Rune Magus is a text-based multiplayer game available at runemagus.quest and as an iOS app. This policy covers both. It is written plainly, because you deserve to know exactly what is collected and why.
We collect the minimum needed to run the game. We do not sell data. We do not advertise. We do not share anything with third parties.
Username and password. You choose a username when you register. Your password is hashed using bcrypt before storage — we cannot read it, and neither can anyone else who accesses the database.
Game activity. Your location in the game world, the actions you take, the runes you find, and events that happen around your character are stored so the game can function. Other players may see your username and level when you are in the same location.
Messages. Anything you type with the say command in the game is stored as part of the location's event history and visible to future visitors.
Session data. A session cookie is stored in your browser or on your device to keep you logged in. It contains no personal information — only a reference to your session on the server.
We do not collect your real name, email address, postal address, phone number, or payment information. Registration requires only a username and passphrase.
We do not use analytics, advertising trackers, or third-party scripts of any kind. There is no Google Analytics, no Facebook pixel, no advertising network.
We do not collect device identifiers, IP addresses beyond standard server logs, or location data from your device.
All game data is stored in a MySQL database on a private server. Passwords are hashed and never stored in plain text. The server is not shared with other services.
Standard server access logs (including IP addresses) are generated automatically by the web server and retained for a short period for security and diagnostic purposes. They are not used for analytics and are not shared.
Anthropic. When you or another player first enters an unexplored location, a description is generated using Anthropic's Claude AI. The prompt sent to Anthropic contains only the game-world coordinates and nearby location names — no usernames, no personal data.
Adobe Fonts. The title typeface on the website is loaded from Adobe Fonts (use.typekit.net). Adobe may log the font request. No personal data about you is included in that request.
No other third parties receive any data from Rune Magus.
You can delete your account at any time by contacting us. Deletion removes your username, password, and personal game progress. Location descriptions and anonymous event records generated during your play may be retained as part of the shared game world.
You can ask what data is held about your account at any time.
Rune Magus is not directed at children under 13. If you are under 13, please do not register. If we become aware that an account belongs to a child under 13, it will be deleted.
If this policy changes in a way that affects how your data is used, we will note the change here with a date. We will not retroactively apply new uses to data already collected.
Last updated: April 2026.
Questions about this policy can be sent to hello@runemagus.quest.