Privacy
Terms of Survival is free to play and needs a sign-in. This page lists what the sign-in service stores. It is written from the service’s own code and claims nothing beyond it.
What we store
- If you sign in with Discord: your Discord account id and display name.
- If you sign in by email: your email address. It is your account.
- Whether you ticked “email me product updates”, when you last changed that, and which version of the wording you saw. For a Discord account we keep the verified email address from Discord only while that box is ticked, and delete it when you untick it.
- A record for each signed-in browser: a one-way hash of its cookie, when it was created, when it was last seen (updated at most once a day) and when it expires.
- A one-way hash of each unused email sign-in link, with the address it was sent to, for up to 15 minutes.
What we do not store
- Passwords. There are none.
- IP addresses, in files or in logs. To limit abuse, yours and the email address you ask a link for are held in memory only, until about an hour after your last sign-in attempt or the next restart.
- Browser or device details (user agents).
- Discord access or refresh tokens. The one used to read your profile is discarded within the same request.
- Your Discord email address, unless you ticked the updates box and Discord reports it verified.
- Anything about how you play. Game progress stays in your browser.
Why
To decide who may open the game: nothing else. We email product updates only to people who ticked that separate box, which starts unticked. There is no other marketing use, and nothing is sold or shared. Sign-in emails are sent through Amazon SES. Discord sign-in is handled by Discord, which shows you what it shares with us before you agree.
Feedback reports
Reports sent from inside the game are stored separately, carry no name, address or account number, and are not linked to your account.
Cookies
Three, all strictly necessary, none readable by scripts: one keeps you signed in, one protects the forms on these pages, and one lasts ten minutes during a Discord sign-in. No analytics, no third-party cookies.
How long
- Sessions end 30 days after they were last used, 180 days after sign-in at the latest, or when you sign out.
- Sign-in links expire after 15 minutes and are deleted when used or once expired.
- Accounts are kept until you delete yours or this test host is retired, when the whole database is deleted.
Deleting your data
Sign in, open your account and choose “Delete my account”. It takes effect immediately. If you cannot sign in, write to privacy@edg3.io from the address concerned, or quote your account number.
Updates wording version 2026-09-21. Start page