Privacy Policy

Last updated: 15 November 2026.

Avalon Online is a free, unofficial fan project maintained by Lorraine Wong. This notice explains the information used to provide the website and multiplayer games. You do not need to provide an email address or real name.

Information used to run a game

Firebase Anonymous Authentication creates a random user ID. Realtime Database processes that ID, your chosen nickname, room membership and online presence, public game state, and encrypted role and action payloads. This information connects players and synchronises the game. Use a game nickname and do not enter sensitive personal information.

What other players can see

Players in your room can see nicknames, presence and public game activity. Hidden roles and actions are encrypted for their intended recipients; the host browser is trusted to run the game. Encryption does not protect against a compromised host, a modified client or someone looking at your screen.

Information stored in your browser

The application uses localStorage for your decryption private key, nickname, language, theme, last room code and private deduction notes. Notes are not uploaded to Firebase or shared with the host. Other people using the same browser may be able to view them. Firebase may also use browser storage to maintain your anonymous sign-in.

Retention and room expiry

New rooms have a 72-hour expiry marker; completed games use a 24-hour marker. An expired room is removed when its host reconnects. There is no scheduled server cleanup, so a room may remain if its host never returns. Old data may also be removed during maintenance. Room expiry does not automatically delete anonymous authentication accounts.

Service providers and network information

The production website is hosted on GitHub Pages. Multiplayer data is processed by Google Firebase, with Realtime Database in Singapore (asia-southeast1). Web fonts are served by Google Fonts. These services may process IP addresses and other necessary network information under their own policies.

The application contains no analytics or advertising trackers and does not sell player data. It does not itself set cookies; this does not mean that hosting or third-party services never use cookies.

Your choices and contact

You can change your nickname, leave a room, clear private notes in the game, or remove this site's data through your browser settings. Clearing browser data also removes local keys and may prevent recovery of an existing game. Leaving a room does not necessarily erase its game history.

For privacy questions or security concerns, contact the project through GitHub private vulnerability reporting. Do not include private room information in public issues. This notice may be revised as the service changes; its last-updated date identifies the current version.