Account data notice

October 28, 2026 · Invitation-only adult beta

Penguin Time Machine is an independent fan project and playable archive. This beta is for invited adults aged 18 or older. An email confirmation establishes access to a mailbox; it does not verify age.

What we collect

We store your penguin name, a hash of your password, your account email and whether it is confirmed, the time you declared you are an adult, and the version of this notice you acknowledged. We also store game progress, essential account sessions, security rate limits, and moderation records. Recovery keys and email action tokens are stored as hashes. Staff authenticator secrets and queued account-email contents are encrypted.

Account messages

We use Resend to send confirmation and password-reset messages. Resend processes the recipient address and message contents, including the penguin name and secure account link. Delivery records may be retained by that provider. These messages are for account access; registration does not subscribe you to marketing. We do not enable open or click tracking for account mail.

Hosting and retention

The game and database run on a DigitalOcean server in New York, United States. Account data and game progress remain while your account exists. Expired email tokens are removed automatically, and expired queued messages are removed within roughly a day. Routine chat is retained for one day, player reports for 30 days, and staff audit and beta feedback for 90 days. Database backups rotate across seven local snapshots; provider backups have a seven-day retention. Manual recovery copies may be retained separately.

Cookies and access

We use an essential account-session cookie. Email addresses are not shown to other players. Restricting access, rate limits, and security monitoring support the beta. Moderators can review reported behavior and evidence; trusted server operators can access stored data for maintenance and support.

Requests and questions

Use signed-in playtest feedback to ask the operator about access, correction, deletion, or this notice. Requests are handled manually during the beta. Some security or moderation evidence and backups may need to be retained for their stated periods. This beta does not yet provide automatic account deletion or email-address changes.

Keep passwords, recovery keys, email links, and authenticator codes out of chat, reports, and feedback. If you are not eligible for this adult beta, do not create an account.