This policy explains what information our games and website involve, how it is captured, what it is used for, who it is shared with, and how long it is kept. It covers Disastercake, LLC and our products — currently the game Soul Saga (Windows PC), in both its Steam and DRM-free versions, and the website at disastercake.com. Where the two versions of the game behave differently, this policy says so explicitly.
Disastercake, LLC (“Disastercake”, “we”, “us”) is an independent game development company and the party responsible for this policy. For any privacy question, or to exercise a right described in section 11, contact us at hello@disastercake.com. We answer privacy mail directly.
Most privacy policies are long because the company operates online services that receive and store user data. We do not. Soul Saga has no backend: no accounts, no login, no dedicated servers we run, no database, no cloud storage, and no telemetry pipeline of our own.
Online co-op is peer-hosted — one player's copy of the game acts as the host and the others connect to it directly. Game data travels between the players in that session and is never routed to us. Disastercake operates no service that receives player data.
Everything described below is either (a) held only on your own device, (b) sent directly to the other players in a session you deliberately joined, or (c) handled by a third-party platform we name explicitly, under that platform's own privacy policy.
Throughout this section, REQUIRED means it happens whenever that version of the game runs and cannot be avoided while playing normally. OPTIONAL means it happens only if you actively choose a feature — if you never use that feature, it never happens.
First, which version of the game do you have? Soul Saga is released in more than one edition, and they do not behave the same way:
Everything else is the same in both versions: local files, direct-IP connections, and the optional Epic features in sections 3.4 and 3.5. Epic Online Services is included in both builds, and in both it stays entirely inactive — not initialized at all — until you press “Connect to Epic”. Choosing the DRM-free version does not remove the Epic option, and choosing the Steam version does not turn it on.
This section applies only to the Steam version of Soul Saga. If you have the DRM-free version, none of it applies to you.
The Steam release initialises the Steam client library when the application starts. Steam is already running on your machine and you are already signed into it; the game reads information Steam makes available to it locally. In the Steam version this cannot be switched off while playing — it is inherent to the game running on Steam.
| Captured | How it is captured |
|---|---|
| Your Steam ID | Read from the local Steam client at startup. It identifies your machine as the host if you later host a session. |
| Your Steam display name | Read from the local Steam client. Used only if you host a Steam co-op lobby, where it becomes the lobby name. |
| Your Steam friends list | Read only at the moment you open the Steam tab of the Join Game window, to show which friends are currently in a Soul Saga lobby. Includes each friend's display name, online status, and current game. |
This information is read into the running game on your computer. It is not transmitted to us — we have nowhere to transmit it to.
Soul Saga offers up to three ways to connect, depending on your version. A player who only plays single-player uses none of them, and the game makes no network connection whatsoever.
The Host Game window has a button that looks up your public IP address so you can share it with a
friend. Pressing it makes a single web request to api.ipify.org, or to
checkip.amazonaws.com if the first does not respond. These services reply with the public
IP address the request came from, which necessarily means they see it.
This happens only on that button press — never at startup, never on a timer, never in the background. The separate local-network address shown next to it is worked out entirely on your own machine and sends no traffic anywhere.
Soul Saga can use Epic's relay as a third connection method. Nothing contacts Epic until you press the “Connect to Epic” button.
To be exact about what that means: the Epic software is included in the game files, in both the Steam and DRM-free versions. But until you press that button, none of it runs — the component that would talk to Epic is never created, no Epic function is ever called, and nothing leaves your machine. Shipping a dormant library is not the same as using one, and we would rather describe it that way than imply the files are not there.
There is no Epic account and no Epic login. We do not ask you to sign in to Epic and
we do not receive an Epic account. Instead, the software creates an anonymous Device ID, which
produces an anonymous identifier called a Product User ID. That identifier is what your friend pastes to
join your game — it is shown in-game as your “host code”. The display name sent to Epic
is the fixed placeholder text User; your real name is never sent.
The Device ID is a persistent credential stored on your computer, so the same anonymous identifier is reused next time rather than a new one being made each session. It is created only once you opt in, and it is not linked to any account of ours or of Epic's. Please note that on Windows, uninstalling the game does not remove it — see section 6.
This is the only telemetry of any kind in Soul Saga, and it applies only to players who have already opted in to Epic under 3.4.
When an Epic-relayed session starts and ends, the software tells Epic that a session began and
finished. Epic receives the anonymous Product User ID, the placeholder name User, a
controller type recorded as “Unknown”, and the start and end times.
No gameplay, save, progress, or personal data is included.
