Privacy Policy

When you register: a username, an email address, a password (stored only as a bcrypt hash — we never see it), and the IP address you registered from. Optionally a nickname, avatar, banner, signature, description, preferred languages and the social or streaming links you choose to add.

When you use the site:your forum posts, private messages, chat messages, profile customisation, friend connections and reports you file. A "last seen" timestamp so other players can see who is around. Your IP address is recorded against rate limiting and, where an account is suspended, against the suspension.

When you enable two-factor authentication: either a TOTP secret or a flag that one-time codes go to your email, plus the short-lived codes themselves.

When you link Discord: your Discord user ID and username, so donor roles can be applied.

When you donate: the name, email address, message, amount and currency reported to us by Ko-fi, plus our own record of the acceptance you made on the donation page — see section 3, which is the part most worth reading.

When you play: your game characters and their progress, and the account the game server authenticated.

We do not use advertising cookies, analytics pixels, or third-party trackers. The cookies we set are the ones that keep you signed in and remember your language.

• To run your account and the game — because we cannot provide what you signed up for otherwise (performance of a contract).
• To keep the place safe and enforce the rules — IP addresses, moderation records, suspension records (legitimate interests).
• To account for donations and answer payment disputes — donation and consent records (legal obligation and legitimate interests).
• To send you service email — password resets, one-time codes, and replies to what you ask us (performance of a contract).

When you tick the acceptance box on the donation page, we record your account, the date and time, the payment method you chose, the version and fingerprint of the policy text you were shown, the IP address you accepted from, your browser's user-agent string, and your interface language. You are shown a short reference for the same record.

It exists for one reason: if a payment is later reversed or questioned, we need to be able to show what was agreed and what was delivered. Payment processors decide disputes on evidence of exactly this kind, and without it an unfounded reversal cannot be answered at all.

It is disclosed only to the payment processor handling a dispute over your own payment, and only then. It is never used for marketing, never sold, and never shared with anyone else.

Full detail of what is recorded and why is in section 9 of the Donation & Supporter Benefits Policy.

• Ko-fi — processes card, PayPal and wallet donations. They are the ones who take your payment details; we never receive or store a card number. Their own privacy policy governs what they hold.
• PayPal, Stripe and the card networks — where a payment you made is disputed, the evidence described in section 3 is provided to the processor deciding it.
• Discord — if you link a Discord account, so that donor roles can be applied.
• Cloudflare — sits in front of the site and sees request metadata including your IP address.
• Our email provider — delivers password resets and one-time codes.
• A machine-translation provider — if you turn on chat auto-translation, the messages being translated are sent to it. Turn it off and nothing is sent.

We do not sell personal data, and we have never received a government request for it. If we are ever legally compelled to disclose something we will tell the person affected unless we are forbidden from doing so.

• Your account and its content — until you delete it. A deleted account is hidden immediately and permanently removed after 7 days, so a deletion made in error can be undone.
• Donation and consent records — kept for as long as a payment can be disputed, and afterwards for as long as accounting requires. These survive account deletion, in anonymised form where the account is gone, because they are financial records.
• Suspension and moderation records — kept while the suspension is in force and for a reasonable period afterwards, so that evasion can be recognised.
• Rate-limiting counters — swept after a day.
• Server logs — kept briefly for debugging and abuse investigation, then rotated away.

Wherever you live, you can ask us to show you what we hold about you, correct it, delete it, or give you a copy in a portable form. If you are in the EU, the UK, or somewhere with comparable law, you also have the right to object to processing based on legitimate interests and to complain to your national data protection authority.

Most of it you can do yourself: your profile is editable in settings, and account deletion is a button there. For anything else, email [email protected] from your registered address and we will respond within 3 business days and act within 30.

One limit, stated plainly: we will not delete a donation or consent record while the payment it relates to can still be disputed. We would be destroying the evidence that answers a dispute over your own payment, and we are required to keep financial records regardless.

Accounts are not intended for children under 13, or under 16 where local law sets that threshold. If you believe a child has registered, tell us and we will remove the account.

Passwords are stored as bcrypt hashes. Two-factor authentication is available and recommended. Traffic is encrypted in transit, including the connection between the game server and the database. Access to production data is limited to the administrators who need it, and the game server reads a narrowed, read-only view of the account table rather than the table itself.

No system is perfect. If we discover a breach affecting your personal data we will tell you and the relevant authority promptly, and we will tell you what actually happened.

We may update this policy. Each version carries a version identifier, and material changes are announced before they take effect.

Email [email protected] with anything about your data, including requests to see, correct or delete it.