Ibory
Ibory Privacy Policy
Effective October 25, 2026
Who runs Ibory
Ibory is a free game made and run by one independent developer. Questions, requests or complaints about your data: email iboryfree@gmail.com, or message the admin on the Ibory Discord.
Playing without an account
Your game is saved in your browser's storage on your own device. It is never sent anywhere unless you choose to: by making an account, or by saving a file or copying a save code yourself.
What the server keeps if you make an account
| What | Why | How long |
|---|---|---|
| Username and in-game name | Your name everywhere in Ibory: high scores, chat, alliances and reports. | Until you delete the account |
| Password | Signing in. Only a salted, one-way hash is stored; nobody can read your password. | Until you delete the account |
| Cloud saves (your latest save and one older copy) | Restoring your game on a new device, and helping you if a save goes wrong. | Until you delete the account |
| Hourly game snapshots (numbers such as troops, resources and prestige) | Spotting cheating. Anything unusual is flagged for a person to look at; nothing is blocked automatically. | 14 days; a flag is kept 90 days |
| High-score numbers | The public boards. | Until you leave the boards or delete the account |
| Profile picture, frame and hero pictures you upload | Shown to other players. | Until you remove them or delete the account |
| World and alliance chat messages, and reactions | Shown to other players. | World chat keeps its newest 1,000 lines and each alliance its newest 500; yours are removed when you delete the account |
| Private messages | Delivering them. The admin can read private messages to deal with abuse and reports. | 30 days |
| Pictures sent in chat | Shown in chat. | 14 days |
| Alliance, invasion, PvP, trade and shop records | Running those features and checking for abuse. | Until you delete the account (finished-match and trade logs keep your name as it appeared) |
| Reports you send or that are made about you | Moderation. | Until the admin closes them; reports you sent are deleted with your account |
| Phone notification subscription | Sending rally, message and game notifications you turned on. | Until you turn notifications off, sign out everywhere or delete the account |
| Your connection's IP address | Locking out repeated wrong passwords. | About an hour |
Ibory never asks for your real name, email address, phone number, location, contacts or payment details.
Who else is involved
- Cloudflare runs the game server and stores the data above. It may keep short technical logs, such as IP addresses, to run and protect its network.
- GitHub Pages hosts the game's files and sees your IP address when your device downloads them.
- Google Fonts supplies the game's fonts, so your device asks Google's servers for them.
- Giphy powers GIF search. Your search words are passed on through the Ibory server (not linked to you), and GIFs load from Giphy's servers.
- Your phone's push service (on Android, Google's) delivers notifications you turn on.
- Pictures other players link in chat may load from the site they are on.
Nothing is shared with anyone else, except where the law requires it.
What other players can see
Your in-game name, profile picture and frame, hero pictures, high-score numbers, alliance, and everything you write in world or alliance chat. Private messages are seen by you, the other player and the admin.
Your choices
- Delete your account in the game (Settings, Account and cloud save, Delete account) or on the web at iborygame.com/account. Everything listed above that is keyed to your account is removed straight away. The game on your device is not touched.
- Leave the high scores, remove your pictures, or turn notifications off in the game at any time.
- Block players so their private messages don't reach you, and report messages or players to the admin.
- Ask for a copy of your cloud save, or for anything else about your data, using the contact above.
Children
Ibory isn't meant for children under 13, and it doesn't knowingly collect information from them. If you think a child under 13 has made an account, contact the admin and it will be deleted.
Security
All traffic is encrypted (HTTPS). Passwords are hashed and repeated wrong guesses are locked out. No system is perfectly secure, so use a password you don't use anywhere else.
Changes
If this policy changes, the new version is posted here with a new date, and important changes are announced in the game's Discord.