Privacy Policy

1. Who is responsible

Kami Ventures AB is the data controller for playlaurus.com and for Laurus.

We are small enough that this email reaches the person who wrote both the game and this page. There is no data protection officer, because the law does not require one at this scale and pretending otherwise would be theatre.

2. The website

What is collected

Your email address, if and only if you submit the signup form. Nothing else is asked for and nothing is stored alongside it — no name, no country, no marketing profile.

Page-view analytics

We use Vercel Web Analytics to see how many people visit and which pages they read. It is cookieless: it sets no cookies, writes nothing to local storage, and leaves no identifier on your device. That is also why there is no cookie banner on this site — there is nothing stored to ask you about.

What it records is limited to:

• Which page was viewed, and the referring site if there was one
• Your country, browser, operating system and device type

To tell repeat views apart without identifying anyone, Vercel derives a short-lived hash from the request instead of storing your IP address or tagging your browser. We see only aggregate counts — never a list of visitors, never a trail of one person through the site. The lawful basis is our legitimate interest in knowing whether the site works and is being read.

Beyond that there is no tracking pixel, no advertising network, no social embed and no fingerprinting. Nothing on this site follows you anywhere else.

What it is used for

To email you when the Laurus Steam page goes live, and when the game is released. That is the entire purpose. Your address is never sold, rented, shared for anyone else's marketing, or used to email you about anything else.

The lawful basis is your consent, given by submitting the form, and you can withdraw it at any time. Every email carries a one-click unsubscribe link, and unsubscribing deletes the address rather than flagging it.

Server logs

Our host keeps short-lived request logs that include IP addresses, for security and abuse prevention. They are not used to build any profile, not linked to your email address, and not read except when investigating abuse of the signup form.

3. The game: what stays on your computer

Laurus is a single-player game. Your profiles, saves, settings, statistics and achievements progress are written to your own machine:

• Windows — %APPDATA%\Karma\Deckhand\data
• macOS — ~/Library/Application Support (a Deckhand folder)
• Linux — ~/.local/share/deckhand

Deleting that folder deletes everything the game has stored. None of it is uploaded anywhere by the game itself, so there is no copy of your save for us to lose, hand over, or be compelled to produce.

If you have Steam Cloud enabled, Steam may synchronise that folder between your own machines. That is a Steam feature operating under Valve's privacy policy, and you can turn it off per-game in Steam.

4. The game: Steam

Laurus is distributed through Steam and uses Steamworks, Valve's developer toolkit, for achievements, statistics, leaderboards where present, and the ownership check that lets you play what you bought.

When you play, the following passes through Valve rather than us: your Steam ID and persona, your achievement and statistic progress, and your playtime. Valve is the seller of the game — your payment details, refunds and account security are handled entirely by Valve under Valve's privacy policy. We never see your payment information, and we cannot access your Steam account.

What we receive from Valve is:

• Aggregated commercial reporting — units sold, wishlists, refund rates, regions, and similar totals. None of it identifies you.
• Aggregated achievement percentages — what share of players have unlocked each achievement. Useful for knowing which parts of the game nobody reaches; useless for identifying anybody.
• Whatever you write to us in a review, a forum post, or an email. Reviews and forum posts are public and are Valve's platform, not ours.

We do not run a parallel copy of your achievements or statistics on any server of ours. Steamworks is the only place that data lives.

5. The game: optional statistics and crash reports

A roguelike is balanced with evidence. Knowing that a particular machine wins twice as often as the others, or that almost nobody survives level six, is the difference between fixing the game and guessing at it. So the game can send anonymous gameplay statistics — if you let it.

What an event contains

• Which machine, stake and challenge a run used, and the run's seed
• How far the run got, the score reached, and whether it was won or lost
• Which symbols, artifacts, vouchers and consumables were in play
• Session length, and the game and platform version
• Coarse hardware and operating-system information, for diagnosing performance
• A random identifier generated on your install, so a sequence of runs can be read as one player's progress

What an event never contains

• Your name, email address, or any account name
• Your Steam ID or any other stable platform identifier
• Your IP address — it is not stored with the event
• The contents of your saves, or anything you have typed

The random install identifier is the only thread connecting events, it means nothing outside our own balance data, and it cannot be turned back into you. You can reset it in the same settings screen, which severs any link to what came before.

Crash reports

On the same toggle: if the game crashes, it can send the technical detail of the crash — where in the code it happened, the game version, and your operating system and hardware. Crash reports do not include your saves or any personal information, and are used only to fix the crash.

Lawful basis, and how long it is kept

Consent, which you give by switching it on and can withdraw at any time. Statistics are kept in aggregate for as long as the game is supported, because balance work compares against history. Crash reports are discarded once the crash is fixed or within 24 months, whichever comes first.

6. Support and correspondence

If you email us we hold that correspondence for as long as it takes to resolve the problem, and a reasonable period after, in case you write again about the same thing. Bug reports are far more useful with a seed attached — runs are deterministic from their seed, so it usually reproduces the problem exactly. A seed is a number about the game, not about you.

7. Who else is involved

Every processor below acts on our instruction only, and none of them is permitted to use your data for their own purposes:

• Vercel — hosts this website and provides the cookieless page-view analytics in §2
• An email delivery provider — stores the mailing list and sends the messages
• An analytics and crash-reporting provider — receives the optional gameplay events described in §5, only if you switched them on
• Valve — distributes and sells the game. Valve is an independent controller for your Steam account, not our processor

Some of these process data outside the EU/EEA. Where they do, the transfer relies on the European Commission's standard contractual clauses or an adequacy decision.

We have never sold personal data and never will. Under the GDPR we have no legitimate interest in doing so, and under laws such as the CCPA we do not "sell" or "share" personal information as those terms are defined.

8. Your rights

Under the GDPR you can ask for a copy of what is held about you, ask for it to be corrected or erased, object to its use, ask for processing to be restricted, or ask for it to be sent elsewhere. Email privacy@playlaurus.com and it will be actioned within 30 days, free of charge.

One honest limitation: the optional gameplay statistics in §5 are not linked to any identity we can look up. If you ask us to find "your" events, we genuinely cannot, because the only key is a random number on your machine. If you send us that identifier from the settings screen we can delete the events carrying it. That is the trade for collecting so little in the first place.

If you are unhappy with how we have handled a request you can complain to the Swedish Authority for Privacy Protection (IMY) or to the supervisory authority where you live.

9. Children

Neither the signup form nor the optional statistics are intended for children under 13. We do not knowingly collect anything from them. If you believe a child's data has reached us, email us and it will be deleted.

10. Changes

If this policy changes in a way that affects data already held, we will say so before it takes effect: by email to the mailing list for anything about the website, and in the game's patch notes for anything about the game. A new category of collection will always require a fresh opt-in rather than inheriting an old one.

Last updated 10 August 2026. Questions about anything above: privacy@playlaurus.com — or see Support.