Privacy and data

Last updated: 29 October 2026

This policy explains what information Underleaf and this website handle, where it is kept, who receives it and how you can exercise your rights.

1. Who is responsible

Underleaf is developed and published by Roberto Falconi under the name Falkons Milkspill. Roberto Falconi is the data controller for personal information processed by the developer in operating this website and responding to messages.

For privacy questions and requests, email plenario-toupet-5k@icloud.com. This policy covers the game and the official website at falkonsmilkspill.com.

2. Information on your PC

The game saves your chosen name and title, profile, progress, statistics, discoveries, worlds, characters, custom maps, preferences and recent connections on your PC. Local identifiers and keys let a world recognise your characters; a derived identifier helps recognise the local device. The game also creates diagnostic logs and crash files.

These files are not automatically sent to the developer. You can open the game’s data folder from Settings → Privacy and data. Files you export remain wherever you choose to save them.

3. Playing with others

A player hosts each multiplayer match on their own PC. The host receives the information needed to connect and play: your chosen name and title, your character’s public identity and game state, and an authenticated Steam account identifier or Epic Online Services product user ID for online play. Local-network and direct-address connections also reveal your network address to the host. Online builds use relayed connections and do not publish your IP address in the game interface.

The host’s world save keeps characters and links to authenticated accounts so players can return to their characters. It also stores information used to manage administrators, access and bans, including identifiers, names and relevant dates. These records remain on the host’s PC, not in a developer database.

Other players see your chosen name, title, role and shared game state. Party members can see the character information shared on the map. Text chat passes through the host to the selected channel: global, party or nearby. Chat history is held in memory during play; Underleaf does not maintain a central chat archive.

Online lobbies advertise the match name, map, player count, rules and public match code. The separate access code for a private match is kept with the host’s world and is not advertised in the lobby. Exported maps and worlds can contain an author name, description, preview and public character information. Review exported files before sharing them.

4. Steam and Epic services

Steam

The Steam version uses your Steam account. In builds with cross-play, it exchanges a Steam authentication token through EOS Connect to obtain a product user ID; it does not ask you to sign in to an Epic account. Steam friends and invitations use Steam’s interface, and invitations can carry the public match code. Valve’s handling of data is described in the Steam Privacy Policy.

Epic Games Store and Epic Online Services

The Epic version uses the Epic account signed in to the launcher. Underleaf requests Basic Profile, Friends List and Online Presence permissions to authenticate you, identify your profile, show friends and invitations through the overlay, and support joining matches and displaying your presence.

Epic Online Services provides the shared online identity, lobby and connection features used for cross-play. The game uses platform and product user identifiers to identify participants, associate returning players with characters and enforce access rules. Friends lists and presence are not copied into world saves or sent to the developer. Underleaf does not receive your Epic or Steam account password.

For Epic’s processing of information, retention and privacy choices, read the Epic Games Privacy Policy. You can manage the application’s account permissions in your Epic account settings. Withdrawing access can prevent the associated online features from working.

Store cloud saves

If cloud synchronization is available and enabled for your version of the game, the store may synchronize eligible save files under your account. Manage cloud copies through that store. Deleting local files alone does not necessarily delete a cloud copy.

5. Reports and messages

The game’s Report a problem command creates a file on your PC; it does not send that file automatically. It can include your description, game version, language, map and technical system information, plus a log excerpt if you select it. The exporter removes recognised sensitive identifiers, but you should still review the file and any text you entered before sharing it.

If you email the developer, the developer receives your address, message and any attachments you choose to send. They are used to answer your request, provide support and investigate the problem. Correspondence is handled through iCloud Mail; see Apple’s Privacy Policy. Do not send account passwords or authentication codes.

6. This website

The website has no player registration, data collection forms, newsletters, advertising or analytics added by Falkons Milkspill. Its page code does not set cookies or use browser storage for tracking. Selecting a species or map changes the page locally. Images, scripts and styles are served with the website.

The website is hosted on GitHub Pages. Delivering and protecting the pages involves technical request data, such as IP addresses and requested URLs. GitHub processes this information under the GitHub Privacy Statement. Cloudflare provides domain registration and DNS services; see the Cloudflare Privacy Policy.

The contact link opens your email application. Merely opening that link does not send a message to the developer.

7. Purposes, recipients and legal bases

Information is used to provide the features you choose: save progress, connect players, identify returning characters, manage access, show invitations, deliver the website and respond to support requests. Falkons Milkspill does not sell personal information or use it for advertising or profiling.

Where the GDPR applies, processing needed to provide requested game features or support is based on providing that service and taking steps at your request. Website security, handling general correspondence and investigating faults serve the legitimate interests of operating a reliable website and supporting the game. Where processing relies on consent, you can withdraw it; any legal obligation to retain information applies independently.

Recipients are the match host and relevant players, the platform services you use, and providers needed to deliver the website or handle correspondence, as described above. Information may also be disclosed when legally required. These providers operate internationally; consult their linked policies for processing locations and transfer safeguards. Local files are not accessible to the developer simply because you play the game.

Online identity and connection data are needed for online play. You can choose offline play instead. We do not make decisions with legal or similarly significant effects about you solely through automated processing. For younger players, the applicable store age requirements and parental controls apply; parents or guardians can contact the developer about information they have sent.

8. Retention and deletion

Local saves, profiles, identities and logs remain until deleted, replaced or rotated by the game. Host records remain with the world; ban records can be removed by the host or by deleting the world. Exported files and copies sent to someone else remain under that recipient’s control.

Settings → Privacy and data → Clear game data removes the local game data covered by that command. Graphics and audio settings, exported files and a log still open by the running game can remain. Use the data-folder link to inspect remaining files after closing the game.

Support messages and attachments are kept only as long as needed to answer the request and resolve related issues, or where a legal obligation or legal claim requires retention. You can request their deletion using the contact address above. Platform, hosting and email providers apply their own retention rules, explained in their policies.

Deleting your local files does not remove a host’s save, a platform account, cloud copies or information already sent to another person. Contact the relevant host or service for those copies.

9. Access, deletion and your rights

Contact plenario-toupet-5k@icloud.com to ask about information held by the developer or request access, correction or deletion. Depending on applicable law, you may also have rights to restrict processing, object, receive portable data and withdraw consent without affecting earlier lawful processing. You may complain to your local data protection authority; in Italy, this is the Garante per la protezione dei dati personali.

We may need enough information to identify the relevant correspondence, but will not ask for your game-account password. For information held exclusively by a host, Steam, Epic or another provider, use that party’s privacy tools or contact channels. The developer cannot access or erase files on another player’s PC.

10. Changes to this policy

This policy will be updated when the game or its data practices change. The date above identifies the current version.

← Back to Underleaf