Distant Lands · Privacy policy

Last updated 7 October 2026

Distant Lands is a location-based game. This page explains what the game collects, why, and how to have it deleted. Questions: [email protected].

What we collect

• Account: the username you choose and a salted hash of your password. We never store the password itself and do not ask for an email address or your real name.
• Location: while the game is open it sends your precise position to our server, which uses it to decide which monsters and places are near you and whether you are close enough to interact. We keep your most recent position and distance walked, not a history of where you have been. The game does not read your location in the background.
• Game progress: characters, levels, items, battles, dungeon runs and place requests you submit.
• Device and usage: device model, operating system version, app version, play sessions and playtime, and counts of which buttons are used.
• Network: a salted hash of your IP address and the approximate country and city derived from it. The address itself is not stored.

Why

To run the game, keep play fair (for example spotting impossible movement), fix problems and understand which features are used.

Sharing

We do not sell your data and do not share it with advertisers. It is processed for us by our hosting provider and by Cloudflare, which carries the game's network traffic. Their servers may be outside your country. Map data is from OpenStreetMap and is served from our own servers.

Adverts and purchases

The game currently shows no adverts and has no purchases. If that changes this policy will be updated first.

Keeping and deleting

Data is kept while your account exists. You can delete your account and everything linked to it at any time on the account deletion page, also linked from Settings > Account in the game. Deletion is immediate and permanent.

You can download a copy of everything we hold about your account on the my data page. If a record is wrong, email us with your username and what should change; we reply within 30 days. Because we hold no email address or real name for you, we confirm a request is yours by your account password.

Security

All traffic uses HTTPS. Passwords and session tokens are stored only as hashes.

Children

The game is not directed at children under 13 and we do not knowingly collect their data. Contact us to have such an account removed.

Changes

Changes are posted on this page with a new date.