Privacy Policy
Last updated: 6 October 2026
The short version
- We collect what it takes to run your account and the game: your email, a password we store only in scrambled (hashed) form, your in-game country name, and what you do in the game.
- Other players see your country name, a public player id and your game activity. They never see your email address.
- No ads, no tracking cookies, no analytics, and we don't sell or share your data for advertising.
- You can delete your account at any time in the app or on this website.
- LandLocked is not for children under 13 (under 16 in the EU, EEA and UK).
1. Who we are
LandLocked (the game, the LandLocked apps and landlocked.io) is run by Kiteware, Sepapaja 6, 15551 Tallinn, Estonia ("we", "us"). We are the controller of the personal data described here. You can reach us at support@landlocked.io.
2. What we collect
When you create an account
- Email address — to sign you in, and to send password-reset emails you ask for.
- Password — stored only as a one-way hash (bcrypt). We can't read it.
- Country name — the in-game name you choose. It is public in the game.
- Age check — you give your month and year of birth so we can check you are old enough to play. We check it once and don't store it. We keep only whether you live in the EU, EEA or UK or elsewhere, because the minimum age differs.
- Terms acceptance — the date you accepted the Terms of Service and which version.
When you play
- Game data — your land, buildings, units, workers, resources, research, market orders and trades, battles and their results, scores and leaderboard positions, alliance membership and role, and when you were last active.
- Messages — what you write in alliance chat, and anything you send us, such as a report about another player or a support email.
- Moderation — reports you make (who, why, and a copy of any chat message you report), reports others make about you, and the players you block. Your block list is visible only to you.
Technical data
- Connection data — your IP address and basic request details (time, page or endpoint, app version). Our servers and hosting providers process these to deliver the game, keep it secure and limit abuse (for example, too many sign-in attempts).
- On your device — the app and this website keep your sign-in session on your device so you stay signed in. The website uses your browser's local storage for this and to remember a few display choices (such as pausing animations); it sets no cookies.
We don't use advertising, analytics or tracking tools, and we don't ask for your location, contacts, photos or other device data. The website's fonts are hosted by us, so loading a page doesn't contact a third-party font service.
3. How we use it, and our legal bases
| Purpose | Legal basis (EU/UK GDPR) |
|---|---|
| Create and run your account; provide the game, its multiplayer features and chat; send password-reset emails | Performance of our contract with you (the Terms of Service) |
| Check you meet the minimum age | Legal obligation, and our legitimate interest in not providing the game to children |
| Keep the game secure and fair: prevent cheating, fraud and abuse; handle reports; enforce the Terms | Our legitimate interests in a safe, fair game for all players |
| Fix bugs and improve the game, using game data in aggregate (for example, the world statistics on our home page) | Our legitimate interest in improving the game |
| Meet legal requirements, respond to lawful requests and defend legal claims | Legal obligation; our legitimate interests |
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Who can see it
Other players
Other players can see your country name, your public player id, your territory, buildings and units as the game reveals them, your alliance, your leaderboard standing and battle results involving you. Members of your alliance see the messages you post in its chat. Your email address is never shown to other players.
Service providers
The game's servers and databases run on our own Kiteware infrastructure, so your game data doesn't pass to an outside host. Beyond that, we use a small number of providers who process data on our behalf, under contracts that limit them to doing so:
- Cloudflare — hosts and delivers this website.
- Postmark (ActiveCampaign) — sends password-reset and other account emails.
- Apple and Google — distribute the apps. If you download LandLocked from the App Store, TestFlight or Google Play, their own privacy policies apply to that.
Others
We may disclose data if the law requires it, to protect the safety of players or others, or as part of a sale or reorganisation of the game, in which case this policy continues to apply to your data. We don't sell your personal information, and we don't share it for cross-context behavioural advertising.
5. Where it is processed
Our providers may process data in the United States and other countries outside your own. Where EU or UK law applies, we rely on adequacy decisions (including the EU–US Data Privacy Framework where a provider is certified) or the European Commission's Standard Contractual Clauses and the UK Addendum to protect transfers.
6. How long we keep it
- Your account and game data — while your account exists. When you delete your account we remove it from the live game straight away, and from our systems within 30 days, apart from residual backup copies, which are overwritten on our providers' normal backup cycle.
- Alliance chat — each alliance keeps only its most recent 100 messages; older ones are deleted automatically. Your messages are removed or de-identified when you delete your account.
- World resets — LandLocked is in development and the world may be reset; a reset deletes game progress but keeps your sign-in so you can play again.
- Connection logs — kept by our hosting providers for a limited period for security and troubleshooting, then deleted.
- Reports and support emails — as long as needed to deal with them and to keep the game safe, and no longer than 2 years. A report you made stays on record after you delete your account, without your email.
We may keep limited information longer where the law requires it, or to deal with a legal claim or serious abuse (for example, to stop a banned player re-registering).
7. Your rights and choices
Delete your account at any time: in the app under Settings → Account → Delete account, at landlocked.io/delete-account, or by emailing us from your account's address.
Depending on where you live, you may also have the right to:
- access the personal data we hold about you and get a copy in a portable format;
- correct inaccurate data (you can reset your password at landlocked.io/forgot-password; email us for anything else);
- object to, or ask us to restrict, processing based on our legitimate interests;
- not be discriminated against for using your privacy rights;
- complain to a data protection authority — in the EU, the authority where you live; in the UK, the Information Commissioner's Office (ico.org.uk).
To use these rights, email support@landlocked.io from the address on your account (so we can confirm it is you). We reply within one month, or within the time your local law sets if shorter. California residents can also use an authorised agent; we will ask them for proof of your permission. As we don't sell or share personal information, there is no sale or sharing to opt out of.
8. Children
LandLocked is not meant for children. You must be at least 13 to create an account, or at least 16 if you live in the EU, EEA or UK. Sign-up asks for your month and year of birth and refuses anyone younger. We don't knowingly collect personal data from children under these ages. If you believe a child has an account, email support@landlocked.io and we will delete it.
9. Security
Connections to the game and this website are encrypted (HTTPS). Passwords are stored only as bcrypt hashes, sign-in sessions expire, and access to our systems is limited to the people who run the game. No system is perfectly secure, but we work to protect your data, and we will tell you and the authorities about a breach where the law requires it.
10. Changes to this policy
We will update this page when what we collect or how we use it changes, and change the date at the top. If a change is significant, we will tell you in the game or by email before it takes effect.
11. Contact us
Kiteware
Sepapaja 6, 15551 Tallinn, Estonia
support@landlocked.io