Privacy Policy | Dragonbred

This policy explains what information Dragonbred collects when you play in a web browser or on the iPhone app, what we do with it, and the choices you have. Dragonbred is run by [Operator: your full legal name or company name] ("we", "us"). If you have a question, write to [contact email].

What we collect

When you create an account

You sign in through Clerk, our sign-in provider. From your sign-in we receive your email address, your name and profile picture if your sign-in method provides them, and an account ID. If you pick a username, we store that too, along with when you last changed it and the usernames you had before.

When you play

To run the game we store your game: your dragons and what you know about them, eggs, clutches, the broods growing up in your nursery, sealed crates, cosmetics, your Scales and Embers balances, Instant Cards, your level, experience and skills, your Daily Pass progress, settings (such as your look, sound and backdrop, and who sees your pen and activity), achievements and world firsts, labels, the dragons on your profile, the keepers you follow, and a record of the actions you take in the game (for example laying a clutch, opening a crate or buying a listing).

We also store what happens between you and other keepers: listings, offers (with any note you add to one), trades and sales, the listings you watch or look at and the searches you save, the reports you send about other keepers, listings or names, and the keepers you block. If another keeper reports you, we keep their report and anything our team did about it.

When you buy something

Purchases on the iPhone go through Apple; purchases on the web go through Stripe. Your card details go to them, not to us. From them we receive a transaction ID, what you bought, the amount, and whether the payment completed, was refunded or was disputed (charged back). For a membership we also keep whether it is set to renew and when it renews or ends, and, for one billed by Stripe, Stripe's customer number so you can manage it. We keep that record with your account, along with what a refund or chargeback took back.

Automatically

Our servers keep request logs: your IP address, the page or action requested, your browser or app version, and the time. We use them to keep the game running, to stop abuse (such as too many requests from one place) and to fix problems. We keep them for about 30 days.

When something goes wrong in the game, an error report (what failed and where in our code) goes to Sentry so we can fix it. Error reports leave out your email address and your IP address.

How you use the game

The web game and the iPhone app tell our server how they're used, so we can see what works and what doesn't: when a visit starts, which screens you open, whether you're on the web, the installed web app or the iPhone, the kind of device (phone, tablet or computer), the app version, the site that sent you or the campaign in the link, which link on one of our guides you followed, signing in and out, starting a checkout, sharing a dragon, whether you allowed reminders, and errors the app runs into. Each device gets a random ID so a visit before you sign in can be joined to your account after; once you're signed in, these events are linked to your account. They never include your email, your name or payment details. We keep them for 13 months, then delete them.

The first time the iPhone app opens, it asks Apple whether it was installed from an Apple Search Ads campaign (Apple's AdServices, which uses no advertising ID). If it was, we keep which campaign, ad group, search keyword and country, with the events above.

The walkthrough

We are testing two versions of the walkthrough that new keepers play first. Each new account is given one of the two at random and keeps it. We record which one you were given, how far you got and when (opening the first crate, laying and hatching the first clutch, the end), or the step you skipped from. To choose the better version, we compare the two groups as totals: how many finished, came back on later days, kept breeding, and bought something. Both versions teach the same game; neither changes prices, odds or what you can get.

Inviting friends

If you join with another keeper's invite, we record who invited you, whether you came by their link or typed their code, and when. If you invite others, we keep the same about each of them. We also keep your invite code, and the Friend Crates each of you was given and collected.

To stop people inviting themselves, when you open an invite page or use or collect an invite, we keep a scrambled (hashed) form of your network address and a random ID your browser or app makes for this. We keep them for 90 days. They can't be turned back into your address, and we use them only to check invites: if an invite looks like one person on both sides, the inviter's Friend Crate waits while our team checks it, and an invite that doesn't count gives no crate.

On your device

The web game keeps your settings, which first-time tips you've already seen, the random device IDs described above (one for usage statistics, one for checking invites), and recently drawn dragon pictures in your browser's storage, so pages open faster. The sign-in uses cookies from Clerk to keep you signed in, and the site sets one cookie of its own that only says this browser is signed in, so the front page can take you straight to your game. If you open a link that carries an invite, a second cookie of ours holds that invite's code for up to 30 days, until you sign in and it's used. The iPhone app keeps a copy of your pen on the phone so it opens quickly and can be read offline, and it schedules reminders (eggs ready to hatch, a dragon ready to breed again, a new orders board, a listing about to end) on the phone itself. Its photo mode saves a picture to your photo library only when you ask, and never reads the library. None of these are advertising cookies, and nothing in the game follows you on other sites or apps.

These usage statistics are collected and kept by us alone. We don't use third-party advertising or analytics services; if that changes, this policy will say so first.

How we use it

To run your account and your game, and to keep it the same across the web and the iPhone app.
To process purchases and give you what you bought, to renew a membership until you cancel it, and to take back what a refunded or charged-back payment bought.
To run the market and trades between keepers, including holding items and Scales while a sale or offer is open.
To keep the game fair and safe: to look into reports, stop cheating and abuse, and enforce our Terms of Service.
To send you messages in the game's inbox about your account, your sales and changes to the game.
To understand how the game is played and improve it: where new keepers get stuck, which features are used, what breaks, which links bring people in, and which of two versions of something (such as the walkthrough) works better. The public economy page shows totals only, never anyone's details.

