Privacy notice
This notice covers Lucernarium Ash, its launcher and the Lucernarium online service: what is stored, why, for how long, and what you can do about it.
The short version
- Without signing in, the service stores nothing about you. When the game starts it may check the service’s version page; like any web request this reaches Cloudflare (see Who else is involved), and we store nothing from it.
- The service stores a name you choose, a random account number, your friend and block lists and a few details for the lobby. It never asks for your real name, e-mail address or date of birth.
- We do not sell your data, show ads, or use any analytics or tracking.
- You can delete your online profile and its data at any time from the game, and online profiles nobody has used for 90 days are deleted automatically.
- Playing online with other people shows your IP address to them, because the game connects players directly. See Your IP address and other players.
Who we are
Lucernarium is an independent project. It makes Lucernarium Ash (“the game”), a program that runs alongside your own copy of Call of Duty: World at War, with its launcher, and it runs the online service that lets players find friends and form parties (“the service”). Lucernarium is not affiliated with, endorsed by or associated with Activision Publishing, Inc. or Treyarch.
How to reach us about anything in this notice is under Contact.
What the service stores, and why
- Your online profile
- A random account id; the name you chose, with its four-digit tag; a friend code; your clan tag, rank and prestige; the key that checks your game’s signed requests (it is never sent back out); a salted digest of a random device id, used only to enforce bans; when you registered and last played; and the version of this notice you accepted, and when.
- Why: to give you an identity, let friends find you, and show your name and rank in lobbies.
- Kept: until you delete it, or 90 days after you last played.
- Your status, shown to friends
- Online, in a lobby or in a match, and the map, mode and playlist.
- Why: so friends can see where you are.
- Kept: only while you are connected; it is cleared within about two and a half minutes of disconnecting.
- Friends and blocks
- Your friend list, friend requests and block list.
- Why: friends and blocking.
- Kept: until removed, or until either account is deleted.
- Parties, invitations and matchmaking
- Who is in a party and its settings, invitations, matchmaking searches, and each member’s connection candidates: the public and local IP address and port the game reports.
- Why: so the members of a party can connect to each other directly.
- Kept: while the party exists. Your candidates are removed when you leave, are removed from the party, or have been offline for two minutes. Invitations and matchmaking searches last ten minutes.
- Reports
- Reports you file about other players and reports others file about you: the accounts, the reason and an optional note the reporter typed.
- Why: moderation, to keep the service safe.
- Kept: 90 days. If you delete your online profile, reports you filed are anonymised; reports about you stay until their 90 days end.
- Bans
- An account, a salted digest of an installation’s device id, or a salted, truncated hash of an IP address. Never a raw IP address.
- Why: to enforce a ban.
- Kept: until the ban ends. A ban is kept even if the online profile is deleted, so deleting cannot be used to get around it.
- Rate limits
- Counters keyed by your account or by a salted, truncated hash of your IP address, and single-use request numbers.
- Why: limits against abuse (registration and requests) and against replayed requests.
- Kept: counters 25 hours after their last use, registration hashes one hour, request numbers eleven minutes.
- Party chat and connection messages
- Delivered to your party and then forgotten. We do not store chat. Voice and game traffic go directly between players and never reach the service.
- Kept: not stored.
- Crash reports, only if you turn them on
- Only if you turn on “Send crash reports” in the launcher and then send one: the game’s crash file (the error message, a technical trace, the game version and build), the last part (up to 256 KB) of that day’s game log, your Windows version and your graphics adapter’s name. Windows user-folder names are removed on your computer and again on our server. A report is not linked to your account or IP address.
- Why: to find and fix crashes.
- Kept: 90 days, then deleted automatically. To have one deleted sooner, tell us roughly when it happened and the game version.
- Backups
- Every night, a copy of the account, friend, block, report and ban records described above (not your status, party or connection data), kept in a private store only the operator can open.
- Why: so the service can be rebuilt after a failure.
- Kept: 30 days. If you delete your online profile it disappears from new backups at once, and from the existing ones within 30 days.
We never store your IP address in clear with your online profile. The service reads it from the network request to apply rate limits and bans, and keeps only a salted hash.
The service does not store e-mail addresses, real names, dates of birth, gameplay data, payment data, the game’s files or your mods.
Your IP address and other players
The game connects players to each other directly (peer to peer). To do that, the service passes the addresses your game reports to the other members of your party, and your game connects to the host’s address. Other players in your session can therefore see your IP address.
If you do not want this, do not play online with strangers, or use the relay option when it is offered: then Cloudflare relays your game traffic instead, and other players do not see your address.
Who else is involved
- Cloudflare, Inc. hosts the service and the crash-report storage, and provides the optional relay used when a direct connection fails. Cloudflare processes network requests, including IP addresses, to deliver the service, and keeps its own platform logs; its privacy policy applies to that processing. Data may be processed in the United States and other countries where Cloudflare operates.
- Our own code logs only unexpected internal errors, without names, addresses or keys.
- We use no advertising, analytics, social-login or payment providers, and we do not share your data with anyone else, except where the law requires it.
On your computer
Each gamer profile in the game keeps its online profile in %APPDATA%\Lucernarium\Ash\profiles\<name>\online.json: its id, name, tag, friend code and a secret, sealed with Windows data protection so that only your Windows account can use it. Copying the folder to another Windows account or computer carries nothing usable; the game offers a new online profile there.
The launcher’s recovery file, encrypted with a passphrase you choose, is the only way to move an online profile. A random device id (device.json, not secret) sits next to the profiles. Deleting a gamer profile in the game also deletes its online profile on the service.
Your choices and rights
- Consent. The game asks before signing you in to the service for the first time, and again if this notice or the Terms change materially. If you say no, you can play without the online service.
- Delete your online profile: in the game, under Online Account, Delete Online Profile. This removes the profile, your friend and block lists, invitations, party membership and counters. Reports you filed are anonymised; reports about you and bans are kept as described above.
- Get a copy: in the game, under Online Account, Export My Data fetches everything the service stores about your online profile.
- Correct, restrict or object: change your name in the game, or contact us.
- Depending on where you live (for example in the EU or the UK under the GDPR, or in California) you may have further rights, including the right to complain to your data protection authority.
Children
Online play is for players aged 13 or older. The game asks you to confirm your age before the first sign-in. We do not knowingly collect data from younger children; if we learn that an online profile belongs to one, we delete it.
Security
The service never stores your online profile’s secret: it keeps only the key that checks your game’s signed requests, and never sends that key back out. The service is reached only over encrypted connections (HTTPS and WSS), and the operator tools need a separate key.
No system is perfectly secure. If a breach affects you, we will tell you as the law requires.
Changes
If we change this notice materially, we raise its version, and the game asks you again before signing you in.
Contact
Write to privacy@lucernarium.dev about anything in this notice. For your own data you usually need no one: use the game’s Online Account section (Export My Data, Delete Online Profile); to move an online profile, use the launcher’s recovery file.
If you can no longer sign in, e-mail us or ask in #support on our Discord. If you ask us to delete a profile you cannot sign in to, we will first ask you to show that it is yours.