Privacy policy
Draft under review. This text is not in effect yet.
1. Who is responsible
The data controller is [to be defined in review]. Contact for privacy requests: [to be defined in review].
2. What we collect
- Account: email, player name, language and password in hashed form. If you sign in with Google or Discord, the identifier that provider shares with us.
- Security: IP address, device data, sessions and sign-in attempts, used to protect accounts and to limit multiple accounts.
- Game: progress, inventory, currency movements and trades. Trades are logged for 90 days.
- Chat: the messages you send in Global, Guild and Local chat, with account, name, date and whether they were deleted. We keep them for moderation, and only the moderation team can see them.
- Purchases: the store’s payment processor handles card data; we do not store it.
3. Why we use it
To run the game, protect accounts, fight bots and fraud, keep the economy auditable and answer support requests.
4. Cookies
The game uses a session cookie for sign-in. This site does not use advertising cookies or trackers.
5. Sharing
We share data only with the providers needed to run the service, such as email delivery, sign-in providers and the payment processor, or when the law requires it.
6. Retention and your rights
Chat messages are kept for 30 days for moderation and then deleted. Reports and the messages kept as evidence for a sanction are kept for 1 year. Trades are kept for 90 days. Other retention periods: [to be defined in review]. You can ask to access, correct or delete your data through the contact above.