Account Information: When you register, we collect your email address and a hashed version of your password. We do not store your password in plain text.
Character Data: Name, race, class, stats, inventory, activity logs, messages, and other in-game data you create while playing.
Technical Data: IP address at the time of login, browser/device information (user agent), and timestamps of login activity. This information is used for security purposes and to detect abuse.
Payment Information: If you make a purchase, payment details are processed by our payment provider (Stripe / PayPal). We do not store full card numbers or sensitive payment data.
We use collected information to operate and improve the Platform, authenticate your identity, prevent fraud and abuse, process transactions, send service-related communications (email verification, password reset), and comply with legal obligations.
We do not sell your personal data to third parties. We do not use your data for advertising profiling.
We share your data only with: service providers who help operate the Platform (database hosting, email delivery via SendGrid, payment processing via Stripe/PayPal) under strict data processing agreements; and law enforcement or regulatory authorities when required by law.
We use session cookies to maintain your authenticated session. We also use browser localStorage to store your active character ID client-side for performance. No third-party advertising cookies are used.
Account and character data is retained for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate fraud prevention purposes.
Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your account and associated data; object to or restrict certain processing; and data portability.
To exercise these rights, contact us through the Platform or via the email on our contact page.
We use industry-standard security measures including password hashing (bcrypt), HTTPS encryption, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security of your data.
The Platform is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have done so, we will delete that information promptly.
We may update this Privacy Policy from time to time. We will notify you of significant changes via the Platform or by email. Continued use after changes constitutes acceptance of the updated policy.
For privacy-related questions or requests, contact us through the Platform.