Player privacy

Registration is optional. You can play as a guest without creating a shared player profile.

Temporary registration

During the temporary registration period, you can create an account with a unique username and password. No email address is requested or verified. Passwords are securely hashed, and usernames are not case-sensitive. Keep your credentials in a password manager: email verification and forgotten-password recovery are unavailable. Temporary accounts cannot receive administrator access. Your saved player data is not scheduled to expire when other sign-in options become available.

Account sign-in

When enabled, you can register with Google, Apple or an email and password. Existing players can continue with ChatGPT. Providers share an account identifier, verified email and available profile information. Apple may supply a private relay email. Accounts are not automatically merged by email; continue with your original sign-in method to keep your existing profile.

Email registration stores your name, email and a securely hashed password. You must verify your email before accessing player data. Resend delivers verification and password-reset emails and receives your email address and message contents. The game stores verification records and encrypted provider tokens where applicable. Authentication uses session cookies, expiry times, IP addresses and browser information for security and rate limiting. Passwords and session tokens are never stored in browser local storage.

Your player data

When you register, Legends of Era saves your signed-in account identifier and email, your chosen player name, optional country or region, registration date and consent date. Your email comes from your verified sign-in. The game does not receive your Google, Apple or ChatGPT password or ChatGPT conversations.

While you are signed in and registered, we record recent page activity to show online status, and the hero, difficulty, start time and reported result of each new battle. Results include kills, deaths, duration and wave reached. Old records already stored on a device are not automatically uploaded.

Who can see what

Registered players can search for player names to send friend requests. Accepted friends can see your online status. Your email and country are not shown in player searches or to friends.

The owner, tasd.ta@gmail.com, and administrators approved by that account can view member registration information, recent activity and battle records. Only the owner can manage administrator access. Typing an approved email without verifying ownership never grants access.

Friends and inbox

Friend requests and their acceptance are saved. Only accepted friends can send you messages. Inbox messages are available to the sender and recipient; the member administration dashboard cannot read them. Messages are stored on the game service and are not end-to-end encrypted.

You can decline requests, remove friends or block players. Blocking removes the friendship and prevents further requests and messages in either direction. Existing messages remain until a participant deletes their profile.

Online multiplayer rooms

Public rooms show the host’s player name and available seats to registered players in Join a game. Choose Private when hosting to keep your room out of that list; anyone with its invite can view the waiting lobby and request an empty seat. Each side has two seats, which can be occupied by players or host-selected AI. Lobby viewers see player names, sides and hero choices, not account emails or connection descriptions. During hero selection, participants see each other’s current choices and confirmed heroes. Room records store participants, seat assignments, hero choices and temporary connection descriptions, including network addresses. Rooms expire after two hours and expired records are removed during later room creation. Closing a room clears its connection descriptions; deleting a participant’s profile removes their room.

Gameplay uses encrypted WebRTC data connections between the host and each guest. Your connection information and IP address may be visible to the host, connected guests, and Google or Cloudflare connection services. A configured relay can help with restrictive networks but cannot guarantee access on every network. No microphone, camera, voice or video is requested. The host browser runs the match, so this unranked mode has no anti-cheat guarantees and does not add ranked results or wins to player records. Keep the host’s game open. Leaving or refreshing an active match ends it; temporary connection interruptions pause four-player gameplay while reconnecting.

Keeping and deleting your data

Profile, battle and social records are retained while your player profile exists. You can download your player data, update your name or country, or delete your profile from Player profile. Deletion removes your stored battles, friendships, blocks and messages, including messages in the other participant's inbox. For new username, Google, Apple or email registrations, deletion also removes the game authentication account and its sessions. It does not delete your Google, Apple or ChatGPT account, or older device-local game records. If you cannot access your account, contact the owner to request deletion. Short-lived verification and rate-limit records may remain until expired records are cleaned up.

Administrator approval and access-change audit records are retained separately for access control. Only the owner can revoke an administrator's approval.

Device settings

The game uses browser storage for sound and control preferences, temporary battle setup and older device-local battle records. Guest play is not included in registered-member activity.

For information, support or questions about player data, contact official@legendsofera.com.