Privacy Policy
This Privacy Policy explains what information Arkenrift (the "Game") collects, why, and how it's handled. We try to collect as little as possible.
1. What We Collect
- Username and password. Your password is never stored in plain text — it's hashed with scrypt (a one-way, salted hash) before it touches the database, so we cannot see or recover your actual password, only verify a login attempt against the hash.
- Recovery email (optional). You may add an email address for account recovery. It is not required to play, and it is masked (e.g.
jo**@example.com) everywhere it's displayed back to you. - Gameplay data. Character names, stats, inventory, chat messages, and other in-game actions, stored so your character persists between sessions.
- IP address, briefly. Your IP address is used in memory to rate-limit logins, registrations, and password-reset requests, to prevent abuse and brute-force attempts. It is not written into the account database — it exists only for the duration of the rate-limit window and, depending on how the operator runs the server, may appear in short-lived server logs used for abuse investigation.
We do not collect payment information — the Game has no purchases, and no third-party advertising or analytics trackers are embedded in the Game.
2. How We Use It
- To create and authenticate your account.
- To let you recover your account if you forget your password (only if you added a recovery email).
- To prevent abuse — spam registrations, brute-force login attempts, and similar automated attacks.
- To operate the Game itself — your characters, items, and progress have to be stored somewhere for the Game to work at all.
3. Where It's Stored
Account and character data is stored in a database on the server the operator runs. It is not synced to any third-party analytics or advertising platform.
4. Email Delivery
If you add a recovery email, verification and password-reset emails are sent through a third-party email-delivery provider configured by the operator, solely to deliver those messages. That provider sees the email address and message content needed to deliver the email, and nothing else about your account.
5. Data Sharing
We do not sell your data. We do not share it with third parties except the email-delivery provider described above (only if you added a recovery email), or where required by law.
6. Data Retention and Deletion
Your data is kept for as long as your account exists. There is currently no self-service "delete my account" button in the Game. To request deletion of your account and associated data, contact cluckotron@gmail.com. Some minimal record (such as that a username was once used) may be retained briefly afterward solely to prevent abuse of the deletion process itself.
7. Children's Privacy
The Game is not directed at children under 13, and we do not knowingly collect personal information from anyone under that age. See the Terms of Service for the account eligibility requirement.
8. Security
Passwords are hashed with scrypt and a per-account salt. Login and password-reset flows are rate-limited to slow brute-force attempts. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.
10. Contact
Questions about this Privacy Policy, or requests to access or delete your data, can be sent to cluckotron@gmail.com.