Privacy

Morvhaloth · Echoes of the forest. Updated 17 October 2026. Português

Morvhaloth is a browser game kept by one person, Jeronimo Falavina, with no commercial purpose. To play, you sign in with an invited Google account. This page says what the game keeps about you and how to erase it.

What we keep

• Your Google account's e-mail. It is the only information we ask Google for. It tells us whose adventures they are and whether the account was invited. We do not receive your password, your name, your photo or your contacts.
• Your adventures. Up to five, with the name you gave the character and each one's progress.
• The dates of your first and last visit and, while you are signed in, a session that expires after 30 days.
• Measurements of how the game runs, for 7 days. Each minute of play, the game sends how many frames it drew and how long each took, with what the browser says about the device: browser and system, graphics card, number of cores, approximate memory and screen size. When the game freezes, it also sends where the hero was on the map, what was happening in the game and which of the game's files had just loaded. It tells us on which devices and at which moments the game is slow. These measurements carry no e-mail, no IP address and no adventure name. Each time the game is opened it gets a random code of its own. After 7 days they are deleted.

What stays in your browser

A session cookie, needed to keep you signed in, a copy of the adventure you are playing, so that progress is not lost if the connection drops, and the language you chose. The game uses no advertising or audience-measurement cookies.

Who we share it with

No one. There are no ads; we neither sell nor give away data. The game runs on a private server and its traffic reaches it through Cloudflare, which, like any network service, sees the IP address of whoever connects. Google takes part only at the moment of signing in.

On the game's page (The story), any visitor sees the list of adventures with each one's name, level and how long ago it was played. The feats reached are shown only to signed-in players. Your e-mail appears in neither.

Inside a Rift, where several players meet, the other players in the same room see your adventure's name, what your hero carries and what you write in the chat. Your e-mail is not shown to them, and the chat is not kept.

The game's administrator accounts can see the list of invited e-mails, the date of each account's last visit and how many adventures it has.

While the game is in development, those accounts can also follow an adventure while it is being played, to find defects and understand how the game is played. What they see is the game itself, not your screen or anything outside the game, and none of it is kept.

How to erase it

On the game's title screen, signed in, use Erase account: the adventures, the session and the account's record are erased at once and cannot be recovered. Each adventure can also be erased on its own. The server's backups stop holding that data within six months.

If you prefer, or to ask for your e-mail to be removed from the list of invited accounts as well, write to the address below.

Contact

[email protected]

Back to the game