Privacy Policy
Effective Date: October 2026
01Our Commitment: Zero Spyware, Maximum Transparency
At BrowserTopia, we believe multiplayer games should be focused on creativity, community building, and sandbox fun—never surveillance capitalism. We collect only the data strictly necessary to authenticate your account, safeguard world creations, and deliver a smooth 60 FPS multiplayer experience.
02Information We Collect
We process the following specific categories of information:
- Player Identity & Authentication: Your chosen player username, email address, and cryptographically salted password hash. If you sign in via Google Identity Services (OAuth 2.0), we receive your verified Google Account ID and email to authenticate your player profile without ever touching your Google password.
- Gameplay & World Progression: Real-time inventory contents, placed blocks, World Lock authorizations, Clan memberships, quest completion logs, and unlocked cosmetics.
- Technical Network Telemetry: IP address, user-agent string, and WebSocket handshake headers utilized strictly for DDoS mitigation, rate-limiting, and packet anti-tampering.
- Security Verification: Automated Cloudflare Turnstile verification tokens to detect and prevent malicious bot flooding.
03In-Game Activity Telemetry, Flight Recorder & Anti-Scam Moderation
To maintain a thriving, secure sandbox ecosystem and protect legitimate players against fraud, scams, and economy-breaking exploits, BrowserTopia operates a server-side World Flight Recorder.
We log in-game actions including public and world chat messages, player-to-player trade exchanges, container/chest storage and withdrawal operations, item drops and collections, block placements and destructions, and world lock adjustments. These logs are utilized strictly for two legitimate operational purposes:
- Engine & Infrastructure Stability: Diagnosing high-load server desynchronizations, rollback bugs, and technical anomalies.
- Automated & Manual Fair Play Moderation: Algorithmic detection and moderator review of rule-breaking activities (such as duplication attempts, automated bot scripts, phishing, harassment, and unauthorized transaction anomalies).
Detailed flight recorder records are stored in dedicated, isolated databases decoupled from advertising and analytics. Access is strictly restricted to verified core developers and designated staff members with specifically authenticated roles who are held personally accountable for all log inspections.
Safeguarding player privacy is our foundational commitment. BrowserTopia strictly adheres to data protection laws and accepts full legal accountability under applicable jurisdiction. Unauthorized leakage, sharing, or distribution of detailed user logs to unidentified or unauthorized third parties is strictly prohibited, and our management accepts direct legal liability under applicable civil and criminal statutes for any breach of this privacy guarantee.
Detailed user activity flight recorder logs are programmed to be automatically purged and permanently deleted after 14 days (2 weeks).
Exception Clause: Logs directly relevant to an ongoing investigation concerning active moderation enforcement (e.g. major anti-cheat investigations, severe player harassment, malicious scamming), security incidents, or critical core engine stability bugs may be preserved beyond the 14-day window solely for the duration necessary to resolve the inquiry and ensure platform safety.
04Third-Party Services & Payment Processors
To provide official game services, we partner with trusted, industry-leading infrastructure providers:
Powers the optional in-game Lucky Gem Gacha (Rewarded Video Ads). Google may set cookies (such as __gads and __gpi) to provide ad frequency capping, prevent ad fraud, and respect European privacy preferences via Google's certified Consent Management Platform.
Protects login endpoints and web assets against automated DDoS attacks and botnets while keeping player latencies minimal globally.
Payments are securely processed via KlikQRIS (Indonesian QR payments), Whop (Credit/Debit Cards, Apple Pay, Google Pay), and decentralized cryptocurrency networks (Bitcoin Lightning, EVM, Solana). BrowserTopia never receives or stores your full credit card numbers, CVV codes, or cryptocurrency private keys.
05Information We Will NEVER Collect
- Your external web browsing history, bookmarks, or other open browser tabs.
- Your local files, system drives, or operating system clipboard contents.
- Biometric identifiers, contacts, webcam, or microphone feeds.
- Intrusive kernel-level background ring-0 anti-cheat drivers.
06Data Security & Storage
All traffic between your browser client and the game cluster is strictly encrypted in transit using TLS 1.3 and Secure WebSockets (WSS). Production databases utilize isolated Cloudflare D1 / SQLite storage with role-based access control (RBAC), ensuring that game administrators and staff cannot read player authentication credentials or payment tokens.
07Your Privacy Rights (GDPR, CCPA & Global Rights)
Regardless of your geographic jurisdiction, you retain full sovereignty over your personal data:
- Right of Access: You may request an export of all account credentials and gameplay records tied to your account.
- Right to Erasure ("Right to be Forgotten"): You may request permanent deletion of your player account, world ownership records, and transaction logs.
- Right to Rectification: You may correct your account details at any time via your player profile settings.
- Consent Management: Players within the European Economic Area (EEA), UK, and Switzerland can update their Google CMP ad preferences at any time.
08Contact Our Data Privacy Team
For privacy inquiries, GDPR/CCPA data export requests, or account deletion demands, please email our privacy desk at [email protected]. We process all verifiable requests within 48 business hours.