other companies’ websites, such as Stripe’s checkout page or Google’s and Apple’s sign-in pages. Their own privacy policies apply there.

2. What we collect, feature by feature

The age check (everyone)

Before you play for the first time, the game shows a content warning and asks for the month and year you were born. It also asks for the day, but only if you turn 18 this month. The answer is worked out on your device.

• 18 or over: your device remembers that you passed and which version of the warning you saw. If you sign in, your account records the same thing: when you confirmed and which version. Your birth date is never stored or sent.
• Under 18: the game can’t be played. Your device keeps only a note that it was blocked, so the question can’t simply be answered again. Nothing about you is sent to us, and you’re never asked about play statistics. Your browser still makes the normal requests to our host and to Google Fonts to load the page.

Guest play

As a guest, your save, settings and progress stay in your browser. No account data and no save is sent to us. Apart from the technical data any website sees (see “Website and hosting logs” and “Fonts from Google” below), the only thing that can leave your device is play statistics, if you allow them. You can also read the public leaderboard; that request doesn’t carry any ID.

Accounts and cloud saves (optional)

Gold, purchases and the server wallet (when available)

For signed-in players, the paid part of your gold is kept on our servers so it’s safe and works on every device. When this is live, we store:

• your paid gold balance, and the earned gold balance the game reports;
• a record of every gold transaction: spends, grants, Supply Line days, Premium Row payouts and refunds;
• what you’ve bought with real money: offers, outfits, your Supply Line’s dates and days, Premium Rows by season;
• for each purchase: the product, the payment provider, the provider’s session or receipt ID, and whether its in-game goods have been handed over.

Payments are processed by Stripe. You enter your card or other payment details on Stripe’s page, and they never reach us. Stripe tells us whether the payment succeeded, and we can see the transaction in our Stripe account: the amount, date, the email used and limited payment details such as card type and last four digits. Stripe uses your data as an independent controller for payment processing, fraud prevention and its legal duties, under Stripe’s privacy policy.

Notifications (optional, when available)

Notifications are off until you turn them on in the game and your browser asks your permission. They need an account. For each device you turn them on, we store:

• the push address your browser’s push service gave it, and its encryption keys;
• its time zone, so nothing arrives at night, and whether you allow notes at night;
• a label such as “Chrome on Android”;
• the categories you kept on, and when the game expects things such as full energy or a supply drop to be ready;
• a short log of notes sent (the kind and time).

We use these only to send those notes, through your browser’s push service (run by Google, Mozilla, Apple or Microsoft). As a guest, nothing is sent to us: the open game shows the notes itself.

The weekly leaderboard (when available)

While you’re signed in, each Proving Grounds challenge run you finish is sent to the online board. We receive: the week, the rules and modifier, your score, run time, kills, health left, the finish time, a checksum of the run, the game version, a random ID that marks your own runs on this device, and your name. Your name is your display name if you’ve set one, otherwise your survivor’s name.

• Public: your name, rank, score, run time, kills and the day you finished. Never the time of day, your account ID, your device ID or your email.
• Show my name on the global board is currently on unless you turn it off. [OWNER: before the online board goes live, hide names by default or ask before the first post (GDPR Art. 25(2)), then change this to “Your runs show as ‘Survivor #’ and a number unless you choose to show your name”] When it’s off, your runs show as “Survivor #” and a number, on every board, past and future. Names that look like emails, links or contact handles are replaced automatically.

Play statistics (only if you allow them)

If you choose Allow, the game sends small batches of events about play, for example: a session started or ended and how long you played; a story step completed; a zone entered; a death and its cause; a level reached; totals of what you crafted or built; base raids; store purchases (which offer, and the caps or gold spent); the frame rate and graphics performance; and error messages from the game’s own code.

Each event carries: a random install ID created by your browser when you allow statistics, a random ID for the visit, the time, the game version, the in-game day, chapter, story step, zone and level, your graphics setting, and the device type (touch or desktop) with a rough screen-width range.

• No name (not even your survivor’s), no email, nothing you type, no advertising IDs and no fingerprinting.
• The game doesn’t collect your IP address. Our database provider sees it in its request logs, as with any web request.
• If you sign in while statistics are on, our server records your account ID with your events, and our progress summary links your install ID, and so all statistics sent from that browser (including earlier ones), to your account. As a guest, they aren’t linked to any account.

Website and hosting logs (everyone)

When your browser loads endcamp.com or the game, our host Vercel and our database provider Supabase automatically process technical data: your IP address, browser and device type, the page or address requested, and the time. They use it to deliver the service, keep it secure and fix faults. We don’t use it to identify or profile players, and we don’t use any analytics or advertising tags on the website.

Fonts from Google

The website and game currently load their fonts from Google Fonts. To do this, your browser connects to Google’s servers, which receive your IP address and browser details. Google says it doesn’t use this to profile you. [OWNER: strongly recommended: self-host Barlow, Barlow Condensed, IBM Plex Mono and the game’s other fonts (all openly licensed) on the site and the game (German courts have held Google Fonts loaded without consent unlawful, LG München I 3 O 17493/20), then delete this paragraph, its legal-basis row and its sharing row]

When you contact us

If you email us, we keep your email address, your message and our reply, so we can help you and keep a record of refunds, appeals and privacy requests.

