Privacy policy
Last updated 29 October 2026
This policy explains what information Continental Order collects, why, who it's shared with, and your choices. It's run by Patrick Fox (ABN 15 482 877 639) ("we", "us"). Contact: support@continentalorder.com.
1. What we collect
| When | What | Why |
|---|---|---|
| Playing as a guest | A random account id, and a scrambled (hashed) copy of your recovery code. No name, email or contact details. | To keep your coins and designs safe and let you restore them with your code. |
| Signing in with email | Your email address, and a one-time sign-in code that's deleted within a day. | To sign you in and link your progress to you. |
| Signing in with Google | Your email address and Google's account id for you. We don't get your password, contacts or other Google data. | To sign you in. |
| Saving progress (signed in) | Your ruler name, level, XP, skills, titles, designs, settings and similar game data. | So your progress follows you between devices. |
| Coins and purchases | Your coin balance, designs owned, coins earned per day, and for each purchase: the pack, amount, currency, date and Stripe's reference numbers. We don't get your card details. | To deliver what you bought, handle refunds and chargebacks, and keep the financial records the law requires. |
| Online play | The name you play under, your rating, wins and games played, your friend code and friends list, whether you're online, game invites, and name reports from other players. Quick-chat in games uses preset messages only, isn't stored, and can be switched off in the game's settings. | To run online games, rankings, friends and invites, and to deal with offensive names. |
| Every visit | Like any website, our hosting provider (Cloudflare) processes your IP address and basic request details to deliver the site and protect it from attacks. | To run the site securely. |
Stored on your own device
The game saves some things in your browser's local storage, not on our servers: your current saved game, solo progress, settings (sound, graphics, building amount), your guest recovery code and your sign-in session. We don't use cookies, and you can clear all of this by clearing the site's data in your browser.
2. Who we share it with
We don't sell or rent your information, and we don't use advertising or analytics tracking on this website. We only share what's needed with the services that run the game:
- Cloudflare: hosting, database and online-game servers.
- Stripe: payments. Stripe collects your payment details directly under its own privacy policy.
- Resend: sends the email sign-in codes.
- Google: only if you choose Google sign-in.
These providers may store and process data outside Australia, including in the United States. We use well-known providers that protect personal information, but overseas laws may differ from Australian law. We'd also disclose information if the law requires it.
Other players can see your in-game name, rating and online status, and anything you choose to show in your profile.
Playing on Poki or CrazyGames? Versions of the game on those sites don't use our sign-in or store, and your solo progress stays on your device. If you play online there, the game connects to our servers as a guest, using the same random account id, the name you play under (your CrazyGames username if you're signed in to CrazyGames), your rating, friends and invites described above. Those sites show ads and handle their own accounts under their own privacy policies.
3. How long we keep it
- Signed-in accounts: until you delete your account (in the game: sign in, then Delete account). This removes your sign-in details, progress, coins, designs, rating, friends, online status and invites.
- Purchase records: kept for at least 5 years after the purchase, because Australian tax law requires it, even if you delete your account.
- Name reports: kept for moderation, and deleted when no longer needed.
- Sign-in codes: deleted within a day.
- Guest accounts hold no personal details. Email us with your recovery code if you'd like one removed.
4. Children
The game is suitable for a general audience, but sign-in and purchases are meant for players 13 and over, and anyone under 18 needs a parent or guardian's permission to buy coins. Younger children can play as guests without giving any personal details. If you believe a child has given us personal information without permission, contact us and we'll delete it.
5. Security
Connections to the game are encrypted (HTTPS). Recovery codes, sign-in codes and session tokens are stored only as one-way hashes, and card details never reach us. No system is perfectly secure, but we take reasonable steps to protect your information.
6. Your choices and rights
You can ask to see or correct the personal information we hold about you, or ask us to delete it, by emailing support@continentalorder.com. You can delete a signed-in account yourself at any time from inside the game. If you're unhappy with how we've handled your information, tell us first and we'll respond within 30 days. If you're still not satisfied, you can contact the Office of the Australian Information Commissioner.
7. Changes
We'll update this policy if the game changes what it collects. The date at the top shows the latest version.