EdictumLeer en español

Privacy notice

Last updated 11 November 2026

Who is responsible

Edictum (edictumgame.com) is a free online game run by Pascal Slettenaar, a private individual in Mexico, who is responsible for your personal data (the responsable under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, the LFPDPPP). Address: La Querencia 302-17, 21000 Aguascalientes, Aguascalientes, Mexico. Write to p.slettenaar@gmail.com with any question or request.

What the game keeps

• Your account. When you open the game you get a guest account straight away: a random player ID, kept by Firebase Authentication. If you link a Google account, it also keeps the email address, name and profile picture address that Google shares, and your Google account ID, so that you can sign in on any device. If you link a Discord account, the game keeps your Discord account ID and display name, and which player ID they belong to; it asks Discord for nothing else (not your email address, servers or messages). If you link an email address, Firebase Authentication keeps that address and sends the sign-in links to it.
• Your nation. Everything you create in the game: your nation's name, flag, motto and description, its statistics, land, cities, laws and history, your messages to other nations, your passport (its design, and the entry stamps you collect by opening other nations’ pages: which nations, and when), and when you last played.
• Your posts on the region message boards, with the time and your player ID, and your reactions to posts there, kept with your player ID.
• The region’s newspaper. Your classified advertisements are part of your nation, signed with its name. When you open the newspaper, your game may file a finished edition in the region’s archive, which then keeps your player ID as the one who filed it. If you are the Assembly’s Delegate and name the newspaper, its name and motto are kept with your player ID and your nation’s name. Deleting your account removes your player ID and nation’s name from both.
• Reports. If you report another player, the report keeps your player ID, what you reported and why, and any note you add. Only the moderators see it.
• Support tickets. If you create a support ticket on the Help page, it keeps your player ID, your nation's name and region, everything you and the team write in it (a ticket is a conversation: you can write back to the team's replies), the email address if you choose to give one, and who closed it and when. Only you and the game's team can read it, and the email address is used only to answer that ticket.
• Bug reports. If you report a bug on the Report a bug page, the report keeps your player ID, your nation's name and region, what you wrote, where in the game and how often it happens, the screenshot if you add one, and the team's answer. With it go technical details the game adds and shows you before you send it: the game's version, your browser's user-agent text (which names the browser and operating system), your window and screen size, your language, whether you were online, your nation's population, number of cities and founding date, and the last few errors the page hit. Only you and the game's team can read it, and it is used only to find and fix the bug. Please keep personal information out of what you write and out of the screenshot.
• Moderation. If a moderator hides or removes your nation, asks you to give it a new name, or bans your account, the game keeps that decision and the reason. A ban also keeps a one-way code (a hash) made from the sign-ins the account used (the Google or Discord account's ID, a verified email address), from which they cannot be read back, so that the same sign-in cannot return as a new player. The game's admins can also keep private notes about your account for moderation, for example about an earlier warning. They can also put a nation on a watchlist, with a short reason, so that they hear when it plays again, changes its name or region, or is reported. Only they can see these notes and the watchlist.
• Save diagnostics. To investigate saving problems, staff can see your player ID, region, a Desktop/Mobile label, session status, save revision, pending-save flag, error code, conflict count and last report time. A random session identifier is kept in session storage. These reports contain no message text or email address. The game also uses the time of the last report to show the players of your region whether you were in the game in the last 15 minutes (a green dot on the Region page); they see only that, never the reports. You can switch it off in Settings › Account › Online status.
• Staff audit history. The game records admin actions, the acting admin's player ID, the target player or region, time, reason and outcome. Only staff can read this history.
• The address you last played from. Each time you open the game, its server records the IP address your browser connects from, with the time, next to your player ID. Only the latest address is kept: a new one replaces the one before. Only the game's admins can see it, when they look into a player for moderation, for example to recognise a banned player who comes back. It is never shown to other players, and it is not used for anything else.
• Technical data. The servers that deliver the game see your IP address and browser details when you load the page or sign in, and keep them in logs for a short time for security and to stop abuse.
• Visit statistics, only if you allow them. The game asks once whether it may use Google Analytics, and only if you choose Allow does your browser load it. It then records which pages of the game you open (by their name, such as Edicts or Map, never with your player ID or your nation) and when, the site you came from, your type of device, browser, operating system, screen size and language, and roughly where you are (country and city, which Google works out from your IP address; Google Analytics does not keep the address). It keeps a random identifier in two cookies, _ga and _ga_…, for up to two years, to recognise a returning browser. Google's advertising features and Google signals are switched off. If you choose No thanks, nothing is loaded from Google Analytics.
