Titheborn Privacy Policy
Last Updated: October 21, 2026
Who we are
Titheborn is made by Winding Clock Games. This policy covers Titheborn on Steam, on the web, and the online services it connects to: accounts, chat, spectating and the Daily Delve. Our other games and our website are covered by the Winding Clock privacy policy.
Questions, requests and complaints about your data go to dev@windingclock.com.
Titheborn has no advertising, no in-game purchases and no analytics or tracking services. You buy the game on Steam, and Valve handles that payment. We never see your payment details.
What we collect
You can play Titheborn offline without an account. Then nothing about you is sent to us, and your progress stays on your device. Playing online, we keep the following:
| What | Details | Where it comes from |
|---|---|---|
| Account | Your account name, past account names, a password (stored only as a salted scrypt hash, never in readable form), and when the account was created and last used | You, when you sign up or rename |
| Recovery email | An email address, if you choose to add one. It is optional and used only to reset a password | You |
| Steam ID | Your Steam account number, if you sign in with Steam or link it | Valve, when Steam confirms who you are |
| Game progress | Unlocks, Orbs, characters, runs, saves, deaths, Daily Delve results and achievements | Your play |
| Chat | Messages you send in public chat and whispers to other players, players you block, and reports you make | You |
| Moderation records | Reports other players make about your messages, and actions a moderator takes, such as a mute or a ban | Other players and moderators |
| Crash reports | The error, the game build, the platform (web or desktop) and your account name | The game, when something goes wrong |
What we do not collect: your real name, address, phone number, payment details, contacts, location, advertising IDs or browsing history. Your IP address is used for a few minutes to stop too many requests (for example, password guessing). It is held only in the server's memory and never saved.
How we use it
We use your data only to run the game. We never sell it, never use it for advertising and never build a profile of you.
- To run your account and saves: signing you in, keeping your progress and resuming a run on another device. (Legal basis: providing the service you asked for.)
- To run the shared parts of the game: chat, graves, spectating, blessings, the run feed and the Daily Delve boards. (Providing the service.)
- To keep the community safe: acting on reports, muting or banning accounts that break the rules, and stopping abuse such as password guessing. (Our legitimate interest in a safe game.)
- To fix problems: reading crash reports to find and fix bugs. (Our legitimate interest in a working game.)
- To help you back into your account: sending a password-reset or address-confirmation email, only when you ask for one. (Providing the service.)
We do not send newsletters or marketing email.
What other players can see
Titheborn is shared, so some of what you do is shown to other players under your account name:
- Your public chat messages. Whispers are seen only by you and the player you whisper.
- Your runs while you play them: other players can watch live, and see your character, floor and progress.
- Your graves: where a character died, its name and what killed it, on other players' floors.
- The run feed (how runs ended) and the Daily Delve boards, with your name and your character.
Your email address, Steam ID and blocked players are never shown to anyone.
Who we share it with
We use a few service providers to run the game. Each handles your data only to provide its service to us:
| Provider | What they do | What they receive |
|---|---|---|
| Railway | Hosts the game's servers | Everything the game sends to the servers, including your IP address as connections arrive |
| MongoDB Atlas | Stores the game's database | Everything listed under What we collect |
| Resend | Sends password-reset and confirmation emails | Your email address, account name and the link in the email |
| Valve (Steam) | Confirms who you are when you sign in with Steam, and syncs your local game data through Steam Cloud | A sign-in ticket from your Steam client, and the game's local data on your device |
These providers may store data outside your country, including in the United States. We share data with anyone else only if the law requires it, or to protect players from harm.
How long we keep it
Most of what you do online is deleted automatically after a short time. Your account and progress are kept until you delete them.
| Data | Kept for |
|---|---|
| Public chat and whispers | 3 days |
| Live spectator view of a run | Minutes after the run ends |
| Run feed (how runs ended) | 7 days |
| A finished run's save | 30 days |
| Crash reports | 30 days |
| Records of runs played offline and sent later | 90 days |
| Reports about chat messages | 180 days |
| Moderation actions | 2 years |
| Account, progress, deaths, graves and Daily Delve results | Until you delete your account |
| Backups of the database | Until replaced by newer backups |
Deleting your account, and your other rights
You can delete your account yourself, at any time, in Settings → Account → Delete Account. It takes effect at once:
- Deleted: your account name, password, email, Steam link, progress, saves, chat messages, whispers and blessings. Your name in crash reports is removed too. Your name becomes free for someone else to take.
- Kept without your name: your graves, deaths and Daily Delve placings, because other players' games include them. They are shown as “Forgotten Titheborn” and are no longer linked to you.
- Kept for moderation: reports and moderation actions about your account, until they expire (180 days and 2 years). This stops a banned player from starting over by deleting.
Deleted data leaves our backups as they are replaced by newer ones. Data on your own device, and in Steam Cloud, is yours to remove; the game clears your account's local data when you delete it.
You also have the right to:
- get a copy of your data,
- correct it (you can change your name and email in Settings),
- object to or limit how we use it, and
- complain to your local data protection authority.
Email dev@windingclock.com for any of these. We reply within 30 days. We do not sell or share personal information for advertising, as the California Consumer Privacy Act defines those terms.
Children
Titheborn is not meant for children under 16. We do not knowingly collect their data. If you believe a child has an account, email us and we will delete it.
On your device
The game keeps your settings, offline progress and sign-in on your own device, in the browser's storage or the desktop game's folder. The desktop game also writes a crash log to that folder. On Steam, Steam Cloud copies this data between your computers. We use no cookies for tracking or advertising.
Changes to this policy
When this policy changes, we will post the new version here with a new date. If a change affects how we use data you have already given us, we will also say so in the game.
Contact
Winding Clock Games, dev@windingclock.com.