Privacy Policy

Last updated: July 28, 2026

Who We Are

EchoForge Studios is an independent game studio operated by Echowright LLC. We operate this website (echoforge.games) and its subdomains, as well as browser-based games including EchoQuest, One More Night, and Blackwood Manor.

What Data We Collect

We aim to collect as little personal data as possible. Here is what we may collect depending on how you interact with our site and games:

• Analytics: We use Cloudflare Web Analytics, a privacy-first analytics service that does not use cookies or track individual users. It collects anonymous, aggregated data such as page views, referrers, and browser/device type.
• Game accounts (EchoQuest): If you create an account on EchoQuest, we store the information you provide (such as a username, email address, and — for age verification — date of birth) to operate the game. Game progress, character data, and save data are stored on our servers. If you sign in through EchoForge Accounts, Steam, or another supported single sign-on provider, we receive a unique account identifier from that provider to link your session.
• Purchases & entitlements (EchoQuest): Purchases, downloadable content, and premium features are sold and processed through Steam (Valve Corporation). We do not receive or store your payment card details — we retain only your purchase entitlements and premium status to provide access to paid features and handle support.
• Multiplayer activity (EchoQuest): EchoQuest includes online multiplayer features. Your character name and any messages you send in in-game chat are visible to other players and are logged on our servers, along with trade and player-versus-player activity, for moderation, anti-cheat, anti-abuse, and dispute resolution. Do not share personal information in public chat.
• Diagnostic & error data (EchoQuest): To keep the game stable, we use an error-monitoring service (Sentry) that records crash and error reports. These may include technical details such as your IP address, device/browser information, and the game state at the time of the error. Authentication tokens and similar sensitive fields are stripped before reports are sent.
• Steam profile (when linked): If you play or link the Steam version of EchoQuest, we receive your Steam ID and purchase entitlements, and — if you choose to display it — basic public Steam profile information such as your avatar, persona (display) name, and profile URL. We do not have access to your Steam payment details.
• Blackwood Manor: This game is fully client-side and does not collect or transmit any personal data.
• One More Night: This game is fully client-side and does not collect or transmit any personal data.
• Advertising: Some of our pages display ads served by Google AdSense. Google and its advertising partners may collect data through cookies, web beacons, and similar technologies to serve personalized ads based on your browsing activity. This may include your IP address, browser type, device identifiers, and pages visited. See the "Advertising" section below for more details and your opt-out options.
• Email correspondence: If you contact us via email, we retain your message and email address to respond to your inquiry.

Cookies

This website itself does not set first-party tracking cookies. Cloudflare Web Analytics is cookie-free. EchoQuest may use session cookies or local storage to maintain your login session and game state.

However, third-party advertising services (such as Google AdSense) may set cookies on your device to serve and measure ads. These cookies are governed by the respective third party's privacy policy. You can manage or disable cookies through your browser settings, or opt out of personalized advertising through Google's Ad Settings or the Network Advertising Initiative opt-out page.

How We Use Your Data

Any data we collect is used solely to:

• Operate and improve our games and website.
• Respond to your questions or feedback.
• Understand how our site and games are used in aggregate.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Advertising

We use Google AdSense to display advertisements on some of our pages. Google AdSense uses cookies and similar technologies to serve ads based on your prior visits to our site and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your browsing activity.

You may opt out of personalized advertising by visiting Google's Ad Settings. Alternatively, you may opt out of third-party vendor cookies by visiting the Digital Advertising Alliance opt-out page. For users in the European Economic Area (EEA), we display a consent prompt before serving personalized ads, in compliance with GDPR.

For more information on how Google uses your data, see How Google uses information from sites that use its services.

Third-Party Services

We use the following third-party services:

• Google AdSense: Ad serving and monetization. Google may collect browsing data to serve personalized ads. See Google's Privacy Policy.
• Steam (Valve Corporation): Game distribution, payment processing, and DRM for select titles. Purchases made through Steam are governed by Steam's Privacy Policy. We receive your Steam ID and purchase entitlements but do not have access to your payment card details.
• Cloudflare: CDN, DNS, and web analytics. See Cloudflare's Privacy Policy.
• Sentry: Crash and error monitoring for EchoQuest. See Sentry's Privacy Policy.
• EchoForge Accounts / Logto: Authentication and single sign-on for EchoQuest and our account portal.
• Ahrefs Web Analytics: Privacy-friendly, cookieless site analytics. See Ahrefs' Privacy Policy.
• Discord: Community chat. Governed by Discord's Privacy Policy.

