Privacy
This page says plainly what the Oakenhearth Games website and the game Thornwick keep about you. The short version: very little, and nothing that is sold or used to follow you around the web.
Browsing this website
- This site sets no cookies of its own, and nothing here counts or profiles visitors. (Cloudflare, described below, may set a security cookie of its own to tell people from bots.)
- There are no advertising or analytics trackers on this site or in the game, and nothing is loaded from other companies' servers.
- Like any website, it is served through Cloudflare, which handles the traffic on its way here and, as a normal part of that, sees your IP address and the pages you ask for. The web server also keeps ordinary access logs.
When you press Play
The Play button gives your browser a short-lived signed note, which Thornwick swaps for a cookie named oak_pass. It holds a random number and an expiry time, nothing about you, and it lasts 12 hours (it is renewed while you play). Its only job is to let the game know you came in through this site.
Accounts (optional)
You can play without an account; the game then saves in your own browser. If you make an account, the game keeps:
- the name you chose, and your password, stored only as a salted scrypt hash (the password itself is never stored);
- the knights you saved from the character screen (their looks and names), and up to five saved journeys, which are your game progress;
- a login cookie named
thornwick_session, a random token that keeps you signed in for up to 30 days. It can be read only by the game's server, not by scripts on the page.
The game does not ask for an email address, so there is no password reset by email: a forgotten password cannot be recovered by yourself. Do not use a password you use anywhere else.
On your own device
The game keeps your settings (graphics quality, volume, camera speed and the like) and, when you are not signed in, your saved game in your browser's local storage. That stays on your device; clearing your browser's site data removes it.
What is not done
- No personal data is sold.
- No ads are shown and no ad networks are used.
- No analytics services are used by this site or the game.