Privacy

Lanterns of the Undervault · last updated 5 October 2026

The short version: the game keeps your heroes on your device. If you use the online features, the little they need goes to the game's server. If you sign in, your account and your saves go there too, so you can play on any device. There are no ads, no tracking and no analytics, and nothing is sold or shared for marketing. You can delete your account and everything in it from inside the game.

On your device

Your heroes, settings, friends list and friend code are saved in your browser's storage (or the app's) on your own device. They stay there unless you use the features below.

The online features

These use a database and real-time server run on Supabase for this game. Each one sends only what it needs:

Leaderboards and seed races (on unless you turn off "Send scores" in the menu): your hero's name, class, level, progress (floor reached, bosses, deaths, ending), the seed, and a random id for the run. These are public: anyone playing can see the boards.
Live play and raids (only when you turn them on): your hero's name, class, level, where you are in the dungeon, and what you say in chat, shared live with the other players on the same seed or in your party. Nothing is stored after you leave.
Friends: your friend code, player name, hero and where you are are shown to players who are on the friends lobby while you are online (turn this off with "Hide me" on the Friends screen). Invites and friend requests go only to the player they are for.

If you sign in

Signing in is optional. You sign in with Google or Discord; the game never sees your password. When you do:

Google or Discord tells the game's server your email address, your name and your profile picture address. These are kept with your account, used only to sign you in, and never shown to other players.
Your profile is kept: your player name, friend code and friends list, so they follow you to every device.
Your heroes are kept as cloud saves (Hardcore heroes stay on their own device), so you can carry on from another device.
Scores you send while signed in show your player name on the public boards.

Only you can read or change your profile and saves; the database enforces that.

Deleting your data

Everything: in the game, open the menu, then Account, then Delete my account. This deletes your account, your profile and every cloud save, at once and for good. Heroes saved on your devices stay there until you delete them.
One hero: delete it on the home screen; signed in, that deletes its cloud save too.
Scores already on the public boards are not tied to your account and are not removed by deleting it; to have one taken down, open an issue at github.com/A-Theme/undervault/issues.

Who else is involved

Supabase runs the database, the sign-in and the real-time server.
Google and Discord, if you sign in with them.
GitHub Pages hosts the game's website, and the game loads its fonts from Google Fonts. Like any website host, they see your IP address when you load the page.

Children

The game does not knowingly collect personal information from children under 13. Signing in requires a Google or Discord account, which have their own age rules.

Changes and questions

If this changes, the date at the top changes too. Questions: open an issue at github.com/A-Theme/undervault/issues.

Back to the game