Last updated: November 13, 2026. This policy covers the website and Android app.
Brokain Brothers operates Gravenhour. Contact us at brokainbrothers@gmail.com for privacy questions, support, and requests about your data.
We use it to authenticate players, keep rooms synchronized, run gameplay and dialogue, remember progress, reconnect sessions, handle deletion requests, and investigate abuse. Providing a saved email account is optional; multiplayer still requires a guest identifier.
Other participants can see shared gameplay information, names, and public discussion. Secret messages are intended for their participants. Host-controlled characters require the host device to process relevant character messages and memory. The game is host-authoritative; secret messages are not end-to-end encrypted. The operator can access stored information for support and moderation. Reports are not exposed to other players through the reporting interface.
Google Firebase provides authentication, hosting, and database services. Requests to hosting, Firebase, and remotely loaded fonts or scripts expose connection information such as IP address and browser/device information to the relevant service providers. See Google's privacy policy. The website loads Google-hosted scripts and fonts; the Android prototype bundles Firebase scripts locally but still connects to Firebase.
The game stores authentication state, cached profile information, preferences, and acceptance of the player rules on your device. Clearing browser or app data can lose access to an unsaved guest account. This does not delete its server records. The current build does not initialize an advertising SDK or Firebase Analytics; this policy and store disclosures must be reviewed if those features are added.
Account, room, message, and progression records currently have no automatic expiry. They remain stored until manually removed or a verified deletion request is completed. Player reports and block records also remain until manually removed; we review reports daily.
You can request deletion of your account and associated personal data from the game's Account controls or the account deletion page. We aim to complete verified requests within 30 days. Submitting a request is not immediate deletion. Deletion includes your login, profile and earned progress, associated personal game data, and the completed request record. If we must retain specific information for legal or security reasons, we will explain what is retained, why, and for how long when responding to your request. Data already copied independently by other players cannot be removed from their devices by this game.
You can play without a saved email account, choose what you share, block players, report abuse, and request account deletion. Avoid posting personal information in gameplay. Email brokainbrothers@gmail.com for data access, correction, deletion, privacy concerns, or help if you cannot sign in. We may ask for information needed to verify that a request concerns your account, but will never ask for your password.
A parent or guardian concerned about a child's information can contact us at the email above. We will review the request and verify the information needed to act on it. If our data practices change, we will update this policy and its date, and provide additional notice where appropriate.