Glowtails: Privacy policy

Last updated 7 November 2026

Who we are

Glowtails is made and run by Innoverse. This page says what the game keeps about you, why, who helps us run it, and how to have it all deleted.

Without signing in

You can play on this phone without an account. Your game is then kept only on the phone, and nothing about you reaches our servers. Before you first play online, the game asks the year you were born; that year stays on this phone and is never sent to us.

What we keep when you play online

• Your sign-in: your email address (or the private relay address Apple gives us), an account id the game makes for you, and a password if you set one (our host keeps it only in a form that can't be read back).
• Your game: your save on each server (your camp, Ruri, items and progress), your player name, your guild and its name, and your public profile (your hero, level, record and badges).
• What you buy: shop goods, passes and bundles, so your passes and bonuses keep working and a purchase can become a gift for your guild. Payment itself is handled by Apple: we never see your card or payment details.
• What you write: chat lines, private messages, guild board posts, and reports you send.
• The language you read chat in, so lines can be translated for you.
• Your age band: whether you're 13 to 17 or 18 and over (never the year you were born), kept with your account so younger players get safer settings.
• Who may send you private messages: everyone, your guild or no one (Settings › Chat), kept with your account.

While you're online

Where your hero stands on the island you're on is shared live with the other players there, so you see each other. It isn't stored. This is the game's own map, never your real location.

Like any online service, our servers see your device's internet address when it connects. It's used to keep the game running and safe, and is kept only in short-lived server logs.

What we never do

No ads. No tracking across other apps or websites. We never sell your data or share it for marketing. The game doesn't ask for your contacts, photos, camera, microphone or location.

Why we keep it

To sign you in, keep your game safe in the cloud, keep what you bought, let you play with others (servers, guilds, chat and messages), translate chat into your language, keep chat safe (a word filter, reports and moderators), and find and fix problems.

Who can see what

Players on your server see your name, guild, profile and hero, and the chat lines you send. Your guild sees gifts you send it, with your name (a purchase becomes a gift for the whole guild). A private message is seen by you and the player you sent it to, and reaches you only from the players your setting allows (players 13 to 17 start with their guild only). Moderators can read lines that are reported, to keep chat safe.

Who helps us run it

• Supabase hosts the game's servers: sign-in, the database and the live connection.
• Amazon Web Services: Amazon SES sends the sign-in code emails, and Amazon Translate translates chat lines (when a line's language isn't known, Amazon Comprehend finds it). Only the line's words and languages are sent, never your name or email.
• If you sign in with Apple or Google, they confirm who you are to us. We get your email (or Apple's relay address), nothing more.

They handle your data only to provide their service to us.

How long we keep it

While your account exists. A server's world and chat end when that server closes or merges. When you delete your account, it is deleted from the game's database at once, with everything tied to it: your sign-in, saves, player names, profile, purchases, chat lines and private messages, your age band and your message setting. A few shared records stay, no longer tied to your account, with the name you had then: posts on a guild board, gifts you sent your guild, a Ruri you found in the glass for your guild to free, and the name of a guild that held the Throne. A guild you led passes to another member. Copies in our host's backups are gone within a few days after that.

Deleting your account

In the game: Settings › Account › Delete my account (it's on the Server sheet too). Tap it twice and your account is gone at once, on every server, and this phone's game starts over. You can also write to us and we'll delete it for you.

Children

Glowtails is not aimed at children under 13, and we don't knowingly keep data about them. Before online play the game asks the year you were born: under 13, online play stays off and the game plays on the phone only, so nothing about the player reaches our servers. If you think a child under 13 has an account, write to us and we'll delete it.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it, by writing to info@innoversehub.com. Where your local law gives you more rights (in the EU, the UK or California, for example), we honour them, and you can complain to your local data protection authority.

Changes

If this policy changes, we'll change the date at the top, and tell you in the game when the change matters.

Contact

Innoverse · info@innoversehub.com