Discord Community & Bot (Fig)

We operate a Discord community server and a Discord bot named Fig. If you join our server or interact with the bot, the following applies in addition to Discord's own Privacy Policy:

• Account linking: If you link your Discord account to your EchoForge/EchoQuest account — using the bot's /link command or the "Connect Discord" option in your account dashboard — we store your Discord user ID and username to connect the two accounts. This lets you view your character with /profile, appear on leaderboards, and receive notifications. You can remove this link at any time with the bot's /unlink command or from your account dashboard.
• Public community feed: Messages you post in the server's #general channel may be cached by the bot and displayed publicly on our website (for example, the "Community Chat" feed on echoquest.net), including your Discord display name, avatar, and message text. Only the most recent messages are shown, and older ones are automatically removed as new messages arrive. Please do not post personal or sensitive information in #general, as it may appear on a public web page.
• Bug reports: If you submit a bug report — using the bot's /bug command or by posting in our bug/feedback channel — the report and your Discord display name are forwarded to our public issue tracker on GitHub so we can track and fix it. A reference to your Discord account is included so the bot can send you a direct message when the issue is resolved. GitHub issues are public and may remain after the report is closed.
• What the bot does not do: Fig does not read your direct messages, does not retain your message history beyond the limited community feed described above, and does not collect data from Discord servers other than our own.

To have your linked Discord account, cached feed messages, or a submitted bug report removed, use the options above or contact us at hello@echoforge.games.

Data Retention

We retain personal data only for as long as necessary to provide our services. If you would like your game account or data deleted, contact us and we will process your request promptly.

Data Security

We encrypt sensitive personal information (such as date of birth, IP addresses, and authentication tokens) at rest using AES-256 encryption with isolated encryption keys. Data in transit between our services is protected by TLS/SSL. Passwords are never stored in readable form — only cryptographic hashes are retained.

Children's Privacy

Our games are not directed at children under 13. You must be at least 13 years old to create an account or use our services. We verify age by collecting your date of birth during account setup. If you are under 13, your account will not be created and no data will be stored. If you believe a child has provided us with personal information, please contact us so we can remove it.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data.
• Objection: Object to the processing of your personal data for certain purposes, including direct marketing.
• Data portability: Request a machine-readable copy of your data.
• Withdraw consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

If you are located in the European Economic Area (EEA) and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.

California & U.S. State Privacy Rights (CCPA/CPRA)

This section applies to residents of California under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), and to residents of other U.S. states with similar privacy laws (such as Virginia, Colorado, Connecticut, and Utah).

"Sharing" for advertising. We do not sell your personal information for money. However, we display ads through Google AdSense, and Google's advertising cookies and identifiers may be used to show you personalized ads. Under California law, this use of your data for cross-context behavioral advertising may be considered "sharing" or a "sale" of personal information.

Your right to opt out. You can opt out of this sharing at any time using the "Your Privacy Choices" link in the footer of our website. Selecting it opens a dialog where you can turn off personalized advertising for your device and browser. You can also opt out through Google's Ad Settings or the Digital Advertising Alliance opt-out page.

Categories of personal information. The categories of personal information we may collect are listed in the "What Data We Collect" section above. Depending on how you use our site and games, this may include identifiers (such as an account ID, email address, or Steam ID), internet activity (such as pages viewed and ads served), and, for advertising, inferences drawn from your browsing activity.

Your rights. Depending on your state, you may have the right to:

• Know what personal information we collect and how we use it.
• Access a copy of the personal information we hold about you.
• Delete the personal information we hold about you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of your personal information.
• Not be discriminated against for exercising any of these rights.

We do not knowingly sell or share the personal information of anyone under 16 years of age. To exercise any of these rights, use the "Your Privacy Choices" link or email us at hello@echoforge.games. We will respond within the time required by law, and you may use an authorized agent to make a request on your behalf.

Contact

If you have any questions about this Privacy Policy, contact us at hello@echoforge.games.