Legal
Privacy Policy
Last updated 26 October 2026
Template — review before launch
This document accurately describes what the Phase 1 software actually stores. It still needs review by a qualified privacy practitioner against the specific regimes TAT will operate under (GDPR, UK GDPR, CCPA, NDPR and others) before public launch. It is not legal advice.
Our starting position
TAT is designed so that we do not need to know who you are. You play as a nickname. We collect the minimum required to operate an account, and nothing that is merely “useful to have later”.
What we collect
| Data | Why we hold it | Shown to others |
|---|---|---|
| Nickname | Your public identity in the game | Yes |
| Email address | Sign-in and account recovery | Never |
| Password | Stored only as a one-way hash; we cannot read it | Never |
| Age confirmation | Eligibility to use the service | Never |
| Consent timestamps | Proof you accepted these documents | Never |
| Player ID (UUID) | Links your game data without using your email or nickname | Never |
| Game data | Decisions, events, relationships, scores, archived lives | Only as you choose |
| Hashed client identifier | Rate limiting and abuse prevention | Never |
What we deliberately do not collect
We do not ask for and do not store your legal name, phone number, postal address, gender, date of birth, employer, school, photograph, social media accounts, government identifiers, or precise location. Please do not enter any of these into any field in the game.
IP addresses
We do not write raw IP addresses to our database. Where we need to recognise repeated requests — to stop brute-force sign-in attempts, for example — we store a one-way keyed hash instead, which cannot be turned back into an address. Your hosting provider’s own web server logs are separate and are governed by that provider’s retention settings.
Account data and game data
These are kept structurally separate. Your decisions, relationships, scores and archived lives are linked to your random player ID, not to your email address or your real-world identity.
Cookies
TAT sets one strictly necessary cookie: a session cookie that keeps you signed in. It is marked HttpOnly, SameSite and (over HTTPS) Secure. We use no advertising cookies and no third-party analytics trackers.
Sharing
We do not sell your data and we do not share it with advertisers. We share it only with the hosting provider that runs the service on our behalf, or where we are legally required to.
Retention
Account data is kept while your account is open. Audit and rate-limit records are short-lived and pruned on a schedule. If you close your account, account data is deleted; completed lives may be retained in de-identified form for game statistics, with no link back to your email address.
Your rights
Depending on where you live you may have the right to access, correct, export or delete your data, and to object to certain processing. Contact us using the address published on the game’s website and we will respond within the period your local law requires.
Children
TAT is not intended for anyone below the minimum age shown at registration. If we learn that an under-age account has been created, we will close it.
Changes
We will announce material changes to this policy in the game before they take effect.