Privacy Policy
Last updated 16 October 2026
This policy explains what information Crystalia collects, why, how long we keep it, and who can see it. Crystalia is run by Klowd LLC ("we", "us"). Crystalia is for players 13 and over. If you're under 18, please read this with a parent or guardian.
What we collect
When you sign up
- Your username, email address and password. We never store your password itself, only a scrambled version that can't be turned back into it.
- Your date of birth, to make sure you're 13 or over. It's never shown to other players.
- Whether you've confirmed your email, and the links we email you to confirm it or reset your password (stored scrambled, and deleted once used or expired).
When you play
- Your profile: display name, bio and badge colour, if you set them.
- Your pet (its name, care, stats, training, job and battles), your Crysta and Stardust, what's in your inventory and in the bank, and a record of how you earned and spent Crysta.
- The random events that have happened to you, and what they gave.
- Your game scores and rounds played, for the leaderboards and Crysta rewards.
- Your friends: requests you send and receive, and players you block.
- Your board posts: messages you post to friends, including ones you delete.
- Blocked posts: if our filters stop a post because it looks like personal information (like a phone number or email address), we keep a record of that attempt.
- Reports you make about posts, and reports others make about yours.
- Feedback you send us. For bug reports we also keep your browser's description of itself (its name, version and device type), to help us track the bug down.
If you join Crystalia+ or buy Stardust
- Payments are handled by Stripe. We never see or store your card details: you enter them on Stripe's own page.
- We keep your Stripe customer number, when your membership started and runs until, and a record of each payment and the Stardust it gave, so we know you're a member and can handle refunds. Stripe keeps its own payment records, under its privacy policy.
Automatically
- A login cookie, so you stay signed in. We don't use advertising or tracking cookies.
- Your light or dark mode choice, and whether game music is muted, saved in your browser.
- Visit statistics, through Vercel Web Analytics:
which pages are visited (without anything after the
?in a link), the kind of browser and device, and the country. It uses no cookies, isn't linked to your account, and we only see totals, like how many visits the World map had this week.
Why we use it
- To run your account and the game: sign you in, save your progress, show leaderboards and pay out Crysta.
- To show your profile, pet and scores to other players.
- To let you and your friends message each other.
- To keep players safe: filtering posts, checking reports, and stopping cheating and abuse.
- To email you about your account and payments: confirming your email, password resets, receipts, a reminder a few days before Crystalia+ renews, and a note if a renewal payment fails. We never send you marketing emails.
We don't sell your information, and we don't use it for advertising.
Who can see it
- Other players can see your username, display name, bio, badge, pet (with its level, colour and portrait background), game scores, and Crystalia+ badges such as the crown. They can't see your email, date of birth, Crysta or bank balance.
- Your board can only be seen by you and that friend.
- Our team can see what's needed to run and protect the game, including reading board posts, deleted posts and blocked posts when checking a report or a safety concern.
- Service providers that host Crystalia for us: Vercel (the website and its visit statistics), Neon (the database), Stripe (payments for Crystalia+ and Stardust), and Resend (sending our emails, which is why it sees your email address and username). They only use your information to provide their service.
- The law: we may share information if the law requires it, or to protect someone's safety.
How long we keep it
| Information | How long |
|---|---|
| Email confirmation and password reset links | Until used, or 7 days (confirmation) or 1 hour (reset) |
| Board posts, including deleted ones | 90 days after they're posted, then removed automatically |
| Blocked posts | 90 days, then removed automatically |
| Reported posts | Until we've dealt with the report, plus 30 days |
| Your account, profile, pet, scores and Crysta | While your account exists |
Age
Crystalia is for players 13 and over, and we don't knowingly collect information from anyone younger.
- Our filters block personal information in board posts for every player.
- If you're a parent or guardian and think a child under 13 has made an account, or you'd like to see or delete your teenager's information, contact us at the address below and we'll help.
Your choices
- You can change your profile at any time.
- You can delete your own board posts (they're removed for good after 90 days).
- You can block players and report posts.
- To see the information we hold about you, correct it, or delete your account, contact us.
Keeping it safe
Passwords are scrambled before they're stored, the site uses a secure connection, and access to player information is limited to what's needed to run the game.
Changes to this policy
We may update this policy. When we make a big change, we'll tell you in the game's News.
Contact us
Privacy questions or requests: chris@klowd.software.