Privacy
Public realm information
The public realm feed displays character names, progression, guild names and aggregate connected-account counts. It does not publish game account identifiers, emails, passwords or player IP addresses.
Website accounts and private support
Website accounts store your chosen username, a salted password hash, a recovery-code hash and your website role. Support cases store the subject, messages, authors and timestamps so you and authorized staff can follow the conversation. Website accounts are currently separate from launcher/game accounts.
Session and recovery information
The account service uses a Secure, HttpOnly, SameSite=Strict session cookie. Sessions expire after 30 minutes of inactivity or 12 hours in total. Recovery uses the private one-use code shown after registration or a password update; no recovery email service is configured. Never put passwords or recovery codes in support cases.
Account and staff actions are recorded with an actor, action, target and time. Staff case reads are audited. Request throttling uses keyed hashes rather than retaining plain IP addresses in its counter records. Private operational backups are retained for recovery; records in support cases are not automatically deleted on closure.
The hosting provider may process ordinary request information in access logs. The website has no advertising or analytics integration. Contact the team through the official Discord for questions about access to or removal of your account/support information.