Privacy Policy
Last updated: May 28, 2026
Pangaea (“we”, “us”) is an independent, browser-based multiplayer strategy game. This policy explains what personal information we collect when you use Pangaea, why we collect it, and the choices you have. We try to keep things plain and short.
What we collect
- Account data: the email address and display handle you provide when you sign up.
- Authentication data: a hashed password and the session token that keeps you signed in.
- Gameplay events: the moves, dice rolls, chat messages, and room actions you make while playing — so matches can be resynced after a disconnect and so we can investigate abuse.
- Basic technical data: standard server logs (e.g. IP address, user agent, timestamps) for security and reliability.
Why we collect it
- To sign you in and keep your account secure.
- To run live matches: persisting game state means you can drop off and reconnect without losing your game.
- To prevent and investigate abuse, cheating, and harassment.
- To diagnose service issues and improve reliability.
What we do not do
- We do not sell your personal information.
- We do not run third-party advertising or analytics trackers on the site at this time. If we ever add analytics, this page will be updated first and the Cookies page will list any new cookies.
Cookies
We use a single authentication cookie that keeps you signed in. It is marked HttpOnly, Secure, and SameSite=Lax. See the Cookies policy for details.
Where your data is stored
Your account and gameplay data are stored in a managed Postgres database operated by a reputable cloud provider, with backups in the United States and/or the European Union. Game-server traffic is processed by our hosting provider on infrastructure located in the same regions.
How long we keep it
We keep account data for as long as your account is active. Gameplay events tied to your account are retained for as long as we run the service, both for match-replay/resync and for abuse investigation. You can request deletion of your account and associated personal data at any time (see below).
Your rights
You can request access to, correction of, or deletion of your personal data by emailing support@pangaea.game. Depending on where you live, you may have additional rights under local law (for example GDPR or CCPA). We will honor reasonable requests in line with those laws.
Children
Pangaea is not intended for children under 13. If you believe a child under 13 has created an account, please contact us and we will remove it.
Changes to this policy
If we make material changes to this policy, we’ll update the date at the top and, where appropriate, notify you by email.
Contact
Questions or requests: support@pangaea.game.