Privacy Policy

Last updated: March 2026

Acronomicon is a real-time multiplayer party game. We collect only what's necessary to run the game and process payments. This policy explains what we collect, why, and how it is used.

1. Information We Collect

Account information — If you register, we store your username and a hashed (bcrypt) password. We never store plain-text passwords.
Google account data — If you sign in with Google, we receive your Google profile name, email address, and profile picture URL from Google's OAuth service.
IP address — Recorded on socket connection to support our IP-based ban system. Not shared or sold.
Game statistics — Games played, round wins, scores, and winning phrases are stored to power leaderboards and your personal stats page.
Avatar images — If you upload a profile picture, it is stored on our server.

2. Cookies

We use a single signed, first-party cookie (acroparty_session) to keep you logged in for up to 30 days. No third-party tracking cookies are set by Acronomicon. If you sign in with Google, a short-lived session cookie is used only during the OAuth flow and is destroyed immediately after.

3. Payment Processing

Purchases are processed by Stripe. We never receive or store your card number, CVV, or any raw payment credentials. Stripe's own privacy policy governs how they handle payment data. We store only a record of which items you have purchased (item ID and timestamp).

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes. The only third parties that receive data are:

Stripe — payment processing
Google — only when you choose Google Sign-In

5. Data Retention

Account data is retained as long as your account exists. Game history is retained indefinitely to power leaderboards. You may request deletion of your account and associated data by contacting us.

6. Children

Acronomicon is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. Contact

Questions or requests regarding your data can be sent to the contact address listed on our main page. We will respond within 30 days.