Who is responsible. Xalaria was programmed by Julian Cochran, of Monaco, who is responsible for the information described here. The same applies to D-Zone, whose own notice is at xalaria.com/dzone/terms.html.
When you play
Your traveller. The alias you choose and your progress in the game are kept on our server, so that you can continue later, on any device. Choose an alias rather than your own name, because others will see it. A traveller who only tried the game, visiting fewer than three stars, is removed after a short time without play. Others are kept as part of the universe, which continues for everyone, until you ask us to remove them.
What others can see. Travellers you meet see your alias and your craft, and the messages you send them. Notable deeds are written in the public Chronicle under your alias, and when a traveller's life ends, its epitaph and achievements go to the public Graveyard.
The record of play. To make the game easier to learn and to see which adverts bring players, the game keeps a record of each visit. It holds your alias, the kind of device and browser, where the visit came from, what you type in the game and what the game shows you in reply. A short note is also kept with your alias of which advert brought you, how long you played and whether you came back.
On these pages
Notes on how the pages are used. The pages send our own server short notes as they are used, such as the kind of device and the size of its screen, whether the page is open inside an app like Instagram, which Play link was pressed, how far the page was read and how long it was open, with where the visit came from. A note carries a random number for the visit and never your name.
Where you came from. If you arrive from an advert or another website, a cookie and your browser's storage remember where you came from, for 90 days, so that players can be counted by where they heard of Xalaria. The game also keeps a few settings of its own in your browser.
Adverts on Facebook and Instagram. When you arrive from one of our adverts on Facebook or Instagram, the link carries a code that Meta added to it. We ask you once whether you agree to share it. If you do, a cookie keeps the code for 90 days, and when you begin playing, and again when you have played for ten minutes, our server tells Meta so, sending only that code, the time, and the name your browser gives itself (such as Safari on an iPhone). Meta uses it to count which of our adverts bring players, and to show our adverts to more people who may enjoy the game, under Meta's privacy policy. Meta receives no alias, email or internet address from us. If you say no, nothing is sent, and the game is exactly the same.
Ideas you send. An idea sent from the ideas form on the home page is kept on our server with the name and email address you give, and you can leave out either. Your name is shown beside the idea only if you ask to be credited. Your email address is never shown, and is used only to write to you about that idea, for example to tell you when it has been built into the game. Nothing is sent to it otherwise.
Comments. Anyone can read the comments on xalaria.com and xalaria.com/dzone. To write one, you sign in with Google, and only when you choose to do so does the page load Google's sign-in, so Google knows you signed in here, under Google's privacy policy. From Google we keep the name and email address it gives us and the number it uses for your account, and we keep each comment you write with its date. Beside a comment we show only that name and the date. Your email address is never shown or shared, and is kept only so that the comments can be looked after. Against unwanted posts, each comment also keeps a short code worked out from your internet address, never the address itself. Your browser remembers that you are signed in for 60 days, or until you sign out. You can remove a comment of yours at any time, which takes it off the page at once, and we may remove any comment. A removed comment stays in our records until you ask us to delete it.
Nothing else follows you. There are no advertising trackers, and no other company's scripts, on Xalaria's pages, apart from Google's sign-in, which loads only when you choose to write a comment. The one notice to Meta described above is sent by our own server, and only if you agree. Our web server, like any, briefly records the requests it receives, and the pages' typefaces come from Google Fonts, which sees your internet address as they load.
Who reads it, and for how long
Who reads it. These records stay on our server. They are read only by us and by the services that help us run Xalaria, which are our web host and the AI assistant that prepares our reports and helps us improve the game. They are never sold. Apart from the advert notice to Meta described above, which you can refuse, they are passed to no advertiser or anyone else.
Internet addresses. Like every request, ours reach the server from your internet address, but the record of play and the notes don't record it.
How long. The record of play, the note of which advert brought you, and the notes on how the pages are used are all deleted after 12 months. Your traveller is kept for as long as you play, as described above. Meta's code stays only in your browser, for 90 days, and is not kept in our records. An idea you send is kept, with the name and email address given, until you ask us to remove them. A comment, even once removed from the page, is kept with the name and email address Google gave us until you ask us to delete them.
Your rights
You can ask to see the information we hold about you or your traveller, to correct it, or to delete it. Write to support@xalaria.com, giving your alias, the email address you sent an idea from, or the one you signed in with to comment.
Last updated 29 October 2026