Privacy
Last updated 21 October 2026.
Guidlands is a browser game run by Big Bwain ("we"). This page says what the game keeps about you, why, for how long, and who else sees it. Short version first, because nobody reads the long one.
The short version
- We don't sell your data, show ads, or use advertising or tracking cookies.
- We keep what the game needs to run your character and keep the world fair.
- We never store your e-mail address, or your password as you typed it.
- The game measures its own speed and faults anonymously. You can turn that off in Settings, Help.
- Cloudflare, which carries our traffic, also counts page views. Its Web Analytics sets no cookie.
- Questions, a copy of your data, or deletion: support@bigbwain.com.
Your character
To play, the game keeps your character on its server: your Name, level and skills, what you carry and wear, your bank, the Guids you have found, where you last stood, your friends and blocks, and your progress in the game's systems. Your browser holds a random sign-in token that tells the server which character is yours.
A character with no account, unplayed for 30 days, is deleted and its Name is freed.
Your account
An account lets you keep your characters on any device.
- E-mail. We never store your e-mail address. We store a one-way, keyed fingerprint of it, so the server can find your account when you sign in. The fingerprint cannot be turned back into your address.
- Password. Never stored. We keep only a scrypt hash of it, which cannot be turned back into your password.
- Password reset. If you ask for a reset link, the address you type is handed to our mail service, Resend, to send it, and is not kept by us. We record that a message was sent, never to whom.
- Sign in with Google. We keep a keyed fingerprint of the account ID Google gives us. We never receive your Google e-mail, name or picture.
- Devices. We keep a one-way fingerprint of each device a character has played on, and each device's sign-in as a hash, so you can sign out everywhere.
The website
If your character is signed in to an account, guidlands.com's Hiscores and its character page show its Name and its public facts: look, worn gear, level, skills, rating, bosses, titles, feats, collection and duels. Turn off Shown on the website in Settings and it leaves the website within a minute. A character with no account is never shown.
Chat, reports and fair play
- Chat. What you say in a land, in the world channel and in your guild's chat is kept in the game's records, so moderators can check a report against what was actually said. It is kept for 12 months, then deleted.
- Reports. A report you make names a character, a reason and usually the line it is about, so a moderator can read both.
- Moderation. Any warning, mute, restriction or ban on your character is kept with its reason and its end, so it can be reviewed and appealed.
- Appeals. If you appeal a moderation action, your note is kept with that action for the moderators to read.
Reports, warnings, mutes, bans and appeals are kept with the character they are about, and deleted with it.
Your network address (IP address)
- The game server uses your IP address while you are connected, to limit abuse (for example, how many new characters one address may make in an hour). It does not write your address to its files. Where it must remember an address for fair play, it keeps a keyed fingerprint instead: for one day to count new characters, and for at most 30 days when a moderator blocks an address.
- The web server's access log records each request to the game (the time, the page or file asked for, your browser's description of itself, and your IP address). It is kept for up to 14 days, to find faults and stop attacks.
- Cloudflare carries all traffic to the game and to guidlands.com, to protect and deliver it, and sees your IP address while it does.
Anonymous measuring (speed and faults)
To keep the game fast and fix what breaks, the game sends its own server a short report:
- Speed: a summary of your frame rate, how long the first land took to load, your connection's round trip, how often it reconnected, your device class (phone, tablet or desktop), your graphics level, and the game's version.
- Faults: when something in the game breaks, the error's message and where in the game's code it happened, cleaned of web addresses and anything shaped like a Guid.
It never carries your Name, your Guid, your account or your IP address. The server uses your address only for a moment to limit how many reports one address can send, and never writes it. Reports are kept as totals, for 90 days. They go to our own server and no one else. Nothing is stored on your device for it.
The off switch: Settings, Help, Help improve the game. Turn it off and the game sends none of it. Your choice is remembered on that device.
