This policy explains what personal data we collect, why we collect it, and what we do with it. In this policy, “we”, “us”, and “our” refer to the operators of Roman Empire Simulator. We are based in the United Kingdom and act as the data controller for information collected through this service.
| Data | Source | Why |
|---|---|---|
| Email address & authentication data | You, via Clerk | To create and secure your account |
| Payment details (card number, billing address) | You, via Stripe | To process subscription payments |
| Game save data (reign progress, decree history, empire state) | Your gameplay | To save and restore your game |
| Referral source (UTM parameters) | The URL you arrived from | To understand which channels bring players to the game |
We do not collect your name, phone number, physical address, or any special category data (such as health, ethnicity, or political opinions). The decrees and decisions you enter inside the game are fictional gameplay choices, not expressions of your personal views, and we do not treat them as such.
Under the UK GDPR, we rely on the following lawful bases:
Contract performance — processing your account data, game saves, and payment information is necessary to provide you with the service you signed up for.
Legitimate interests — we use referral source data to understand how players find the game and to improve the service. We have assessed that this is proportionate and does not override your rights, given that the data involved is limited and non-sensitive.
Consent — if you opt in to marketing emails, we rely on your consent to send them. You can withdraw this consent at any time.
We share your data only with the service providers we need to run the game. We do not sell your personal data to anyone.
| Provider | What they process | Their role |
|---|---|---|
| Clerk | Email, authentication tokens | User authentication |
| Stripe | Payment and billing details | Payment processing |
| Render | All service data (hosting) | Cloud hosting |
| Anthropic | Gameplay text (no personal identifiers) | AI model provider |
| xAI | Gameplay text (no personal identifiers) | AI model provider |
When you issue a decree, the text of that decree, the event you are responding to, and your emperor's profile (but not your email or account identifier) is sent to our AI model providers for persona-response generation. These providers process the request in accordance with their own data processing agreements and do not retain the content for training purposes.
Account & save data: for as long as your account is active. If you delete your account, all associated data is removed within 30 days.
Payment records: retained by Stripe according to their retention policy. We hold a minimal reference (your Stripe customer ID) to reconcile subscription status.
Server logs: retained for up to 90 days for operational and security purposes, then deleted.
Under UK GDPR you have the right to:
— access the personal data we hold about you
— correct inaccurate data
— request deletion of your data (“right to be forgotten”)
— object to or restrict processing
— receive your data in a portable format
— withdraw consent where we rely on it
— lodge a complaint with the UK Information Commissioner’s Office (ICO)
To exercise any of these rights, contact us through our Discord server. We will respond within 30 days.
We use cookies and browser local storage only for essential functionality: maintaining your authenticated session, remembering your game state between visits, and storing your in-game preferences. We do not use advertising or tracking cookies on this domain.
Our hosting provider (Render) operates servers in the United States and Europe. AI model providers (Anthropic and xAI) process gameplay text in the United States. Where data leaves the UK or EEA, we rely on standard contractual clauses or equivalent safeguards to protect your data.
The free tier of Roman Empire Simulator is available to all ages. Paid subscriptions require users to be at least 18 years old. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this policy from time to time. The “Last updated” date at the top of this page will reflect the most recent revision. Material changes will be notified via email or in-game notice at least 14 days before they take effect.
For questions about this policy or to exercise your rights, contact us through our Discord server.