Privacy
This one page covers the Oakenhearth Games website and every game we publish (today, Thornwick). It says plainly what is kept about you. The short version: very little, and nothing that is sold or used to follow you around the web.
Questions about any of this: admin (at) oakenhearth (dot) com, or use the contact form.
Browsing this website
- This site sets no cookies of its own, and nothing here counts or profiles visitors. (Cloudflare, described below, may set a security cookie of its own to tell people from bots.)
- There are no advertising or analytics trackers on this site or in our games. Nothing is loaded from other companies' servers, except on the contact page, where Cloudflare's bot check is loaded (see the next section).
- Like any website, it is served through Cloudflare, which handles the traffic on its way here and, as a normal part of that, sees your IP address and the pages you ask for. The web server also keeps ordinary access logs.
Contact messages
- If you use the contact form, we keep the name, email address and message you type, so that we can answer you. We use them for nothing else.
- The message is saved on our server for up to 12 months and is also sent by email, through an email delivery service, to our mailbox. Your IP address is not saved with it.
- The form is protected by Cloudflare Turnstile, a check that tells people from bots. It loads from Cloudflare when you open the contact page and may look at your browser and connection to decide; Cloudflare's own privacy policy covers that.
- If you email admin (at) oakenhearth (dot) com directly, the message is forwarded to our mailbox, and your email provider and ours handle it as email always is handled.
- To have a message of yours deleted, write to the address above.
Playing Thornwick
The Play button gives your browser a short-lived signed note, which Thornwick swaps for a cookie named oak_pass. It holds a random number and an expiry time, nothing about you, and it lasts 12 hours (it is renewed while you play). Its only job is to let the game know you came in through this site.
You can play without an account; the game then saves in your own browser. If you make an account, the game keeps:
- the name you chose, and your password, stored only as a salted scrypt hash (the password itself is never stored);
- the knights you saved from the character screen (their looks and names), and up to five saved journeys, which are your game progress;
- a login cookie named
thornwick_session, a random token that keeps you signed in for up to 30 days. It can be read only by the game's server, not by scripts on the page.
The game does not ask for an email address, so there is no password reset by email: a forgotten password cannot be recovered by yourself. Do not use a password you use anywhere else. To have an account removed, write to the address above with the account name. Accounts have no email address, so we may ask you to show that the account is yours.
The game also keeps your settings (graphics quality, volume, camera speed and the like) and, when you are not signed in, your saved game in your browser's local storage. That stays on your device; clearing your browser's site data removes it.
What is not done
- No personal data is sold.
- No ads are shown and no ad networks are used.
- No analytics services are used by this site or our games.