• Letters between nations. A letter you write is kept in your own copy and, for a player's nation, as a copy that you and that player can read. The game's moderators can also read a conversation, but only to look into a report or a breach of the rules; each time is recorded with the moderator and the reason. Letters are deleted a year after they were written, or sooner if either of you deletes the conversation or the account. The game also keeps how many letters you wrote today and how many in a row to a nation that has not answered (to stop flooding), the nations you block, which conversations you have read and, if you leave read receipts on (Settings › Letters), when you read a player's letters, which that player can see. If you turn on notifications on a device, the game keeps that device's push address (from your browser's push service, such as Google's, Mozilla's or Apple's) until you turn them off; a notification says who wrote, never what. A letter you report goes to the moderators with its words.
• Region chat. A line you write in your region's chat is kept with your player ID, your nation's name and the time, and every nation of your region, and the game's team, can read it. Lines are deleted 30 days after they were written, or sooner if you delete them, a moderator removes them or you delete your account. To stop flooding, the game also keeps the times of your lines in the last hour and a code made from your last line, from which it cannot be read back. If a player reports a line, the report keeps a copy of it for the moderators until they deal with it; if a moderator removes a line, the staff audit history keeps its words. Blocking a nation in the chat uses the same list as blocking it in Messages, and the nation is not told. If a moderator silences you in the chat, the game keeps the silence with its reason, who set it, when and until when; you can still read the chat, you see the reason, and the silence is deleted with your account. A reaction you give to a line is kept on the line with your player ID until the line is deleted, and goes with your account. When you mention or answer a nation in the chat, it gets a notice in its game (your nation's name and the words, kept 30 days) and, if it turned them on, a push notification that says only who wrote; the game notes when it last sent a player such a notification.
• Letters by post. If you give an email address in Settings, under Letters by post, the game keeps it with the kinds of letter you chose, a key for the link that stops them, and when it last wrote to you. It writes only after you confirm the address with the code it sends, and only about what you chose: letters from other nations (who wrote, never what; in an hourly digest, or each one right away if you choose), wars, diplomacy, development news and a reminder when you are away. When you write to, fight or deal with another nation, the game leaves a short note (your nation's name and what happened) so that player can get a letter about it; notes are deleted within the hour or after 7 days at most. The game's staff also keep the notes about wars, diplomacy and trade (never those about letters) for 7 days, to see what happens in the game, and then they are deleted. Every letter has a link to stop them; Settings can change them or forget the address, and deleting your account deletes it too.
• Purchases. If you buy something in the Shop (the Bureau of National Finery), you pay Paddle (Paddle.com Market Limited), the game's reseller and merchant of record, which collects your name, email address, country, payment details and tax information to sell it to you, under Paddle’s privacy policy. When you open the Shop, the page loads Paddle’s script from Paddle and asks what its prices come to in your currency; Paddle works out your country from your IP address to answer. If you give a purchase to another nation, that nation sees your nation’s name with it, and the game keeps which account paid and which received it. The game never sees your card or bank details. With your player ID it keeps the Paddle customer, transaction and subscription numbers, what you bought, its price and currency, when it was paid, the months your Chancery Club membership is paid for, and any refund or chargeback. While you are a member it also keeps your saved design presets and the Expanded National Chronicle: your decisions and a daily snapshot of your nation's figures. Only you can see your purchases, presets and Chronicle.
• Storage in your browser. The game keeps your nation, your settings, your sign-in and your answer about visit statistics in your browser's local storage, session storage and IndexedDB. The game needs these to work. Apart from the Google Analytics cookies above, set only if you allow visit statistics, it uses no cookies, web beacons or other technologies to track you, and nothing to show adverts.
• Guest recovery and political actions. The server keeps only a hash of your one-time guest recovery code, not the code itself. A non-secret issuance marker prevents replacement codes; that marker may remain after account deletion. Assembly votes, proposals and leadership are protected server records displayed in the game. Your votes are public: each closed count is kept in the Assembly’s Book of Resolutions with how every member voted and the reason they gave, if any, next to their player ID. Deleting your account removes your votes and reasons from it. Temporary save approvals expire after two minutes. Hashed-IP recovery attempt counters expire after two hours; automatic expiry may take additional processing time.

