Privacy — Litecoin Horizon

What is collected

Only what an order needs.

Browsing

Nothing. This website has no analytics package, no tag manager, no advertising pixel and no session recorder. Reading the comics, browsing the store or watching the archive is not logged by us beyond the ordinary web-server access logs our host keeps. The one exception is inside the Rush game itself, described below.

Stored in your browser, never sent to us

Three things are kept in your browser's local storage and stay there: the contents of your cart, whether you chose the light or dark theme, and whether you prefer the compact or large store grid. Clearing your browser data removes all three.

Cookies

Two. lh_preview only toggles a store preview mode and identifies nobody. __Secure-rush_s is set only when you play Rush in the browser: it keeps you signed in (or keeps your guest progress) and is sent only to the game's server address (/rush-api/), never to the rest of the site. Scripts cannot read it (HttpOnly). With "Keep me signed in" it lasts until 30 days after you last play; otherwise it ends with the browser session, or after 12 hours without play. Signing out removes it.

When you buy something

Checkout asks for your name, email address, and shipping address (street, city, state, postal code and country). That is used to send your order, to email you a confirmation, and to calculate sales tax from the delivery address. It is not sold, rented or shared for marketing, because there is nobody to share it with.

Litecoin Legends: Rush

Playing needs no account: your progress is saved on your device (in the browser's storage on the web, or inside the Android app). If you choose to create a Rush account, we store the username you pick, a salted hash of your password (never the password itself), an email address only if you add one (it is used for nothing but password reset codes), a copy of your game save so it can follow you between devices, and the runs you submit to the leaderboards (wave, clear time, damage taken and the date). Your username and those leaderboard results are shown publicly on the in-game leaderboards. The address you connect from is kept briefly to limit repeated sign-in attempts.

Without an account you play as a guest. So that a guest can still rank and keep its Ł and gear, the Android app sends a random device number that the game makes and keeps on your device (we store only a one-way hash of it), and the web game uses the sign-in cookie described above. A guest is shown on the leaderboards as "Guest #" and six characters. If you set a gamer name, it is shown instead of your username or guest name. For guests and accounts alike, your Ł balance, gear, talents and a history of the Ł you earned and spent are kept on our server, because that is where Ł is earned and spent.

While you play, the Rush game (not this website) sends anonymous play statistics to our own server, and nowhere else: a random session number made fresh each time the game starts, the kind of device (desktop browser, phone or tablet browser, Android app or Windows app), the game version, a rough screen size, how long you play, which menu tabs you open, and the runs you start and finish (mode, chapter, how far you got and how long it took). It uses no cookies and is not linked to your account, your name or your email. Your IP address is used only to stop floods of requests, as a scrambled one-way hash that is deleted within a day, and is never stored with the statistics. The raw events are deleted after 90 days; we only look at totals, such as how many people played this week and how far they got.

The game and its Google Play app are intended for adults 18 and over, and we do not knowingly collect data from children. If you believe a child's data is held here, write to support@litecoinhorizon.com and it will be deleted.

Third parties

Who else sees anything.

Payments

Card payments are processed by Stripe. You are handed to Stripe Checkout to pay, so your card number is entered on Stripe's systems and never touches this site — we never see it and never store it. Stripe also computes the sales tax on your order. Their privacy policy governs what they hold.

Crypto payments are processed by our own BTCPay Server at cryptopay.litecoinhorizon.com. It is self-hosted, so no payment company sits between you and us. To work out the sales tax, the delivery address of a store order is sent to Stripe's tax service, as it is for a card payment.

Buying Ł in the game

Ł, the Rush game's currency, can be bought inside the game. Card payments use Stripe's payment form inside the game (Stripe's payment sheet in the Android app, Stripe's embedded checkout on the web): the card details go to Stripe only and never reach us. On the web, Stripe's form also asks for a billing address, which Stripe uses for the sales tax, and Stripe tells us the name and email address entered there. Crypto payments go to our own BTCPay Server, as in the store. In the Google Play app you can also pay with Google Play Billing: Google processes that payment and tells us the purchase, its country and an order reference, and Google's privacy policy covers what Google holds.

