Privacy Policy

Last updated: 4 July 2026

1. What we collect

When you register we store your account name, a cryptographic verifier derived from your password (the plain password itself is never stored), and an optional email address used only for password recovery. While you play, the server stores normal gameplay data — characters, items, progress, chat logs — and your IP address appears in standard connection logs and is used to rate-limit signups and logins against abuse.

2. Cookies

The website sets a single session cookie so you can stay logged in. There are no advertising cookies, no analytics, and no third-party trackers of any kind.

3. What we share

Nothing. Your data is never sold, rented, or shared with third parties. Other players can see your character names and in-game activity (such as the who’s-online list), as in any multiplayer game.

4. Retention & deletion

Data is kept for as long as the realm operates. If you want your account and characters deleted, ask a staff member and it will be done.

5. Security

Passwords are protected with the same SRP6 verifier scheme the game client uses, web session tokens are stored hashed, and the database is not directly reachable from the internet. No system is perfect — please use a password you don’t use anywhere else.

6. Changes

If this policy changes, the date at the top of this page will be updated.