What other keepers can see

Dragonbred is a game you play alongside other keepers, so some of what you do is visible:

Your username, and the name from your sign-in if it gave one, shown together on your profile, on leaderboards and beside world firsts and other things you did first.
Your profile: your avatar dragon, the dragons you choose to show, your keeper rank, level and stats, when you joined, how many keepers follow you, the cosmetics you wear, and your activity and your pen, which everyone can see unless you change that. You choose who sees your activity and your pen in Settings.
Your listings, with your name as the seller, and your record as a trader (how many trades, how often you answer offers).
Your offers, and any note you add, to the keeper you make them to.
If you joined with someone's invite, that keeper sees your username (and your name, as your profile shows it), your level, and whether you've reached level 5. A keeper you invite sees that the invite was yours.
The /join page of your invite link shows your username, or your name if you have none, to anyone who opens it.
Your place on leaderboards and any world firsts you hold.
A dragon's public page: its look, its record and lineage, and whose pen it is in.
The names you give your dragons.

Some of this can be seen without signing in. Anyone with the link can open a dragon's page, a listing or your profile, and search engines may find them. A shared profile shows your username, your name, your keeper rank, when you joined and how many dragons you keep. A shared listing names you as its seller. A dragon's page names you only if your pen is open to everyone.

Other keepers never see your email address.

We share information only with the companies that help us run the game, and only what they need:

Clerk, for signing in and managing accounts.
Stripe, for payments and memberships on the web, and Apple, for purchases and memberships in the iPhone app.
Vercel, which hosts the website; Heroku, which runs our game server; and Prisma, which hosts our database.
Sentry, for the error reports described above.

We may also share information if the law requires it, to protect players or the game from fraud or harm, or with a company that takes over the game, which would have to keep this policy's promises. We do not sell your personal information, and we don't share it for advertising.

Keeping and deleting it

We keep your account and game for as long as you have an account.

You can delete your account at any time from Settings. When you do, your sign-in is removed, your listings come down, and open offers and trades close (with Scales returned to the other keeper). A membership billed by Stripe is cancelled first. A membership billed by Apple keeps renewing until you cancel it in your Apple account's subscriptions; the game tells you this before you confirm.

Deleted straight away:

Your email address, name and profile picture, from our database and, with your sign-in, from Clerk.
The usage events described under "How you use the game", including the visits your devices made before you signed in.

Kept, linked only to a random account number that no longer leads to your email, name or picture:

Your username, and any you had before, which stay reserved so nobody else can take them and pass themselves off as you. They are no longer shown anywhere.
Your game, archived: your dragons, eggs and clutches, your settings, inbox messages, achievements, levels, skills and labels, your Daily Pass progress, which walkthrough you were given and how far you got, the keepers you followed and blocked, and the record of the actions you took in the game, who invited you and the keepers you invited (your invite code stops working). Dragons you sold, traded or bred can live on in other keepers' pens with their family tree, and the action log goes into game-wide totals (such as how many keepers played on a day).
Your listings, offers, trades and sales with other keepers, because their records need them.
The reports you sent, and those sent about you with what our team did, so a report already being looked into can be finished.
Your purchase records (the store's transaction ID, what you bought, the amount, whether it completed, was refunded or was disputed, and a membership's billing record) and the record of the Embers you bought and spent, for as long as tax and accounting law requires. They hold no contact or card details.

Request logs are deleted after about 30 days, as for everyone.

Your choices and rights

You can see and change most of your information in the game itself: your username, your dragons' names, who sees your pen and activity, and your reminders. You can delete your account from Settings.

You can also download your data from Settings ("Download my data"): one file (JSON, which any text editor opens) with your account details and settings, your game and its records, your market listings, offers, trades and sales, your purchases, membership and Embers, your levels, achievements and Daily Pass progress, which walkthrough you were given and how far you got, who invited you and the keepers you invited, your inbox, the keepers you follow and block, the reports you sent and your usage events. Other keepers appear in it by their public username only. Your dragons' hidden genes and your eggs' fates are left out, as they are in the game: they're the game's secrets, not information about you. You can download it a few times an hour.

Depending on where you live (for example in the European Union, the United Kingdom or California), you may also have the right to ask for a copy of your information, to have it corrected or deleted, to object to how we use it, and to complain to your local data protection authority. To ask, write to [contact email]. We'll answer within the time the law gives us.

Children

Dragonbred is not meant for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has an account, write to [contact email] and we'll delete it.

Security

We protect your information with encrypted connections, signed-in access to every part of your account, and limits on who can reach our systems. No service can promise perfect security, so please keep your sign-in safe.

Where it's kept

Our servers and providers may be in a different country from you, including the United States. Where the law asks, we rely on the safeguards it allows for moving information between countries.

Changes

If we change this policy, we'll update the date below and, for important changes, tell you in the game before they take effect.

Contact

[Operator: your full legal name or company name], [mailing address]. Email: [contact email].

This policy took effect on October 27, 2026.