Promised Land Privacy Policy

Privacy Policy — Promised Land

Effective date: 2026-09-09
Last updated: 2026-09-09

This policy explains what Promised Land does with your information. It covers the Promised Land
mobile app (Android and iOS) and the web version at https://promised-land.reinoeterno.online.

Promised Land is provided by Reino Eterno (“we”,
“us”). For anything in this policy, write to contact@reinoeterno.online.

The short version

You can install Promised Land and play it without an account, without an internet connection, and
without giving us anything at all. Games you play by passing the device around stay on the device.

You only give us information if you choose to create an account, which exists for one reason: to
play online games against people who are not in the room with you.

We do not show ads. We do not use analytics or tracking tools of any kind. We do not profile you,
and we do not sell, rent, or trade your information.

What we collect, and why

Playing on your own device

Nothing is sent to us. The games you start, the names you type for the players, the optional
4–6 digit PIN a player can set to protect their turn, your language and other settings are written
to a database inside the app on your device. We cannot read it, and deleting the app removes it from
the device.

On Android, that database is included in the system’s own app backup if you have device backup
switched on. That copy goes to your Google account, not to us — we can neither read it nor delete
it, and it is what restores your games when you set up a new phone. You control it in your device’s
backup settings.

On the web version, the same information lives in your browser’s local storage so that reloading
the page does not lose the game in progress. It stays in your browser and is not sent to us.

If you create an account

To open an account we ask for:

• Your email address — it identifies the account, it is where invitations and notifications go,
  and it is how you recover access if you forget your password.
• A display name — the name other players see at a table. It does not have to be your real name.
• A password — handled by our authentication provider, named in the “Who else is involved”
  section below. It never reaches our own database, which records only that an account exists and
  which authentication account it belongs to.

We also store the language you prefer for email, and whether you have turned turn-notification email
off.

We ask you to confirm your email address before the account can host games. This is to stop someone
signing up with an address that is not theirs.

If you play online games

An online game is a shared object, so the following is stored on our server and is visible to the
other players at that table:

• The name given to the game, and the name and colour of each seat.
• Whose turn it is, when the game started, and when the last move was made.
• The state of the board itself — a saved snapshot of the game, which is what lets the next player
  pick it up on their own device.

When you invite someone to a private table, we store the email address you invited so the
invitation can be sent and so the seat can be matched to them when they accept. Please invite only
people who expect to hear from you.

Email we send you

We send email only for these reasons: to verify your address, to reset a forgotten password, to
confirm an account deletion you asked for, to deliver an invitation to a table, and — for private
tables — to tell you when it is your turn. There is no marketing email, and there is no mailing
list.

You can turn off turn notifications in your profile at any time. The other messages are part of
operating the account and cannot be turned off, because each of them exists only in response to
something you did.

Technical information

When your device talks to our server, the server sees your IP address, as every internet server
does. We use it to limit how many sign-in and password attempts can come from one place, which is
what keeps other people’s accounts from being broken into by brute force. It is held briefly in the
server’s memory for that purpose and is not stored in our database. IP addresses and requested
addresses may also appear in ordinary server logs, which we keep for 30 days
and use only to run and secure the service.

The app requests no device permissions other than internet access. It does not read your contacts,
location, photos, files, camera or microphone, and it does not use advertising identifiers.

What we never do

• No advertising, and no advertising networks.
• No analytics, telemetry, crash-reporting or attribution SDKs. The app contains none.
• No selling, renting or trading of personal information.
• No automated decision-making or profiling.

Who else is involved

Running the service needs a few providers, who process data only on our instructions:

Our game server runs in the United States, and DreamHost is a United States company. If you are in the European Economic Area or the United Kingdom and your data is handled outside it, that transfer relies on the safeguards our providers have in place, such as standard contractual clauses.

How long we keep things

• Your account is kept until you delete it.
• Online games are kept as long as the table exists. Deleting your account deletes any table you
  had created but not yet started, and removes your email address from the seats of games already
  under way. Those games themselves remain, because the other players are still playing them, and
  the seat keeps the display name printed on their board.
• Verification, password-reset and deletion codes expire shortly after they are issued and are
  discarded once used.
• Server logs are kept for 30 days.

Games stored on your own device are kept until you delete them or uninstall the app.

Your choices and rights

You can, at any time:

• See and correct the information on your account from the profile screen in the app.
• Turn off turn-notification email from the same screen.
• Delete your account, also from the profile screen. We email you a confirmation code first,
  because deletion is permanent. Deleting the account removes your email address, your display name
  and your sign-in credentials, along with any table you had created but not yet started. Games
  already in progress carry on without you — they belong to the other players too — with your
  address stripped from the seat.
• Play without an account — every offline part of the game remains available.

Depending on where you live, you may also have the right to a copy of your data, to have it
corrected or erased, to restrict or object to how it is used, and to complain to your national data
protection authority. If you are in Brazil, the LGPD gives you these rights; in the European
Economic Area and the United Kingdom, the GDPR does. Write to contact@reinoeterno.online and we will
answer within 30 days.

Our legal basis for handling account and game information is the performance of the agreement
between us — you asked to play online and this is what it takes. Our basis for rate limiting and
security logging is our legitimate interest in keeping accounts safe.

Children

Promised Land is not directed to children under 13, and we do not knowingly collect personal
information from them. If you believe a child has created an account, write to contact@reinoeterno.online and we will delete it.

Security

Passwords are handled by our authentication provider and are never stored by us in a readable form.
Traffic between the app and our server travels over HTTPS. Sign-in and password endpoints are rate
limited. No system is perfectly secure, but we take these measures because they are the ones that
matter most for an account like this.

Changes to this policy

If this policy changes we will update the date at the top and publish the new version at the same
address. Significant changes will also be announced in the app.

Contact

Reino Eterno
contact@reinoeterno.online