Privacy policy

1. The short version

Wisp is a small game made by a small studio. We store the least we can get away with: an email address so you can sign in, the state of your world so you can come back to it, and enough of a record to stop somebody brute-forcing your password. We do not run advertising, we do not run analytics, and we have never sold anybody's data.

The rest of this page is the detail behind those sentences.

2. What we store, and why

Your account

• Email address — how you sign in, how we send you a password reset, and how we tell you your Alpha place has opened.
• Password — stored only as a one-way hash. We cannot read your password, and neither can anybody who obtains the database.
• Display name — the name shown on your account. If you signed in with Google it was made from your email address, not taken from your Google profile.
• When you signed up and when you last signed in.

If you use "Continue with Google"

Signing in with Google is optional; email and password work just as well. If you use it, we ask Google for exactly two things: a permanent ID number for your account, and your email address.

We deliberately do not ask for your name. Google offers it, along with your profile picture, and we turned it down — a game does not need to know what you are called to let you in. Google's own sign-in screen will tell you the same thing: it lists what a site has asked for, and ours asks for an email address. Your display name in Wisp is made from your email address instead, and you can change it.

We never receive your Google password, and we cannot see your Gmail, contacts, Drive or anything else in your Google account.

Your game

• World saves — the snapshot of your planet, your Wisps and what has happened to them.
• Your card collection and the packs you have opened.
• WispCoins and items — your balance, and a record of every movement in it so that a lost coin can be traced and given back.

Technical records

• A sign-in session — stored against your account with the IP address and browser you signed in from, so you can be signed out and so unusual activity is visible.
• Failed sign-in attempts — the IP address and the email tried, kept briefly. This is what stops somebody guessing passwords against your account. It is deleted on a successful sign-in.

The Alpha waitlist

If you apply for the Alpha, we keep the email address you applied with and the date, so we know who is in the queue and in what order. That is the whole record.

3. What we deliberately don't do

• No advertising. There are no ad networks in the game or on this site.
• No analytics or tracking pixels. We do not use Google Analytics or any equivalent, and nothing follows you to other websites.
• No selling or sharing your data. Not to advertisers, not to data brokers, not to anyone.
• No card details. Wisp does not currently take real-money payments at all. No payment card has ever touched our servers, because there is nothing to pay for. If that changes, this page changes first, and a payment processor would handle card details directly — never us.
• No reading your messages. What you type to your Wisps stays in your own world save. It is not analysed, mined or read by us.

4. Cookies and local storage

We set one cookie. It holds a random sign-in token — nothing about you, and nothing readable. If you tick "Keep me signed in on this device" it lasts thirty days; if you don't, it disappears when you close the browser. There are no advertising or tracking cookies, so there is no consent banner to click away.

The game also keeps things in your browser's own local storage — your settings, and a copy of your world so it can run when the network drops. That data lives on your machine and is not sent anywhere except when your world is saved to your account.

5. Other companies involved

• Google — only if you choose "Continue with Google". Google will know you signed in to Wisp. Their handling of that is covered by Google's privacy policy.
• Google Fonts — this site and the game load typefaces from Google's font servers, which means Google sees the IP address requesting them. This is the one piece of third-party loading on the site.
• Our hosting provider — the server runs on rented infrastructure. They hold the disk the database sits on, as any host does.

That is the complete list. There is no fourth party.

6. How long we keep things

• Your account and game data — until you ask us to delete it.
• Sign-in sessions — until they expire or you sign out.
• Failed sign-in records — a matter of minutes, then gone.
• Waitlist entries — until the Alpha ends or you ask us to remove yours.

Wisp is in Alpha. We may have to reset worlds, collections or balances while the game is being built — see the terms of service. We will say so beforehand where we can.

7. Your choices

Email support@firelitgames.com from the address on your account and we will, without argument:

• tell you everything we hold about you;
• correct anything wrong;
• delete your account and everything attached to it;
• take you off the waitlist.

Depending on where you live — the UK, the EU, California and others — you may have these rights in law as well. We would rather simply honour them for everybody than ask you to prove where you are.

8. Security

The site and the game are served over HTTPS. Passwords are hashed, never stored in a form we could read. Sign-in cookies hold a random token, and only a hash of that token is kept on the server, so the database alone cannot be used to impersonate you.

No system is perfect, and we would rather say that plainly than promise otherwise. If you find a security problem in Wisp, please write to support@firelitgames.com — we would genuinely like to hear from you, and we will not be difficult about it.

9. Children

Wisp is not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child has made an account, write to us and we will delete it.

10. Changes

If this policy changes in a way that matters, the date at the top of this page changes and we will say so in the game. Continuing to play after that means the new version applies.

11. Contact

Firelit Games
support@firelitgames.com