What we don’t collect

No birth date, no precise location, no contacts, no camera or microphone, no advertising IDs, no tracking across other websites or apps, and no sensitive data such as health or beliefs. End Camp has no chat, no ads and no multiplayer. We don’t make automated decisions about you that have legal or similarly significant effects.

3. What’s stored on your device

The game uses your browser’s storage (localStorage, sessionStorage and IndexedDB) and a service worker cache. It doesn’t set cookies. Everything below is needed for the game or for a feature you chose. The only exception is the two play-statistics items, which exist only after you allow statistics. Stripe’s checkout page, on Stripe’s own site, may use its own cookies for payment and fraud prevention.

None of the necessary items are used for statistics or tracking. Clearing your browser’s site data for End Camp removes all of them. For a guest, that also deletes the save. When you’re not signed in, Settings → Delete this device’s data does the same from inside the game, keeping only your answer to the age check.

4. Why we use it (legal bases)

If you’re in the EU, the UK or another place with similar laws, we must have a legal basis for each use of your data. Here they are:

Where we rely on legitimate interests, we’ve weighed them against your rights, and you can object (section 10). You don’t have to give us any personal data to play: an account is optional. If you want an account, we need an email address; without one we can’t create it.

We use account emails only for your account: confirmations, sign-in links, password resets and important notices such as changes to our terms. We don’t send marketing emails unless you separately opt in, and every marketing email would let you unsubscribe.

5. Your choices and consent

• Play statistics are asked once, after the age check, with two equal choices: Allow or No thanks. Nothing related to them is stored or sent until you answer. The game plays exactly the same either way. You can change your answer any time in Settings → Share play statistics. Turning them off stops them straight away and deletes the install ID and anything not yet sent from your device. Turning them on again later creates a new ID. Statistics already sent stay on our servers for the periods in section 6. If you want them deleted, email privacy@endcamp.com. If you were signed in, we find them by your account. As a guest, send us your install ID before turning statistics off [OWNER: show the install ID in Settings], because once it’s deleted we can’t tell which statistics were yours.
• Global Privacy Control and Do Not Track: if your browser sends either signal, we treat it as a “no” to statistics. We don’t ask, and the setting stays off. Because End Camp doesn’t track you or sell or share your data, there is nothing else for these signals to switch off.
• Notifications can be turned off in Settings → Notifications or in your browser. Turning them off in Settings deletes the device’s entry on our servers at once. If you turn them off in your browser, we delete it the next time you open the game or when the push service tells us the device is gone.
• Leaderboard name: turn Show my name on the global board on or off in the weekly board panel at any time.
• Guest play: play without an account and nothing about your game leaves your device, apart from statistics you allow.

Withdrawing consent doesn’t affect anything we did lawfully before you withdrew it.

6. How long we keep it

Account deletion. Delete your account in the game: Settings → Account → Delete account. The game lists what will be deleted, asks you to type DELETE, and asks you to sign in again if your last sign-in was more than 10 minutes ago. The account and the data linked to it are then deleted straight away: your profile, cloud saves and their backups, wallet, purchase records in our database, notification devices, leaderboard runs, the play statistics linked to your account ID, and your sign-in audit records. Your saves, paid gold, outfits and passes can’t be restored afterwards. You choose whether the survivor on your device stays there as a guest save (without anything bought with real money) or is removed too. Copies in our database backups disappear as those backups are rotated out (see above). We keep only a daily count of deleted accounts, with nothing that identifies you.

Stripe, our payment provider, keeps its own records of each payment for as long as tax and payment law requires (“Payment and tax records” above). Deleting your account doesn’t remove those, and we don’t keep a copy linked to you in our database.

If you can’t use the game, email privacy@endcamp.com from your account email address. We’ll confirm before deleting, then delete the account and the data linked to it within 30 days, except for records we must keep by law.

We don’t currently delete accounts for inactivity. If that changes, we’ll email you first.

7. Who we share it with

We don’t sell your personal data, and we don’t share it for targeted or cross-context behavioural advertising. We share it only with:

We may also disclose data:

• if the law requires it, for example a valid court order, and only what is required;
• to protect players, ourselves or others from fraud or harm;
• to professional advisers under a duty of confidentiality;
• to a company that takes over End Camp, which would have to keep to this policy. We’d tell you before that happens.

The leaderboard is public by design: anyone can see the names and scores on it (section 2).

8. International transfers

We are a US company, and our providers mainly store and process data in the United States. Some, such as Vercel’s network and the push services, operate worldwide. So if you play from Australia, the EU, the UK or elsewhere, your data is transferred to the US and possibly other countries, whose laws may protect it less than your own. The people who run End Camp may also access data from Australia, for example to answer support and privacy requests or look at play statistics.

