PRIVACY
Privacy policy
Last updated 22 September 2026.
The short version: we hold your account name, your email address, some IP addresses and whatever your characters do in the game. We do not sell any of it, we run no advertising and no analytics, and there is no tracking on this site.
What we hold, and why
| Data | Why | Kept |
|---|---|---|
| Account name and password | To let you in. The password is hashed by the database and is not readable by us. | Until you delete the account |
| Email address | Confirming the account, and resetting a lost password. Nothing else — we send no newsletters. | Until you delete the account |
| IP addresses | Registration, login, downloads, purchases and daily claims — to rate-limit abuse and to attribute a download. | 90 days |
| Login and play times | Running the game, and deciding whether the daily eCoin claim is available. | Until you delete the account |
| Characters, items, guilds, chat | It is the game. Some of it is logged so cheating and lost items can be investigated. | Until you delete the account |
| Purchases and eCoin movements | So a balance can always be explained, and disputes settled. | Until you delete the account |
| A session cookie | To keep you signed in. Strictly necessary; there are no others and no consent banner because there is nothing to consent to. | Until you sign out |
The lawful bases are performing our agreement with you — running the account you asked for — and our legitimate interest in keeping the server working and free of cheating, which is what the IP addresses and the logs are for.
Who else sees it
Three companies, each doing one job:
- Hetzner (Germany) hosts the server. The data sits on their hardware.
- Cloudflare sits in front of the website and runs the “are you human” check on the registration form. It sees your IP address and browser.
- Resend sends the confirmation and password-reset emails. It sees your email address.
Nobody else. We do not sell, rent or share your data, and there is no advertising network, analytics script or tracking pixel anywhere on this site.
What you can ask for
Under the GDPR you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to what we do with it, or to have it handed over in a portable form. Write to [email protected] and we will answer within a month.
Deleting your account deletes the account, its characters, its items, its purchase history and its eCoin. It cannot be undone and we cannot get it back for you afterwards.
If you think we have handled your data badly, you can complain to a data protection authority — in Romania that is the ANSPDCP.
Children
This is not aimed at children under 16. If you are under 16 and have made an account, ask a parent to write to us and we will remove it.
Changes
If this changes materially it will be announced in the news before it takes effect.