Privacy
Short, because we keep very little.
What we store
- Your account name and a salted, slow hash of your password (PBKDF2-SHA256, 600,000 rounds). Nobody can read your password back, including us.
- When the account was created and when it last logged into the game.
- Your characters and what they carry, inside the game.
No email address, no real name, no payment details.
Cookies
- Session: keeps you signed in, for up to two weeks or until you log out.
- Form protection: a random value that stops other sites from sending forms in your name.
Both are strictly necessary, are only sent to this site, and cannot be read by scripts.
Logs
The web server logs each request (address, time, page) to keep the site running and to stop abuse; these logs are rotated and deleted after a few weeks. The game servers log logins by account name and address. Passwords are never logged.
Nothing else
No analytics, no trackers, no ads, no third-party fonts or scripts. Everything on this site is served from this server.
To have your account deleted, ask the person who invited you.