For card payments in the Android app and for crypto payments, the IP address the purchase comes from is sent to Stripe to work out the sales tax. Each order is recorded with the Rush account it was for, and card orders from the Android app and crypto orders also carry "Rush #" with the account number and the account's gamer name (or its username if it has none), and its email address if it has one. The record of each Ł purchase (order number, pack, price, tax, payment method and date) is kept for 7 years for tax and accounting and to handle refunds and disputes, also after the account is deleted, and then deleted. Purchases made in the Google Play app through our own checkout instead of Google Play Billing are reported to Google, as Google requires for that choice: the amount, the tax, the country, the time and Google's own transaction reference. No name or email address is sent to Google.

Where it is kept

This site, the Rush game server, its database and the order records run at our web host, DreamHost, in the United States, which also sends the site's emails (such as password reset codes). If you use the site or the game from another country, your data is handled in the United States. Our BTCPay Server is our own. Stripe and Google receive only what is described above.

Embedded video

The video archive and the homepage embed posts from X. Those embeds are not loaded until you ask for one — the archive ships plain links and only builds an embed when you click a video. At that point your browser contacts platform.twitter.com and X can see that request, as it would if you visited the post directly.

Fonts

Self-hosted. The site makes no request to Google Fonts or any other font CDN, so no third party is told which pages you read.

How long

How long, and what deletes it.

Store orders (name, email, delivery address, items, amounts): to send the order, confirm it and pay its tax. Kept 7 years for tax, then deleted by a monthly clean-up job. Seen by Stripe (card payments and sales tax) and our host.
Rush account (username, password hash, email if added, gamer name, the latest 5 cloud saves, leaderboard runs, Ł balance, gear, talents and Ł history): to run the game's online features. Kept until you delete the account (in the game or at /rush/delete-account). Seen by our host; your username or gamer name and leaderboard results are public in the game.
Rush guest (a one-way hash of the device number, or the web cookie, with the same game data as an account): to let you play and rank without an account. Kept until you delete it: create an account in the game on that device or browser (its scores, runs, Ł and gear move into the new account and the guest is removed), then delete the account.
Sign-in sessions: they end 30 days after their last use, when you sign out, or when the account is deleted.
Password reset codes: stored only as a hash, valid for 30 minutes, sent to the account's email address by our host.
Sign-in protection (your IP address, or the name tried, with the time): to stop password guessing. Deleted after 24 hours.
Play statistics (anonymous, described above): to see how the game is played. Deleted after 90 days.
Ł purchases (as described above): to deliver the Ł, for tax and accounting, refunds, disputes and Google's reporting. Kept 7 years, also after the account is deleted, then deleted by the same monthly job. Seen by Stripe, Google (for purchases in the Google Play app) and our host.

Your data

Asking for a copy, or a delete.

You can ask for a copy of what is held about you (for a Rush account, as a file you can keep), for a correction, or for deletion. Write to support@litecoinhorizon.com; it will be handled by a person, not a form. So that nobody can ask for someone else's data, we check that the request comes from you: from the email address on the order or the account, or, for an account without one, by asking you to sign in to the account in the game and make a small change we name. We answer within 30 days. Order records are needed for fulfilment, accounting and tax, so they are kept for 7 years even when you ask for deletion.

A Rush account can be deleted at any time from the game (Account, then Delete account) or on the web at https://litecoinhorizon.com/rush/delete-account. That removes the account, its sign-in sessions, its cloud saves, all of its leaderboard entries, and its Ł balance, gear, talents and Ł history straight away. The records of Ł purchases described above are kept for 7 years.

If something goes wrong

If your personal data is exposed in a security breach, we will tell you by email (where we have your address) and the authorities where the law requires it, without undue delay.

Who is responsible

Litecoin Legends: Rush for Android is developed by EquipNexus LLC, which publishes it on Google Play as EquipNexus and is responsible for the data the Android app handles as described on this page. Questions and requests about it go to the same address: support@litecoinhorizon.com.

Litecoin Horizon is a one-person operation. If something here is unclear, ask — the answer will be a straight one.

What we keep, and what we don't.