Privacy notice

This is what the Skyspawn account service at https://accounts.skyspawn.com stores, who sees it, and how long it is kept.

What your account holds

• Your passkeys' public keys, with when each was added and last used. The private half of a passkey stays with your device or your password manager; Skyspawn never has it, and never sees a fingerprint or face. A passkey you remove is marked removed, so it can never sign in again.
• Recovery codes only as one-way hashes of your current set of 10, and which have been used. The codes themselves are shown once, when they are made, and can't be read back.
• The apps and games you've linked: each one's address, the id it knows you by and when you linked it. Not what you do there.
• Your sign-in sessions on this site, at most 20 at a time. Each ends after 14 days unused or 30 days at most.
• Your last 100 security events, such as a passkey added or a code used: only what happened and when.

There is no email address, password, phone number or name on your account, and no display name shared with apps.

To slow down abuse, attempts to create an account, sign in or recover one are counted per network address, apart from any account, and the counts are deleted within about two hours. Before an account is created or a recovery code is used, a separate page at https://challenge.skyspawn.com checks you're a person with Cloudflare Turnstile. This service runs on Cloudflare.

Linking apps

An app built on Skyspawn is linked to your account only when you approve it here, on this site. Each app gets a different random id for you. It sees that id and your role in it, never your passkeys, your other apps, or anything that would let apps match you up. What an app keeps about what you do in it is that app's, stored by Skyspawn's platform under that app's id for you.

An app may let you use it as a guest, without an account. If you then link it for the first time, your guest progress stays yours, under your account. If your account was already linked there, you choose which to use, and neither is written over.

Deleting your data

• Sign out or end your sessions in an app keeps your data.
• Delete my data in this product, on your account page, removes your private records in that app and then the link. Shared records in its tables, such as a post others can see, follow the rule that app declared: deleted, kept without an owner, or kept under the app with the fields that name you cleared. A kept record still holds whatever you wrote in it.
• Delete my Skyspawn account stops every sign-in at once, signs you out everywhere and deletes your data in every linked app in the same way. Then your passkeys, recovery codes, sessions and security events are deleted. What stays is a record that this random account id was deleted, so it can't be used or restored again. It finishes in the background, and the account page shows what's left until it's done.

Shared entries an app keeps in its simple key-value store have no such rule: they stay, still marked with that app's id for you.

A deletion is recorded as a tombstone: the app's id for you and that it was deleted, with no account id. If an app or this service is ever restored from a backup, the tombstone makes the restore delete your data again rather than bring it back. A deleted account never comes back from a backup.

Your account is never deleted because you've stopped using it. Unlinked guest data is the only data removed for inactivity (below).

Backups and what is kept

• Account backups are made nightly and encrypted before they leave this service. They are stored in Google Cloud, and the keys to read them are held by this service and offline by Skyspawn, never in Google Cloud. Each is deleted after 28 days and is never used for a restore after that.
• Apps' data, including what they hold under their ids for you, is backed up nightly too and deleted after 28 days. Data you delete stays in those backups until then; the tombstone stops a restore from bringing it back.
• A safety log records each passkey removal, use or replacement of recovery codes, and account deletion, encrypted, so no restore can undo them. Its entries are kept 29 days. An account's latest log position is kept at least until its deletion completes, plus 30 days.
• When you link an app, an encrypted link record that only this service can open is stored with that app's platform records, and, when your account takes over guest progress there, with Skyspawn's restore records too. A restore uses it to find your data again, so a deletion can still reach it. Apps can't read it, and it gives no access.
• If this service is ever restored from a backup, a passkey you added after the last nightly backup may need adding again. A passkey you removed or a code you used stays unusable.
• Guest data that isn't linked to an account is removed after 90 days without activity. If an app is restored from a backup, guest data that had been removed may come back with it. Nobody can reach it, and it is removed again about 91 days after the restore.
• If this service ever has to be restored and an account can't be found in any backup, the data apps hold for it is set aside, not deleted, while Skyspawn checks every source. If that check proves the account can't be recovered, Skyspawn's operators remove the set-aside data 90 days later, following each app's rules for shared records. This is a procedure they run; nothing removes it automatically.

Recovery codes and lookalike sites

Enter a recovery code only at https://accounts.skyspawn.com. Never type it into an app, a game or any other website, and never give it to anyone: Skyspawn will never ask you for it.

A passkey only works on this site. A recovery code works anywhere it's typed, so a site pretending to be this one could steal it. If an app or game asks for one, it is not Skyspawn.

If you lose every passkey and every recovery code, the account can't be recovered and nobody, including Skyspawn, can reset it.