Privacy Policy

Effective October 26, 2026

null set games is responsible for the information we process to operate GRAVE SHIFT and graveshift.cc. Contact us at keeper@graveshift.cc.

1. Scope

This notice covers our game diagnostics and analytics, website, game-update signups, support communications, and any optional Discord presence integration. Steam, Discord, YouTube, and other linked services handle information under their own policies. This notice does not replace those policies.

2. Information on your device

The game stores saves, preferences, and diagnostic logs on your device. Diagnostic records can exist even when you decline uploads. Run records describe rooms and seeds, choices, equipment, combat, deaths, outcomes, time played, and progression, along with game and balance versions, platform, and random installation, session, run, and consent identifiers.

An installation identifier links records from the same installation; it is not your Steam account. Linked records are not necessarily anonymous. Turning off sharing does not automatically delete local logs or saved progress.

3. Optional game analytics and diagnostics

Game analytics uploads require your explicit, saved permission. Reading a privacy notice or highlighting an option does not give permission. Shared records help us investigate bugs, crashes, performance, balance, and progression. The same permission covers bounded error excerpts, recent frame timings, RAM/swap and game-memory use, CPU/GPU models, driver and build details, camera positions, and rendering events.

After an interrupted session, a later launch may upload eligible saved diagnostics under that permission. On Linux, diagnostics may inspect accessible kernel records for the affected session without administrator access. Only relevant out-of-memory, game-process termination, and GPU fault/reset event types and times are shared, not raw system messages or the full journal.

The analytics payload does not include your name, email, or Steam ID. Error excerpts attempt to redact personal paths, web addresses, and credentials. We do not upload save files, memory dumps, or environment-variable contents through this diagnostic system. Network delivery still involves processing your IP address and connection metadata.

You can change your choice in Settings → Gameplay → Analytics. Declining does not restrict play. Switching off stops future uploads, but does not delete records already received. A later opt-in does not authorize uploads from before that new permission.

4. Website traffic and cookies

Our public homepage sends a first-party pageview event with a random event ID, the referring website's hostname, and validated campaign tags when present. The service uses the request's IP address and browser user-agent to derive salted visitor identifiers that rotate daily, weekly, and monthly. Stored pageview records contain those identifiers and traffic information, not raw IP addresses, full referring URLs, or signup email addresses. These identifiers are pseudonymous, not a guarantee of anonymity.

This traffic measurement uses no cookies or browser local storage. It respects the browser's Do Not Track and Global Privacy Control signals and excludes recognized automation. You may also block the analytics request without affecting the page. Our Terms and Privacy pages do not send pageview events.

Restricted staff tools use short-lived, signed login cookies to maintain authorized access; these are not advertising cookies. Hosting infrastructure processes connection data needed to deliver and secure the site.

5. Signups and contacting us

If you previously used our game-update signup form, or use one when offered, we store the email address you submit, submission/update times, a salted IP-derived abuse-prevention hash, and a limited browser user-agent. Legacy signup records may also contain optional answers supplied through earlier forms. We use these records for the updates you requested and to prevent abuse.

If you email us, we receive your email address, message, and any attachments or information you choose to provide. We use them to respond and address your request. Please do not send passwords, account tokens, or other unnecessary sensitive information. To stop game-update emails or remove your signup, email keeper@graveshift.cc.

6. Optional Discord activity

Where included in your game version, a minimal optional presence integration communicates with a locally running Discord client to display “Playing GRAVE SHIFT” and game artwork. It does not require an in-game Discord login or account linking, and we do not use it to collect your friends list, messages, or Discord credentials. We do not add chat or multiplayer invites through this integration.

Discord processes and displays activity according to your Discord settings and its Privacy Policy. To control who sees your activity, use Discord's activity-privacy settings. This feature is separate from the game's analytics permission.

7. Providers, sharing, and international processing

We use Amazon Web Services to host the site and receive and store analytics and signup records in the United States. Hosting and email providers process information to deliver their services to us. Authorized people working on GRAVE SHIFT may access relevant records for support, development, and security. We may disclose information when required by law or reasonably necessary to protect people's rights, safety, or our services.

Steam handles purchases, accounts, and platform features under Valve's Privacy Policy. Our website loads a YouTube privacy-enhanced embedded player only when you choose to play the trailer; that interaction is subject to Google's Privacy Policy. Following other external links also subjects your use to the destination's policies.

Your information may be processed outside your country, where privacy laws can differ. Where applicable law requires safeguards for an international transfer, we are responsible for meeting those requirements. Contact us for information about the processing relevant to your request.

8. Retention

Our raw game-telemetry storage is configured to expire uploaded records after 400 days, and the related service-log configuration uses seven days. Downloaded diagnostics, backups, and analysis reports are separate copies; automatic expiry of the upload store does not delete them.

Website traffic and signup storage currently have no automatic expiration rule. We keep these records for site analysis, requested communications, support, and abuse prevention, subject to applicable retention and deletion requirements. Support correspondence and separately downloaded records are retained as needed for their purpose and any legal obligations. Contact us to request deletion; do not assume that uninstalling the game or disabling analytics deletes server-side records.

9. Purposes, legal bases, and your rights

Where a legal basis is required, we rely on consent for optional game-analytics uploads and requested update subscriptions; legitimate interests, where applicable, for proportionate website measurement, security, troubleshooting, and support; performance of a contract when necessary to provide a requested service; and compliance with legal obligations where required.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your information; restrict or object to processing; withdraw consent; and complain to a privacy regulator. Withdrawing consent does not affect processing already lawfully carried out. We will handle requests as required by applicable law.

Send requests to keeper@graveshift.cc. We may need your signup email or the game's installation identifier to locate a record and proportionate information to verify a request. We do not need your Steam or Discord password. Some information may need to be retained for security or legal reasons, which we will explain where applicable.

10. Children, security, and changes

Our services are not directed to children under 13, and we do not knowingly seek their personal information. If you believe a child has provided information to us, contact us so we can investigate and take appropriate action.

We use access controls and other safeguards, but no storage or transmission system is completely secure. We will update this notice when our practices change and revise the effective date above. Material changes will receive additional notice or consent when required by law.