Privacy Policy

Last updated: 1 October 2026.

This policy explains what the operators of this website and game realm ("we") store about you and why. By using the service you accept it together with the Terms of Service.

What we collect

• Account name and a cryptographic password verifier. Your password itself is never stored and nobody on the team can read it.
• Email address, used to confirm your registration, to help you recover your account and to contact you about it.
• Technical data needed to run and protect a game server: your IP address, login and connection times, and sign-up attempts.
• Game data: characters, names, levels, items, playtime, guilds, and chat and mail inside the game, which the team can review when a rule break is reported.
• Donations: if you donate, PayPal tells us the amount, the transaction number and the PayPal email address. We never see or store card or bank details.

We do not ask for your real name, address, phone number or date of birth.

Why we use it

Only to operate the service: to log you in, run the game, deliver shop items and donation gifts, show public rankings and the armory (character names, levels and gear are public), prevent cheating, fake accounts and abuse, and answer your requests. This is necessary to provide the service you asked for and for our legitimate interest in keeping it safe.

We do not sell or rent your data, and we do not use it for advertising or newsletters.

Who else handles it

We use a small number of service providers that process data only to do their job for us:

• Cloudflare carries the website traffic and protects it from attacks, so it sees your IP address and the pages you request.
• Google (Gmail) delivers the account emails we send to you.
• PayPal handles donations under its own privacy policy.

Apart from these, we disclose data only if the law requires it.

Where it is stored and how it is protected

Data is kept on our own game server. The website uses an encrypted connection (HTTPS). Passwords are kept only as one-way verifiers. Access to the database is limited to the team. No online service is perfectly secure, so use a password that you do not use anywhere else.

Cookies

The website uses one essential cookie to keep you signed in, plus the security cookies Cloudflare sets to protect the site. There are no advertising or tracking cookies.

How long we keep it

We keep account data while your account exists. Unconfirmed sign-ups are deleted after 24 hours. Security logs and backups are kept for a limited time and then rotate out.

Your rights

You can ask us to show you the data we hold about you, to correct it, or to delete your account and personal data. Contact the team through the Discord server linked in the menu of this website. We may need to check that the account is yours first. Some records may be kept where needed to prevent abuse (for example a ban) or where the law requires it.

Children

The service is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has registered, tell us and the account will be removed.

Changes

We may update this policy; the date at the top shows the current version.