Draft (version 2026-10-draft), to be reviewed by counsel before launch.
Account name, email, birth year (for age limits) and a hashed password; device information and IP address of sign-ins (for security notices and anti-cheat); game data (characters, items, chat and trade logs); purchase records (payments are handled by the payment provider; we never store card numbers).
To run the game, keep accounts safe, prevent cheating, provide support and improve the game with aggregated statistics. We never sell personal data.
Only the cookie needed to keep you signed in (httpOnly, not readable by page scripts).
Kept while your account exists; personal data is deleted when the 14-day grace period after an account deletion ends (except records the law requires us to keep). You can download or delete your data under Account security.
Cloud hosting and database, email delivery, payments, error monitoring (e.g. Sentry) and the AI support assistant (Anthropic Claude), each processing only what its service needs.