The game asks for no sensitive personal data (such as health, beliefs or origin). Please do not put any personal information in your nation's texts or your posts: they are public.

What it is used for

To run the game for you, to deliver what you buy in the Shop and keep it on your account, to answer your support tickets and fix the bugs you report, and to keep the game safe and fair (reports, moderation, the address you last played from, and logs). These purposes are all needed for the game to work. The one other purpose (a secondary purpose, finalidad secundaria) is visit statistics, to see how many people play and how the game is used, so that it can be improved: they happen only if you allow them, and saying no changes nothing in the game. There is no marketing, advertising or profiling, and the data is never sold. For players in the European Union, the legal bases are the agreement in the terms (Article 6(1)(b) GDPR), the game's legitimate interest in keeping it safe (Article 6(1)(f) GDPR) and, for visit statistics, your consent (Article 6(1)(a) GDPR).

What other players see

Your nation (its name, flag, motto, description, statistics, land, history and passport) and your board posts and reactions are public: every player, and anyone who looks at the game's data, can see them. What you write in the region chat is seen by every nation of your region. So is the list of Shop cosmetics your account owns, and those you choose to wear (such as a Founding Supporter badge); what you paid, when, and your membership are not. Unless you switch it off, so is whether you were in the game in the last 15 minutes. Your letters to other nations are private: only you, the nation you write to and the game's team can read them. Your email address, your Google or Discord account, your IP address, your reports, your support tickets and the admins' notes about you are not public.

Who processes it, and transfers

The game runs on Google Firebase (Hosting, Authentication and Cloud Firestore), which Google provides as a processor (encargado) under its data processing terms; Google only processes the data to run the game. The game's database is in the European Union (Cloud Firestore, the eur3 locations in Belgium and the Netherlands), and Firebase Authentication and Google's delivery network may process data in other countries, including the United States. If you allow visit statistics, Google also processes them for the game in Google Analytics, as a processor under its data processing terms, which may also be in the United States. Your data is not shared with anyone else, unless a competent authority requires it by law. When you link a Google account, Google shares your details with the game under Google's privacy policy; when you link a Discord account, Discord shares your account ID and name under Discord's privacy policy. Sign-in links for an email address are sent by Firebase Authentication. When you buy something, Paddle handles the payment as the seller and as a separate controller of the data it collects, under its own privacy policy; the game sends it your player ID with the order and receives the purchase record described above. Paddle is based in the United Kingdom and may process data in other countries. The game's fonts are served from edictumgame.com itself, so no other company sees your visit. Letters by post are sent through Resend (Resend, Inc., United States) as a processor, which receives the address and the letter to deliver it.

How long it is kept

• Your account, nation and posts: until you delete them. A nation that has not been played for 250 days becomes dormant and disappears from other players' view, but is kept so that you can wake it.
• Reports: until a moderator has dealt with them, then they are deleted.
• Support tickets: deleted automatically 90 days after they are closed. You can ask for one to be deleted sooner.
• Bug reports: until you or the game's team delete them (you can delete yours on the Report a bug page), or until you delete your account.
• Save diagnostics: expire seven days after the last report, or are removed when you delete your account. Automatic expiry may take additional processing time.
• The IP address you last played from: deleted automatically 90 days after it was last recorded, or when you delete your account. Automatic expiry may take additional processing time.
• The admins' notes about your account, and a place on their watchlist: until an admin deletes them, or until you delete your account.
• The staff's copy of what nations did to each other (wars, diplomacy and trade, not letters): 7 days.
• The coded sign-ins of a banned account: for as long as the ban lasts, also after the account is deleted. They go when the ban is lifted.
• Staff audit history: retained as a record of staff actions, including after a player's account is deleted. It cannot be edited or deleted from the game.
• Purchase records (what you bought, when, its price, refunds and chargebacks): for as long as they are needed to honour your purchases, handle refunds and disputes, and meet accounting and tax rules, also after you delete your account. Design presets and the Chronicle: until you delete them or your account; the Chronicle keeps twelve months.
• Backups: the database is backed up daily (kept 14 days) and can be restored to any moment of the last 7 days. Anything you delete is gone from the backups within 14 days.
• Visit statistics: Google Analytics keeps the detailed records for at most 14 months. Its cookies stay in your browser for up to two years, unless you turn visit statistics off or clear them.

Deleting everything, and withdrawing consent

Open the account menu (at the foot of the side bar, or at the top of the founding page) and choose Delete my nation and account. That deletes your nation, every post you wrote, your support tickets and bug reports, the address you last played from, the admins' notes about you and your account, with its links to Google, Discord or your email address, at once, and is the simplest way to withdraw your consent. A Chancery Club membership is cancelled first, and what you bought goes with the account; the purchase records stay as described above. If you play as a guest and your guest sign-in is too old to be removed, an empty guest ID without any data may remain in Firebase Authentication.

To withdraw your consent to visit statistics, choose Turn off in the account menu or above: the game stops sending them and deletes the Google Analytics cookies in this browser.

Your rights (ARCO and more)

You may access the data the game keeps about you, have it rectified, have it cancelled (deleted), and oppose its use; players in the European Union may also restrict its use and receive it in a portable form. Most of this you can do in the game. Otherwise, write to p.slettenaar@gmail.com with your name, your player ID (shown in the account menu), the right you want to exercise and what it concerns. You will get an answer within 20 business days, and a decision in your favour is carried out within 15 business days after that.

If you are not satisfied, you may complain to the data protection authority: in Mexico, the Secretaría Anticorrupción y Buen Gobierno; in the European Union, the authority of the country where you live.

Children

Edictum is not meant for children. If you are under 18, play only with your parent's or guardian's permission.

Changes

If this notice changes, the new version appears on this page with a new date at the top.

Back to Edictum · Terms of use