How to turn it off: a toggle labelled “Share play-session data with Epic” appears on both Epic screens — the EOS tab of the Host Game window and the Epic tab of the Join Game window. It is available before you connect, so you can decline in advance, and after you connect, so you can withdraw. Your choice is remembered between sessions.
Turning it off stops the next session from being reported. A session already underway is still closed out properly rather than left hanging on Epic's side.
These files live on your computer and are never transmitted by us. On Windows they are under
%USERPROFILE%\AppData\LocalLow\Disastercake\Soul Saga.
| File | What it holds |
|---|---|
| Save files | Your world, party, inventory, quests and characters. You choose the file names. No Steam ID, Epic ID, or account identifier is written into a save. |
| Saved IP addresses | Addresses you typed into the Join window, so you do not have to retype them. Only created if you use Direct IP. |
| Saved Epic host codes | Host codes friends gave you. Only created if you use Epic. |
| Settings | Video and quality options, some networking form fields, and your Epic data-sharing choice from 3.5. Stored in Windows' standard per-application settings area. |
| Diagnostic log | A standard log file the game engine writes. Useful when you report a bug. Because it records what the game is doing, it can contain IP addresses, Epic host codes, Steam lobby identifiers, and the Steam display names of friends shown in the join list. It stays on your machine and is never sent anywhere by us — you would have to attach it to a bug report yourself. |
Only while you are in a session you chose to join, and only with the other players in it:
Soul Saga has no text chat, no voice chat, and no messaging of any kind. There is no user-generated content, no uploads, and no mod sharing. The game does not observe, score, log, or report how anyone plays, and there is no anti-cheat or behavior monitoring.
disastercake.com is a static site. It sets no cookies, runs no analytics, and has no tracking pixels, no login, and no forms. Two things are worth stating plainly:
Links to Steam, Discord, X, GOG and Humble Bundle are ordinary outbound links. Once you follow one, that site's own policy applies. The site embeds no third-party video, players, or widgets — so apart from the font request above, nothing loads from another company when you open a page.
Every use below is operational — making the thing you asked for work. None of it is used for advertising, marketing, profiling, scoring, training, or resale.
| Information | What it is used for |
|---|---|
| Steam ID (Steam version only) | To identify your machine as the host of a session, so others can connect to it. |
| Steam display name (Steam version only) | To name your lobby, so invited players recognize it as yours. |
| Steam friends list (Steam version only) | To show you which of your friends is currently in a Soul Saga game you could join. |
| IP addresses | To establish a direct connection between two players. An IP address is what a connection is made to; it cannot be avoided when connecting directly. |
| Epic Product User ID | To act as the host code a friend pastes in to reach your session through Epic's relay. |
| Epic play-session start/end | Reported to Epic as usage of their relay service. This is Epic's measurement of their own service, not ours — we receive nothing from it. |
| In-game display name | So players can tell each other apart on screen. |
| Files on your device | To save your progress, remember your settings, remember addresses you have used, and let you diagnose problems. |
| Web server logs | To keep the website running and secure. |
We do not sell, rent, license, or trade personal information. We do not share it with data brokers, ad networks, or advertisers, for money or for anything else. We run no advertising and have no commercial relationship that involves data.
Because we operate no servers, we are not in a position to disclose your data to anyone — we do not hold it. Information reaches other parties only in these ways:
| Who | When | What reaches them |
|---|---|---|
| Valve (Steam) | Steam version only. Never for the DRM-free version, which has the Steam code compiled out. | Your use of Steam features: lobbies, friends-list reads, invites, and relayed gameplay traffic. Valve already holds your Steam account; see Valve's privacy policy. |
| Epic Games | Only after you press “Connect to Epic” | An anonymous Device ID and the resulting Product User ID, relayed session traffic, and — unless you switch it off — play-session start and end times. See Epic's privacy policy. |
| ipify / Amazon Web Services | Only when you press “find my external address” | Your public IP address, inherently, because that is what the service is asked to report back. |
| Other players | Only in a co-op session you joined | As listed in 3.7. |
| When you visit our website | Your IP and browser details, via the font request described in 3.8. |
We would also disclose information if we were legally required to — but as we hold none, in practice there would be nothing to give.
