Privacy policy
Last updated: 19 October 2026. DRAFT: review before publishing.
Echoself works fully offline. This policy covers what our server stores when you choose to sign in, so your progress can sync between devices and your name can appear on the leaderboards.
What we collect
- Account: your display name and tag (for example Echo#0042).
- Login: your Steam ID if you sign in with Steam; your Google Play Games player ID and gamer name if you sign in with Google Play; your email address and a hashed password if you register with email.
- Game data: your progress (levels solved, stars, gems), the looks you own and wear, your crystal history, and leaderboard scores with the recorded moves of those runs.
- Technical: the IP address of each request and the game version, kept in server logs to protect the service from abuse.
We don't collect your location, contacts, or advertising IDs, and we don't sell or share your data with advertisers.
Why
- To log you in and keep your progress in sync on all your devices.
- To show your display name and scores on the leaderboards. Other players can see your display name, tag and scores.
- To prevent cheating and abuse, and to send account emails (confirming your email, resetting your password, confirming a deletion).
Who processes it
Your data is stored on our own server. Steam (Valve) and Google confirm your identity when you sign in with them, under their own privacy policies.
How long we keep it
For as long as your account exists. Server logs and anti-cheat records are deleted after 90 days. When you delete your account, everything listed above is deleted, except records we must keep by law (for example, purchase records), which are kept only for as long as required.
Your choices
- Play without signing in: nothing is sent to our server.
- Change your display name in the game.
- Delete your account in the game (Settings › Account) or on our account deletion page.
- Ask for a copy of your data, or a correction, by emailing us.
Children
Echoself is not directed at children under 13, and we don't knowingly collect their personal data. If you believe a child has created an account, contact us and we'll delete it.