01 Who we are

Dragon the Dragon is made and operated by Story Giant Games. For the small amount of personal data described below, we are the data controller.

Story Giant Games B.V., Leukerhof 67, 6004 DE Weert, The Netherlands. You can reach us at the e-mail address at the bottom of this page.

This policy covers the game itself — the version you play in a browser and the desktop version. It does not cover the websites or storefronts that host it; those have their own policies, and section 5 points at them.

02 What the game keeps on your device

Your progress is saved in your browser's local storage on the device you play on. It is not a cookie, it is not sent to us, and we cannot read it. If you play on a different device, you start again there.

The random id

The first time you play, the game makes up a random string of letters and digits. It is not derived from your device, your browser or anything about you — it is just a random number, and its only job is to let the leaderboard recognise a returning player so your best time replaces your old one instead of sitting beside it. Clear your browser storage and it is gone; the game invents a new one and the old leaderboard row is no longer connected to you in any way.

Your display name

The game gives you a made-up name like SwiftFalcon, and you can change it under Settings → Your name. On Poki the game may use the name from the account you are already signed in to, if there is one.

03 What leaves your device

One thing: your result on a timed mission. When you finish a race or a timed objective, the game sends three values to our leaderboard server:

• the random id from section 2;
• your display name;
• your time, in milliseconds, and which mission it was for.

The server keeps the best time it has been told for each id, on each mission, and hands back the fastest ten and the rows around your own. That is the whole of it. Nothing else about you, your device or your play is sent, and there is no account behind the id — we have no way to connect it to a person.

Where it is kept

The leaderboard runs on a server hosted in Germany (Colyseus Cloud, Frankfurt). Like any request over the internet, it necessarily sees the IP address your connection comes from; the IP is not recorded next to your score and is not used to identify or profile you.

Under GDPR

Our lawful basis for publishing a leaderboard row is legitimate interest (Art. 6(1)(f)): showing a highscore table is what a highscore table is for, you choose the name that appears on it, and nothing identifying is attached. You can have your row removed at any time — see section 7.

What is never collected

• No email address, phone number, postal address or real name
• No age, birthday or gender
• No location beyond the country-level guess any website can make from an IP
• No contacts, photos, microphone or camera
• No cross-site tracking or advertising profile built by us
• No chat or messaging — the game has none

04 Cookies

The game sets no cookies. It uses local storage, described above, which stays on your device and is never transmitted. The site hosting the game may set its own cookies — that is between you and them, and their policy covers it.

05 Where you play it, and their rules

On Poki

The browser version is published on Poki, which shows the adverts between missions and the optional rewarded adverts, and which measures how the game is played (for example, that a mission was started or finished) so that we can improve it. That happens through Poki's own systems under Poki's own policy, not ours, and we never receive a name or an identifier from it — only counts.

Poki explains what it collects, how adverts are served to children, and the choices you have here: poki.com privacy policy.

06 Children

This game is made for a general audience and is played by children. That is precisely why it asks for nothing: there is no sign-up, no email, no age gate to lie to, no chat, and no way for one player to contact another. The only thing a child can publish is a display name and a lap time.

We do not knowingly collect personal information from children. If you are a parent or guardian and believe a name on a leaderboard identifies your child, write to us and we will remove the row — no account details needed, just tell us the name and the mission.

07 Erasing what there is

Everything on your device

Settings → Reset all data, inside the game. That clears your progress, your coins and skins, your best times, your settings and your random id, and the game starts as though it had never been played. Clearing your browser's site data does the same thing.

Your row on a leaderboard

There is no button for this yet, so email us at the address below with the display name and the mission, and we will delete the row. We do not need to verify anything, because there is nothing to verify against — which is the point.

Your rights

If you are in the EU, the UK or another place with comparable law, you have the right to ask what we hold, to correct it, to have it erased, to object to our processing of it, and to complain to your data protection authority. In practice the answer to the first is short: a display name and a time. Write to us and we will act within 30 days.

08 How long it is kept

Data on your device stays until you erase it. A leaderboard row stays while it is standing — each mission board keeps up to five thousand times, and a row that is pushed past that by faster players is dropped. There is no archive behind it and no backup of it kept elsewhere.

09 Changes to this policy

If what the game does changes, this page changes with it, and the "last updated" date at the top moves. If a change is a significant one — something new leaving your device — we will say so in the game rather than quietly editing this page.