Privacy Policy

The short version

• You can play without an account. Guests are tracked only by a random ID stored in their own browser.
• If you make an account, we store what the game needs: your username, your progress and your purchases of in-game items.
• We don't sell your data, we don't show ads, and we don't use third-party analytics or trackers.
• You can delete your account at any time in Account settings.

If you play as a guest

Your browser keeps a random guest ID and your settings (keybinds, sound, theme) in local storage. The server records, against that ID: the name you play as, when you first and last played, how many visits and games you've had, your knockouts, your best and total score, and time played. If you later log in on the same browser, we note which account that guest became.

This is only used to understand how many people play and to show stats to the game's admins. It isn't linked to your IP address.

If you make an account

We store:

• Login details: your username and a securely hashed password (we never store the password itself), a hashed recovery code, and, if you log in with Discord, your Discord user ID, display name and avatar. We only ask Discord for the identify permission, so we never see your email, servers or messages.
• Game progress: rank and rank points, placement games, gemdust balance and every change to it, items you own, bought, gifted or refunded, what you're wearing, daily quests, achievements, raid results and per-game stats.
• Social: your friends, friend requests, blocks, and direct messages with friends (the most recent 200 per conversation).
• Sessions and security: a session for each device you're logged in on (with its IP address and browser type, deleted when the session expires after 60 days), and a log of account events such as sign-up, purchases, password changes and moderator actions. IP addresses in that log are removed after 90 days.

Cookies and local storage

• A session cookie keeps you logged in. It's required for accounts to work and isn't used for tracking.
• A short-lived cookie is used during Discord login to protect it from forgery.
• Local storage holds your settings, the guest ID and a per-tab ID that lets you rejoin your raid after a disconnect.

There are no advertising or analytics cookies.

What's visible to other players

Your username, rank badge, equipped cosmetics and in-raid score are shown to everyone in the game, on the leaderboard and on your profile. Friends can see whether you're online, in the menu or in a raid. Chat messages in a raid are visible to the players in it.

Who else handles data

• Our hosting provider runs the server. Server logs, which include the IP addresses of connecting players, are used only for troubleshooting and abuse prevention.
• Discord, if you use Discord login or our Discord bot. Encrypted database backups are stored in a private Discord channel only the admins can access.
• Google Fonts serves one of the game's fonts, so your browser contacts Google when the page loads.

We don't share or sell data to anyone else. We may disclose information if required by law.

How long we keep it

Account data is kept while your account exists. When you delete your account it's removed right away from the game and permanently erased after 30 days (the grace period lets moderators help if the deletion was a mistake). Encrypted backups roll over and are gone within about 6 months. Guest records are kept to measure player numbers over time.

Your choices

• Delete your account, change your username, or link and unlink Discord in Account settings.
• Clear your browser's site data to remove your guest ID and settings.
• Ask us for a copy of your data or for anything else about your privacy in our Discord server.

Children

Accounts are for players aged 13 and older. If you believe a child under 13 has made an account, contact us and we'll delete it.

Changes

If this policy changes we'll update the date at the top, and for important changes we'll post in the game's update notes.