Games Privacy Policy

This policy explains what information our games collect, why we collect it, and who we share it with. It applies to every game published by Chroma Golem Inc. — including Alchemy Survivors, Fieldmade, Ultracapitalism, Elixir Emporium, and You Are Not Alice — on every platform we release them on.

The short version: we collect gameplay analytics so we can make the games better, and features that use AI send what you type to an AI provider so it can generate a response. We don't sell your data, we don't run ad networks in our games, and we don't ask you for a name, an address, or a payment method.

If you are a developer using our AI API rather than a player, the API privacy policy is the one that applies to you.

What we collect

Gameplay analytics

We record how our games are played so we can balance and improve them: sessions started and how long they lasted, levels and runs attempted and completed, items crafted, choices made, menu and settings usage, progression milestones, and in-game errors. We collect these through GameAnalytics, which ties them to a randomly generated identifier for your installation of the game — not to you. We do not connect that identifier to your real-world identity, and it isn't shown to you anywhere in the game.

AI feature inputs and outputs

Several of our games generate content with AI. When you use one of those features, the text, choices, or drawings you submit — along with the game context needed to respond — are sent to an AI provider, and the generated result is sent back to your game. In Fieldmade, for example, the pixel art you draw at a crafting station is sent so it can be turned into an in-game item. We log these requests along with timing, size, and cost information so we can monitor quality and control abuse.

Please don't type personal or sensitive information into AI-powered features. Anything you enter there leaves your device.

Online play and public run records

Some of our games have online features that run on our own servers. In Ultracapitalism, the game syncs a randomly generated player identifier, the company name you choose, the platform you're playing on, and your runs — your CEO, the assets and policies on your board, your results each fiscal year, and how the run ended. We use snapshots of your board as opponents for other players in asynchronous PvP, and completed runs are published on ultracapitalism.io under the company name you chose, along with aggregate statistics built from everyone's runs.

Because company names and runs are public, please don't use your real name or any other personal information as a company name.

Technical and crash data

When the game misbehaves we collect diagnostic information through Sentry: device model, operating system and version, hardware specifications, game version, language and region settings, IP address, and the error or stack trace that caused the problem.

Platform data

If you bought or downloaded a game through a store such as Steam or itch.io, that store handles your account, your purchase, and your payment — not us. Depending on the game and the platform, we may use the store's own services for things like achievements, cloud saves, or leaderboards, and we may see aggregate sales and wishlist statistics that the store gives every developer. Your use of those stores is governed by their privacy policies.

What we don't collect

• Your name, mailing address, or phone number.
• Payment card or banking details — stores handle all payments.
• Your email address, unless you send us one yourself.
• Precise location, contacts, photos, microphone, or camera data.
• Advertising or cross-app tracking identifiers. Our games do not contain ad networks.

Why we use it

• To run the game and the features you asked for, including AI generation.
• To find and fix bugs, crashes, and performance problems.
• To understand what players enjoy and where they get stuck, so we can balance and improve the game.
• To detect abuse of our services and keep costs under control.
• To meet legal obligations when we have them.

We don't use your data to build advertising profiles, and we don't use it to make decisions about you as an individual.

Who we share it with

We do not sell your personal information, and we don't share it with anyone for their own advertising or marketing. We do rely on service providers who process data on our behalf, under contracts that limit them to that purpose:

• AI providers — our games call the Chroma Golem API, which routes AI requests to providers including Microsoft Azure OpenAI Service and OpenAI, plus image models we host ourselves. These providers process your input to generate a response; under our agreements with them, they do not use it to train their own models.
• GameAnalytics — collects the gameplay events described above on our behalf so we can see how our games are played.
• Sentry — receives the crash and error reports described above so we can diagnose and fix them.
• Game platforms — Steam, itch.io, and any other store a game ships on, for the platform features that game uses.
• Hosting and infrastructure providers — the services that run our servers and store our data.

We may also disclose information if we're legally required to, or if it's necessary to protect our rights, our players, or the safety of others.

Where your data goes

Chroma Golem is based in the United States, and the providers above may process data in the United States and other countries. Wherever you play from, your data may be transferred to and stored in those countries, which may have different data protection laws than your own.

How long we keep it

We keep analytics and AI request logs for as long as they're useful for improving our games and monitoring our services, and we delete or aggregate them when they're not. Run records and board snapshots from online play are kept for as long as the game's online features and public run history are running. Crash reports are kept until the underlying issue is resolved and confirmed fixed. Data we're required to retain for legal or accounting reasons is kept for as long as the law requires.

Your rights

Depending on where you live — including under the GDPR in Europe and the UK, and the CCPA/CPRA in California — you may have the right to access the data we hold about you, correct it, delete it, receive a copy of it, or object to how we use it. California residents also have the right to know that we do not sell or share personal information as those terms are defined by the CCPA, and we will never discriminate against you for exercising any of these rights.

To make a request, email us at info@chromagolem.com. Our games don't require an account, and the identifiers our analytics use aren't shown to you anywhere in the game, so we often have no way to connect the data we hold to a particular person. Tell us which game you played, on which platform, and roughly when, and we'll do what we can. If we genuinely can't identify your data, we'll tell you rather than guess.

Children

Our games are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us with personal information, email info@chromagolem.com and we will delete it.

Security

We use industry-standard measures to protect the data we collect, including encryption in transit and restricted internal access. No system is perfectly secure, but we take this seriously and work to keep the amount of data we hold as small as it can reasonably be.

Changes to this policy

We'll update this page when our games or our providers change, and we'll update the date at the top when we do. If a change is significant, we'll say so in the game or on our website.

Contact us

Questions about this policy or about your data? Email info@chromagolem.com and we'll get back to you.

Chroma Golem Inc.