What we know about you, why, and how to make us forget it. Effective 1 September 2026, updated 28 September 2026 to describe the notes the game keeps on how it is used (part 1).
An account is an email address, a Dragon Keeper name, a password (stored only as a hash), and the timezone your browser reports so the game's days turn at your midnight. Playing adds game records: your dragons, lair, coin, visits, parcels, guestbook notes, and reports you send or receive. Buying gold or keeping a Patron of the Hearth adds a payment record — see 2a. Room chat is kept for up to 90 days so the wardens can review reports, then deleted. Our server logs record IP addresses briefly for security and debugging.
To find what is broken or confusing, the game also notes what you do here: the pages you open, some of the buttons you press, sign-ups and sign-ins, and any error the page runs into. Each note carries the kind of device you are on (phone, tablet or computer), its system and browser, your screen size, and your browser's language. These notes are ours alone, never sold or shared, kept for 90 days, then deleted. If you send us feedback, we keep what you wrote with the page you were on and the same device details, so we can see the problem too.
There are no third-party trackers, no advertising networks, and no outside analytics services on this site. Everything in part 1 is counted by the game itself, on our own server. We do not sell or share your information with anyone, except services we need to run the game (our hosting provider, a mail provider to send password resets, and Stripe to take payments) or if the law requires it.
Gold and Patron of the Hearth are paid for through Stripe, which handles the payment for us. Your card is never typed into this site. The card number goes to Stripe's own page and never reaches our server, so we cannot see it, keep it, or lose it. Your email address is passed to Stripe so it can send you a receipt, and is handled under Stripe's privacy policy. What we keep of a purchase is the record we need to answer for it: which measure you bought, what it cost, whether it settled or was refunded, when, and the reference numbers Stripe gives us so the two books can be laid side by side. Delete your account and our copy of those records goes with it. Stripe keeps its own record of a payment it processed, under its own policy and the law it answers to; that is not ours to delete.
A signed cookie keeps you signed in, and a session cookie remembers where you are between pages (the egg you were shown at the door, for example, and the notes in part 1). If you warm someone's egg from its link, a signed cookie remembers that you did, so the egg counts one pair of hands once a day. That is all: no advertising or tracking cookies.
Your Dragon Keeper name is public, along with your lair when visited, your dragons' pages, your guestbook notes, and your presence in shared rooms. Your email address is never shown to anyone.
Your address gets a welcome, the link that resets a forgotten password, and a notice when your password or address changes — those come to everyone, because an account cannot do without them. It also gets letters when something happens while you are away: a friend asking, a pairing proposed, a dragon home from an expedition, an egg done with its days, a purse from the Lists. Those you can stop from your account page or from the link at the foot of any of them. Mail is sent for us by Mailtrap; nothing else about you goes with it but the address and the letter.
You can delete your account yourself at any time from your account page. Your account, dragons, lair, parcels, and holdings are destroyed. Where you appear in other Dragon Keepers' records — their guestbooks, their journals — your name is replaced with an anonymous one, because those records are theirs too. Deletion is immediate and cannot be undone.
Lairlings is for Dragon Keepers 13 and older. We do not knowingly keep accounts or data for children under 13. If you believe a child under 13 has an account, write to us and we will delete it: contact@lairlings.com.
You may ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it (or simply delete it yourself). Write to contact@lairlings.com and we will answer within 30 days.
If this policy changes in a way that matters, we will say so on the site before the change takes effect.
See also the Terms of Use.