• EU, EEA, Swiss and UK players: where a provider is certified under the EU–US Data Privacy Framework (and its UK and Swiss extensions), we rely on that. Otherwise, we rely on the European Commission’s Standard Contractual Clauses, with the UK addendum, in each provider’s data processing agreement. For access from Australia, which has no EU or UK adequacy decision, we rely on [OWNER: Standard Contractual Clauses (with the UK addendum) between Libiny and the people or contractors who access data from Australia]. You can ask us for a copy of the relevant safeguards. [OWNER: accept the Vercel, Supabase and email-provider DPAs and keep copies.]
• Australian players: your personal information is disclosed to recipients in the United States [OWNER: and any other provider regions, e.g. the Supabase project region and Vercel’s edge network]. We choose providers that protect it to a standard comparable to the Australian Privacy Principles, and we remain accountable for how they handle it.

9. Security

We protect your data with measures suited to a small game studio:

• Connections are encrypted (HTTPS), and passwords are stored only as hashes.
• Database rules let each player read only their own rows. The game can only change balances, purchases and scores through server functions that check them. Only our server can credit paid gold.
• Play statistics can be added but not read through the public key.
• Access to our systems is limited to the people who run End Camp.

No system is perfectly secure. If a breach is likely to put your rights at risk, we’ll tell you and the relevant regulators as the law requires.

10. Your rights

We give these rights to every player, wherever they live:

• Access: get a copy of the personal data we hold about you.
• Correction: fix data that is wrong or incomplete.
• Deletion: delete your account and its data yourself in Settings → Account → Delete account, or ask us to (section 6).
• Portability: get your data, including your cloud save, in a machine-readable format (JSON).
• Objection and restriction: object to uses based on our legitimate interests, or ask us to limit how we use your data while a question is sorted out.
• Withdrawing consent: turn off statistics or notifications at any time (section 5).
• Appeal: if we refuse a request, ask us to reconsider, and complain to a regulator (section 12).

How to ask. Email privacy@endcamp.com, ideally from your account’s email address, so we can confirm it’s you without asking for more. We reply within one month (within 30 days for Australian requests). In complex cases we may extend this, and if we do we’ll tell you why. Requests are free, unless they are clearly unfounded or excessive. We won’t treat you differently for using your rights.

Players in the EU and UK

You have the rights in Articles 15 to 22 of the GDPR and UK GDPR, listed above, and the right to complain to your data protection authority.

Players in Australia

We handle personal information in line with the Australian Privacy Principles. You can access and correct your personal information, and you can play without identifying yourself by playing as a guest. If you’re unhappy with how we handled your information, complain to us first (section 12).

Players in the United States

• We don’t sell personal information, and we don’t share it for cross-context behavioural advertising. We use sensitive personal information (your account login) only to sign you in and keep your account secure, as the law permits. We don’t use it to infer anything about you.
• The categories we collect are: identifiers (email, account ID, random install and device IDs, IP address in provider and sign-in logs, and the name and picture link Google or Apple share if you sign in with them); commercial information (purchases and wallet transactions); internet and device activity (gameplay events and technical logs; gameplay events only with your consent). We don’t draw inferences to profile you.
• Residents of US states with consumer privacy laws can use the rights above, including appealing a refusal. You can use an authorised agent; we may ask them to show your permission.
• California (CalOPPA): we honour Do Not Track and Global Privacy Control as described in section 5, and we don’t allow third parties to track you across websites through End Camp.

11. Children

End Camp is for adults only and is not directed at children. Anyone under 18 is blocked by the age check, and nothing about them is sent to us. We don’t knowingly collect personal data from anyone under 18, including children under 13 as defined by the US Children’s Online Privacy Protection Act (COPPA). If we learn that an account belongs to someone under 18, we close it, delete its data, and refund any purchases made on it. If you believe a child is using End Camp, please email privacy@endcamp.com.

12. Complaints

Please contact us first at privacy@endcamp.com. We’ll acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you’re not satisfied, you can complain to a regulator:

• Australia: the Office of the Australian Information Commissioner (OAIC).
• European Union / EEA: the data protection authority in the country where you live or work. The list is at edpb.europa.eu.
• United Kingdom: the Information Commissioner’s Office (ICO).
• United States: your state’s Attorney General, or the Federal Trade Commission.
• Elsewhere: your local data protection authority.

13. Changes to this policy

We’ll update this policy when the game or the law changes, for example when a feature marked “when available” goes live. For changes that matter, we’ll tell you in the game and by email if you have an account, before they take effect, and update the date at the top. If a change affects something you consented to, such as what play statistics collect, we’ll ask you again.

14. Contact us

Libiny Solutions [OWNER: exact legal name and entity type]
[OWNER: registered / business address], Tulsa, Oklahoma, United States
Privacy, data requests and account deletion: privacy@endcamp.com
Game help and purchases: support@endcamp.com
Company website: libiny.com

See also our Terms of Service.