Disastercake retains nothing, because we have no system that stores it. There is no account to delete and no record of you to erase, because none was ever created. Retention therefore happens in three other places:
| Where | How long | How to remove it |
|---|---|---|
| On your device — saves, settings, saved addresses and host codes, logs | Kept until you delete it. It stays after uninstalling, because uninstallers routinely leave save data behind on purpose. | Delete the folder in 3.6. You can delete individual files — removing saved addresses or host codes does not affect your saves. |
| In a live co-op session | Only for the duration of the session. It exists in the other players' running game and is gone when the session ends. | Leave the session. Nothing is written to disk on their side about you. |
| With Valve, Epic, ipify or Amazon | Set by each of those companies under their own policies, which we do not control and cannot override. | Use that company's own privacy controls — each is linked in section 5. |
One case deserves specific mention, because it is easy to get wrong: the Epic Device ID. If you opted in to Epic (section 3.4), the anonymous Device ID stored on your computer is persistent, and on Windows it is not removed when you uninstall the game. On mobile platforms uninstalling clears it automatically; on desktop it does not. The linked Product User ID also continues to exist on Epic's side under Epic's own retention policy.
We want to be straight about the consequence: Soul Saga does not currently offer an in-game button to delete your Epic Device ID. If you want it removed, contact Epic Games using the privacy contacts in their privacy policy, since they hold it — or write to us and we will help you work out the right route. Players who never press “Connect to Epic” never have a Device ID at all.
Web server logs for disastercake.com are ordinary technical records kept only as long as useful for security and troubleshooting, and are not used to build any profile.
Our games and website are not directed at children under 13, and we do not knowingly collect personal information from children. We do not operate accounts or profiles, so there is no registration process through which a child could give us information. If you believe a child has provided us with personal information, contact us and we will address it — though in practice we hold no data to remove.
The most meaningful security measure we can offer is structural: we do not collect or store your data, so there is no database of ours to breach.
For what does exist: our website is served only over encrypted HTTPS connections. Data saved by the game is protected by your own computer's security. Connections made through Steam or Epic are protected by those platforms. On a Direct IP connection you are connecting straight to another player's machine, which means you each see the other's IP address — only use Direct IP with people you are comfortable connecting to, and prefer Steam or Epic when playing with strangers.
We are based in the United States. Since we operate no servers and receive no player data, we perform no international transfers of our own. The platforms named in section 5 are global services that process data in various countries under their own published safeguards.
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict its processing, and to withdraw consent.
We can honour these, but there is usually nothing for us to act on: we hold no data about you, so an access request would return nothing and a deletion request would find nothing to delete. That is not a refusal — it is the honest consequence of our design. Where data does exist, you can act on it directly and immediately:
If you are in the EEA or UK: where we process anything, the lawful basis is our legitimate interest in operating the game you chose to run and keeping our website secure — or your consent, for optional features such as Epic connectivity. You may lodge a complaint with your national data protection authority.
If you are in California or another US state with similar law: we do not sell or share personal information as those terms are defined, we do not use it for targeted advertising, and we do not profile you. There is therefore nothing to opt out of, and we will never discriminate against you for exercising a privacy right.
To make any request, email hello@disastercake.com.
We keep this policy tied to what the software actually does, and review it whenever the game or website changes. Every revision gets a version number and a date, both shown at the top of this page, so you can tell at a glance whether anything has changed since you last read it — and, more usefully, whether the change was important enough to be worth re-reading.
We use semantic versioning: three numbers in the form MAJOR.MINOR.PATCH. Each one means something specific.
| Part | Changes when… | What you should do |
|---|---|---|
MAJOR2.0.0 |
Something substantive changed about your data. New information is collected, a new third party receives it, we use it for a new purpose, retention changes, or your rights and controls change — for example if a new feature started collecting something, or a data recipient was added or removed. | Please re-read the policy. Something that affects you is genuinely different. |
MINOR1.1.0 |
Something was clarified or explained better, but nothing about the handling of your data changed. New examples, a clearer breakdown, an added section explaining existing behavior, or restructuring for readability. | Worth a skim if you are curious. Nothing new is happening to your data. |
PATCH1.0.1 |
Spelling, grammar, punctuation, typography, formatting, or a broken link. Corrections only. | Nothing. The meaning is identical to the previous version. |
The rule in one sentence: if the first number goes up, what we do with your data changed and you should read it again; if the second goes up, we explained the same behavior more clearly; if the third goes up, we fixed a typo.
Numbers to the right reset when one to the left increases — the revision after
1.4.2, if it were a substantive change, is 2.0.0, not 2.4.2.
A material change will also be noted here in the history below, not only in the version number.
| Version | Date | What changed |
|---|---|---|
| 1.0.0 | 6 Aug 2026 | Initial privacy policy for Disastercake, LLC and Soul Saga. |
Questions, requests, or concerns about privacy:
Disastercake, LLC
Email: hello@disastercake.com
A real person reads this address. If you are exercising a data protection right, say so in the subject line and we will treat it accordingly.