Cloudflare Web Analytics
Cloudflare also counts visits with its Web Analytics, a small script of its own that it adds to the game's pages and to guidlands.com. For each page view it records the page's address, your browser and device type, your country (worked out from your IP address), and how long the page took to load. By Cloudflare's own description, Web Analytics sets no cookie and keeps no profile of you. It is Cloudflare's, not the game's, so Help improve the game does not turn it off. Cloudflare's privacy policy covers it: cloudflare.com/privacypolicy.
Report a bug
When you report a bug, we keep what you wrote, the screenshot if you chose to attach it (you can remove it before sending), your character's Name, and the game's version, so we can fix it. Bug reports are kept with your character, and deleted with it.
The Workshop
The Workshop: what you send there (its picture or sheets, its name and examine text, your character's Name, the agreement you ticked and when) is kept with your account so makers can review it, and stays kept while the piece is in the game, even after the character is gone; an approved one may be used and changed in the game, credited to you; a draft stays on your device until you send it.
Notices
If you turn on Notices, your browser's own push service (run by your browser's maker, such as Google, Mozilla, Apple or Microsoft) gives us an address for your device. We keep it, for up to five devices, until you turn Notices off.
The Shop
Payments go through our payment service, Stripe. We never see or store your card. We keep the order: what you bought, the price, when, how it stands, and the reference numbers Stripe and the game give it. If you save a card for next time, we keep the customer reference Stripe gives your account (Stripe keeps the card). What you type at Stripe's checkout is covered by Stripe's own privacy policy. Order records are kept as long as the law requires for tax and accounts.
On your device
The game sets no cookies. It keeps these in your browser's storage, and they stay on your device:
- your sign-in token and a random device number;
- your settings (sound, display, zoom, interface size, graphics, colors, controls and key bindings, and the rest of Settings);
- small notes that save you repeating yourself: the tips you have seen, your quick items and bar items for each character, your place in the first steps, and the cards waiting for you;
- postcards: a picture of a land you visited, its Guid and the day;
- the game's own files, so it loads faster next time.
Only your sign-in token is ever sent, to sign you in. Clearing this site's data in your browser removes all of it. Cloudflare may set a strictly necessary security cookie of its own.
Who else sees your data
Nobody buys it. These services handle it for us, only to run the game:
| Service | What for |
|---|---|
| Microsoft Azure | the server the game runs on |
| Cloudflare | carrying and protecting traffic, and counting page views (Web Analytics) |
| Stripe | payments in the Shop |
| Resend | password reset messages |
| only if you sign in with Google | |
| your browser's push service | only if you turn on Notices |
The game's moderators read chat records, reports and moderation actions to keep the world fair.
How long we keep it
| What | How long |
|---|---|
| A character with no account | until 30 days after it was last played |
| An account and its characters | until you ask us to delete it |
| Chat records | 12 months, then deleted |
| Reports, moderation actions and appeals | as long as the character they are about; deleted with it |
| Address fingerprints | 1 day (new-character counts), at most 30 days (an address block) |
| The web server's access log | up to 14 days |
| Anonymous measuring | 90 days, as totals |
| Bug reports | as long as your character; deleted with it |
| Shop orders | as long as the law requires for tax and accounts |
| Backups of the game's data | 14 days |
Deleted data leaves our backups within 14 days.
Your rights
Wherever you live, you can ask us for a copy of what we keep about you, to correct it, or to delete it. If you are in the EU or the UK (GDPR) or in California (CCPA), these are your legal rights, and you can also complain to your data protection authority. We don't sell or share your personal information for advertising.
To ask, or to delete your account, e-mail support@bigbwain.com with your character's Name. We answer within 30 days. Deleting an account deletes its characters, and that cannot be undone.
Guidlands is not meant for children under 13. If you believe a child under 13 has given us personal information, tell us and we will delete it.
Changes
When this page changes, the date at the top changes with it, and the game's What's new says so.
Contact
Guidlands · Play