Privacy Policy

Who we are

"One of Ten Thousand" is operated by M&A Studio ("we"). For privacy requests, contact [email protected].

No account required

You can play without signing up. To let you raise gravestones, appear on the daily leaderboard and save your game, your browser receives a random anonymous identifier in the background. We never ask for your name, email or phone number.

What we store

• Game data: gravestones, life records, final words, incense and daily results. These are public to all players. Please don't put real names or personal information in character names or final words.
• Daily draw: when you finish a daily-draw life, the choices you made in it are sent to our server to recompute and verify your score. They contain no personal information.
• Play statistics: to improve the game, we record anonymous gameplay events (such as starting or finishing a life, the era, language, device type, the site you came from, raising a stone and sharing) and a once-a-minute signal while the game is open, to count players online and time played. These are tied only to your anonymous ID, contain no name, email or IP address, use no cookies, and individual records are never published. The home page shows only totals (such as players online, total players, and the shortest and longest lives) and game-generated causes of death, with nothing that identifies who they belong to.
• Moderation and reports: public text is automatically checked against a list of inappropriate words and matching parts are masked. When you report a gravestone, we record which anonymous identifier reported which gravestone, to prevent duplicate or mass reports. Reports are not public.
• Saves and codex: readable only by your browser's anonymous identifier.
• Payment records: the item, the gravestone, family or life it was for, the amount, currency and Stripe transaction ID. Never card numbers.
• Expansion eras: we keep only an irreversible SHA-256 hash of your payment email, used solely to restore purchases on a new device. We do not store the email itself.
• Supporters list: if you enter a name when supporting the game, it is shown publicly on the supporters list. Leave it blank to stay unlisted.
• Local storage: language, saves and settings are also kept on your device.

Third parties

• Stripe / Link: process all payments and act as the merchant of record through Stripe Managed Payments, handling sales tax. Card details, email and other information you give at checkout are handled under the Stripe Privacy Policy; card numbers never reach us.
• Supabase: hosts the database and server functions (region: US East, N. Virginia).
• Google Fonts: receives your IP address when fonts load.
• Cloudflare Pages: serves the website and may keep standard access logs.

What we don't do

We do not sell personal information, use advertising trackers, or use your data for marketing.

Children

The game is not directed to children under 13, and we do not knowingly collect their personal information.

Deletion and requests

You can delete your own gravestones in the graveyard. To delete all data tied to your anonymous identifier, email [email protected] with the gravestone's name. For payment records and refunds, contact Link support (see Purchases & Refunds); Link also handles deletion requests for payment data. We honor rights provided by applicable state laws, such as those of New Jersey and California.

Changes

If this policy changes, we'll update the date at the top of this page.

← Back to the game