ACCOUNT · SOUL ⇄ WEB LINK time base · Cambrian shallows
Account · the record

Your soul,
on the record.

A does not need an account. It has already fallen through worlds without one — learned a coastline by scent, held a , bred, starved, died, and fallen on — and the game server wrote every line of it down whether or not anyone was ever going to read it. An account is not a login. It is the excavation. Down there in the mud basin, a slide buries a whole community intact, and 518 million years later that burial is the only reason we can read them at all. Same trick here. Bind your game to an account and the record surfaces: your lineage's watch, the lives you have already spent, the deeds the server signed off on. You do not create anything by signing in. You dig up what was always being written.

8CHAR
Link code
5:00
Code lifetime
1
Use per code
≈39BIT
Code entropy
0
Third-party logins
There is no backend behind this page yet. The account service comes online with WEB-M1, the link flow with WEB-M2, the Discord bind with LINK-M1, the waitlist with LINK-M2, and the deep map with WEB-M3. This is the real interface, wired to the real contract — so it does not mime being broken, it actually asks, actually fails, and tells you exactly what came back. A link code carries no authority, so this page will post one and read the true answer. An email address and a Discord identity are not so cheap: those panels ask the service whether it is open before they ask you for anything, and today nothing answers. You will not be told a date, because a date is a promise the rock does not keep. No third-party sign-in will ever be offered: email and password on our own infrastructure, or nothing.
Sign in / Register

One account. No middlemen.

Email and password, hashed server-side with Argon2id. Your session lives in an HttpOnly cookie this page cannot read, on a Worker small enough that one person can read it top to bottom in a sitting. Nothing secret ever runs in your browser. There is no "sign in with" anything, and there never will be.

Sign inweb-m1

disabled — the account service ships with WEB-M1. Nothing is sent; nothing is stored.

Registerweb-m1

disabled — the account service ships with WEB-M1. Nothing is sent; nothing is stored.

What the design already locks. Argon2id at the OWASP interactive profile with a per-account random salt, a top-10k-password denylist compiled into the Worker, and a deliberate cruelty: Argon2id runs even for an email that does not exist, so the timing cannot tell an attacker who is real. Failure is one message for a wrong address and a wrong password alike. The site should not gossip about who plays here.
Discord

A window out, not a door in.

The two bots that exist read the world and nothing else — status, forecast, the leaderboard, the codex — and they are never told who is in it. The third corner is a bind, not a login: your account mints the code, you run the command yourself, and what comes back is a role and a message when something you were dies. You cannot sign in with Discord. You cannot recover with Discord. Unbind it and everything else here works exactly as it did. There is no server yet and no invite; when there is one it will be published on the support page and nowhere else, and anything else claiming to be it is not.

Bind Discordlink-m1

Signed in, you mint a code here. You go and run /link yourself. The Warden checks the signature Discord itself puts on that command — we never take a bot's word for who you are — and hands back a handle. You look at the handle, and only you can finish it.

 

Never run /link with a code someone hands you. The code comes from this page, on your own account, behind your own session. That is not a detail — it is the reason this edge cannot be phished into taking your account. Anyone asking you to run their code is trying to hang their Discord on themselves, and the Warden will message you about it the moment it happens.
What the bind carriesevery feed off by default
DM · deaths
Off by default. A message when a body you were wearing dies — species, the age it reached, what killed it, and the coarse cell it happened in. The one notification worth having in a game about dying.
DM · records
Off by default. A message when one of your lives reaches the record — oldest elder, rarest genome, apex standing. The world noticed. That is all it says.
Public feed
Off by default. The obituary channel, under a handle you choose: species, era, age, cause. No account, no soul id, no region, no timing you could triangulate. Deep time reads its dead aloud; it does not read out where you sleep.
Beta keys
Direct message only. A key is never posted to a channel, never rendered on a page, never printed in a log — not once, not ephemerally, not "just this time".
Never
Your soul id, your account id, your email, your position. Discord is not told any of them, and /whoami will not tell you either. You have this site for that.
The bots keep their hands empty. Herald and Codex are read-only and stay read-only — they hold a GET and nothing else, and all authority stays on the sovereign server. The Warden is a third application that grants one role in one guild and sends messages, and if its token were stolen tomorrow the worst anyone could do with it is hand out a beta role. Design and contract: the bots on the support page.
Beta

Waves, not a waiting room.

We sell and test through our own website, on the same spine as everything else here — no third-party auth, no trackers, no analytics reading over your shoulder. The ladder below is the shape of it. What you will not find is a date. The Isle promised one, entered early access in 2015, and is early access still; we gate on exit criteria and ship when the criteria are met, which is slower to say and faster to mean.

Join the waitlistlink-m2

 

Email is the only field we will ever ask for, and we will not store even that until the privacy policy is published and live — a hard prerequisite in the plan, not a nicety, and the policy is not written yet. So this form asks the service first, before it asks you: nothing answers, and it stays shut. That is the whole mechanism, and it is a rule the Worker enforces rather than a tick-box this page pretends to honour. When it opens: double opt-in, so the address is not stored until you click the link; erasure honoured on request; and zero third-party trackers, which the house rules already mandate everywhere else on this site.
The wave laddergated on exit criteria
Release-M1
Website waitlist. Email capture on our own infrastructure. No keys yet. Gated on a published privacy policy and a reviewed consent flow.
Release-M2
Closed NDA wave. Up to 2,500 Release-Override keys — revocable, never sold. Gated on load testing and save atomicity proving out first.
Release-M3
Open waves. Steam Playtest, up to 50,000, granted in batches on request. Reviews and wishlists stay isolated from the main title, so testing a rough build cannot poison the launch.
Release-M4
Early access. A playable game worth the price, in active development. No promised dates. No promised features.
Release-M5
1.0. One-way, and only when the endgame ships — an MMO that actually ends. That is the whole bet.
Why link

The deep map, unlocked.

A linked account reads telemetry the game server pushes and signs on its own heartbeat. The website never receives credentials and can never reach into the game — the arrow only points one way. Yours, and only yours: there is no route on this site that returns anyone else's creature, because we did not build one.

Watch region

Your lineage's home range on the atlas — the coarse cell your creature works, with the live era, season and weather sitting over it. Bucketed and deliberately fuzzed, because a map precise enough to find a friend is precise enough to hunt a stranger. Vulnona shows everyone, approximately. We show you, deeply, and no one else at all.

Life stats

Species and growth stage, your age measured against what your species is actually given, and health, hunger and thirst as bands rather than numbers — the site gets to know you are hurt, not exactly how hurt, because exact numbers are a targeting solution. The biography of the life you are in the middle of living.

Saga & deed ledger

Every life you have finished — species, age reached, and what killed you — under lives lived, longest life, kills, deaths and karma rank, beside the deeds the server earned and signed. The is the only thing that survives the slate wiping. Everything else is on loan.

The game server is the only writer. Telemetry is accepted only when it is Ed25519-signed by an install key already bound to that soul, and browsers have no path to that route at all — you could not forge a stat from this page if you tried, and neither could we. Read the roster on the Cambrian roster, the timeline instrumented on the Era Codex, or watch a world work on Watch Live.