Privacy Policy
Colosseom (colosseom.io) is a free game run by one person, Xyphien, from Kokomo, Indiana, USA, as part of LonePortal.com. This page explains what Colosseom collects when you play, why, and what you can do about it. The short version: we keep what we need to run your account and your match history, we don't sell anything, and there are no ads or trackers.
What we collect
- Your account: your email address, your username, and your password. Your password is stored scrambled (hashed) so nobody, including us, can read it.
- Your age confirmation: that you said you're 13 or older. We don't ask for your birthday.
- Your game record: wins, losses, match results (who you fought, the score, how it ended), your Denarii balance and history, the looks you own, and the look you're wearing.
- Your login: when you log in, your device keeps a login key so you stay logged in. We store a scrambled copy of it and when it was last used.
- Your connection: our servers see your IP address while you're connected, so they can send you the match and stop abuse (like too many login attempts). We don't save it to your account.
What other players see
Your username, your look, your wins and your matches are public: they're shown in the arena, in the line to fight, and on leaderboards. Your email address is never shown to anyone.
We only email you about your account: the link to confirm your email, and password reset links you ask for. We don't send newsletters or ads. Emails are sent through Resend, an email delivery service, which receives your email address and the message so it can deliver it.
Who else handles your data
- DigitalOcean rents us the server Colosseom runs on (New York, USA). Your account and game data are stored there.
- Resend delivers our emails (see above).
The game and website load no outside scripts, fonts, ads or analytics. We don't sell or rent your information to anyone.
How long we keep it
- Your account and game record: until you ask us to delete your account.
- Login keys: 60 days after you last log in, or until you log out.
- Email links: confirmation links expire after 3 days, password reset links after 1 hour.
- Backups: one copy a day, each kept for 14 days and then deleted.
Cookies and tracking
There are no ads, no analytics and no tracking cookies. The only thing saved in your browser is your login key and your game settings, so you stay logged in and keep your settings. Because we don't track you, there's nothing for "Do Not Track" or Global Privacy Control to turn off.
Kids
You must be 13 or older to make an account. We don't knowingly collect information from anyone under 13; if we learn that an account belongs to someone under 13, we delete it and its information. Parents can contact us at colosseom@loneportal.com.
Your choices
- You can log out at any time from the menu. Changing your password logs you out everywhere.
- You can ask for a copy of your data, a correction, or for your account to be deleted by emailing colosseom@loneportal.com from the email on your account. Deleted accounts are gone from backups within 14 days.
- These choices are for everyone, wherever you live. Colosseom is a small free game, so laws like California's CCPA and Indiana's Consumer Data Protection Act generally don't cover it, but you get the same access, correction and deletion either way.
Security
Connections to Colosseom are encrypted (HTTPS), passwords and login keys are stored hashed, and access to the server is limited. No system is perfect; if something ever goes wrong with your data, we'll tell affected players.
Purchases
Colosseom doesn't sell anything yet. If we add purchases, payments will be handled by a payment company (we'll never see or store your card number), and we'll update this page before that starts.
Changes
If we change this policy we'll update the date at the top. If it's a big change, we'll tell you in the game.
Contact
Email colosseom@loneportal.com, or write to Xyphien (Colosseom), 1610 S Main St, Kokomo, IN 46902, USA.