We store the minimum a game server needs, we do not sell any of it,
we do not run advertising, and there are no third-party trackers, analytics or
pixels on this site. This page describes what is actually in the database
rather than what a privacy page usually says.

What we hold

Your website account — username, email address, and a password stored as a
salted scrypt hash. We cannot read your password. The email is used for
account recovery and donation receipts, and for nothing else; there is no
mailing list to be added to.

Your game account — a separate login that the game client uses. See the
warning below, because it is stored differently and you should know how.

Your characters — everything you do in the world, because that is the save
file. Level, class, city, position, inventory, skills and progress all live in
the game server's own database.

Sessions — when you log in we store a random session id, the time it
expires, your IP address and your browser's user-agent string. Sessions last
30 days and expired ones are deleted automatically.

Support tickets — the subject and body you write, plus your email if you
opened the ticket while logged out. Staff replies are stored with them.

Donations — a reference, the amount, the provider, the status, the realm
and character you asked us to credit, and any message you attached. Card
numbers and payment details never reach this site — they are handled by the
payment provider, who tells us only that a reference was paid.

A staff audit log — when a staff member changes something that affects an
account, we record who did it, to what, and from which IP. This exists so that
staff action is reviewable, including by us.

About your game password

The game client is the original one and we cannot change how it behaves. When
you log in to the game it sends your password as an unsalted MD5 hash, and
the server has to store it in exactly that form to be able to check it. That
is weaker than any credential should be in the modern era, and we would fix it
if the client let us.

So, plainly: do not reuse a password you use anywhere else for your game
login. Your website password is a separate scrypt hash and is never sent to
the game.

What other people can see

Some of this is public by design, and it is worth knowing which parts.

• Rankings and character profiles are public. Anyone can see a character's
  name, level, class, city and realm without logging in.
• Worn equipment is public. Anyone standing next to you in the world can
  see what you are wearing, so publishing it reveals nothing new.
• Carried items are private unless you say otherwise. The contents of your
  pack are hidden by default. You can publish them from your
  account page, and turn it off again at any time.
• Donations are listed by name only if you allow it. Tick the anonymity
  box and your name is kept off any public thank-you.

Cookies

One cookie, named gw_session. It holds a random session id and nothing else
— no tracking identifier, no profile, no third party. It is http-only, so page
scripts cannot read it, and it is deleted when you log out. Refusing it means
you cannot stay logged in.

Leaving the site

The Discord link in the sidebar goes to Discord, who have their own privacy
policy and are not covered by this one. We do not embed anything from them
here; it is an ordinary link.

Keeping and deleting

We keep account data for as long as the account exists. Ask us to delete your
account and we will delete the account, its characters and its tickets.

Two things survive, and we would rather say so than surprise you: donation
records, because they are financial records tied to a payment we did not
process ourselves, and audit log entries about staff actions, because a
log that can be erased by the person it describes is not a log. Both are
reduced to a reference with no personal detail attached.

Asking

Open a ticket to see what we hold about you, correct it, or have
it deleted. It reaches the same volunteers as everything else.