Privacy Policy
Last updated: 3 August 2026
This policy describes what Vigil collects and how we use it.
What we collect
- Account email when you sign in with a magic link (Supabase Auth).
- Game data needed to run the world (character, inventory, progress, social actions).
- Purchase entitlements and Stripe webhook event ids — we do not store full card numbers.
- Routine technical logs for security and debugging.
How we use it
- Run the game, save progress, and show public armory pages.
- Send sign-in magic links and fulfill cosmetic purchases.
- Keep the service secure and fix bugs.
We do not sell your personal data. Purchases never grant gameplay power.
Processors
Supabase (auth/database), Vercel (hosting), Stripe (payments) — each has its own terms.
Cookies
A session cookie identifies your character; Supabase auth cookies keep you signed in.
Children
Vigil is not directed at children under 13.