Privacy policy

1. What data we use

• Account: account name, email, language and the password, which is stored only as an irreversible hash (argon2id), never in clear text.
• Characters and gameplay: name, sex, vocation, level, skills, location, items, deaths and login dates.
• Security: when you log in or act, a keyed fingerprint of your IP address (not the IP in clear text) is stored to limit abuse and audit actions. Technical server logs may contain IP addresses for a limited time.
• Communications: we send the emails the service needs, such as the confirmation of your address.

We do not use advertising and we do not sell your data, and for now the site includes no third-party analytics tools: product analytics are our own and pseudonymous (section 3).

2. What we use it for

To create and protect your account, run the game, show the community (highscores, characters, who is online, deaths), moderate abuse and meet legal obligations.

3. Pseudonymous product analytics

To know whether the game works well (how many people come back, how fast it loads, whether there are errors) we use our own events, stored in our database. We do not use Google Analytics or any other third party, we set no tracking cookies and we do not store your IP address in these events. It is pseudonymous, not anonymous: an encrypted identifier links the events of one account to each other (which is why we can delete them if you turn it off), although it contains neither your name nor your email.

• What is stored: when a play session starts and ends (the time rounded to the hour) and how many seconds it lasts; the level you reach; that you died (and at which level); that you completed a daily task; that you bought premium (only an amount range, never the amount or the card); that you registered and confirmed your email; how many players are online; and, from your browser, whether it is touch or mouse, the client version, the median FPS, the time until you could start playing and how many script errors happened.
• How it is identified: with a keyed hash of your account and of the session (nobody without our secret key can recompute it). That hash is a pseudonym: someone with access to the database and to the key could relate it to your account. We do not store your name, email, IP address, your character's name or identifier, or free text (chat, error messages).
• What for: measuring retention (D1, D7, D30), active players, concurrent players, session length, share of mobile sessions, crash-free sessions, performance and conversion. They are summarized per day in a dashboard that only administrators see; the summaries contain no accounts.
• How long: events are deleted after 13 months at the least and are cleaned up periodically.
• How to turn it off: in your account, under "Privacy", you can untick analytics: we stop recording your activity and delete the events already stored for your account. In the client, under Settings → Privacy, you can stop sending the performance metrics of that browser. If your browser sends "Do Not Track" (DNT) or "Global Privacy Control", we do not count your visit to the site or send client metrics either.

3 bis. Problem reports (beta)

If you send a report from the game (Menu, Report a problem) we store what you write, the category, your character name and your account, a hash of your network (not your IP) and technical context that your client attaches: client and protocol versions, device type and screen size, language, your position on the map and the last errors of the browser console. Also the last public chat lines you saw, with the name of who wrote them: before sending you see that list and can remove the lines you do not want to send; private messages and private channels are never captured. The screenshot of the game is optional and is only sent if you attach it.

• Who sees it: only the moderation team (gamemasters and administrators) in the panel; the chat is marked there as unverified.
• For how long: screenshots are deleted 30 days after the report; closed reports (fixed or dismissed) are deleted after 180 days; open ones are kept while they stay open.
• If you delete the character or the account: the reports lose the character name, the captured chat, the position and the screenshots (deleted character) or are deleted entirely (deleted account).
• Beta survey: your answers are stored with your account and the team can see them; you can skip it.

Do not write passwords or personal data in the description, and check that the screenshot shows nothing you do not want to share.

4. What is public

Character name, level, vocation, city, guild and rank in it, last login, latest deaths and its place in the highscores. Your email, your account name, your items and your exact location are not shown. Game staff and suspended accounts do not appear in the public lists.

5. Who we share it with

With the providers that make the service work (hosting, database and email delivery), who only process the data on our behalf. We may disclose it to an authority when the law requires it. [List of providers and international transfers: to be defined.]

6. For how long

While your account exists. Security and audit records are kept as long as needed to protect the service, and analytics events for 13 months (section 3). [Specific retention periods: to be defined with legal advice.]

7. Your rights

You can ask for access to, correction of or deletion of your data, and object to certain uses. You will be able to delete your account from the site, which anonymizes your personal data. Until then, write to us. [Controller and privacy contact: to be defined.]

8. Minors

The service is not intended for minors without the permission of their parents or guardians. [Minimum age: to be defined with legal advice.]

9. Changes

If we change this policy, we will announce it on the site.