Privacy at EmpyreanMU

• Account name, e-mail address, password (the password only as a one-way hash, never readable)Why: To let you log in to the game and the website, and to recover or secure your accountFrom: You, when you register or change your details
• Game data: characters, levels, items, warehouse, guild, rankings, in-game activityWhy: To run the gameFrom: The game server
• Website sign-ins: a coded fingerprint of your session (not the session itself) and a hashed version of your network addressWhy: To keep you signed in and to stop password-guessing and abuseFrom: Your browser, when you sign in
• Two-step sign-in (only if you turn it on): its secret, stored encryptedWhy: To check your sign-in codesFrom: You, when you set it up
• Sign-up record: date and a hashed version of your network addressWhy: To limit fake or automated sign-upsFrom: Your browser, when you register
• Account changes: what was changed (e.g. e-mail or password), when, and whether it worked; never the old or new valueWhy: Security and supportFrom: Your account page
• Support tickets: your account name, the topic, and the messages you and staff writeWhy: To answer youFrom: You, when you open a ticket
• Page counts: how many times each page section was viewed per day. No personal data: no cookies, no addresses, no device details, no visitor id. Bots and browsers that send Do Not Track or Global Privacy Control are not countedWhy: To see which pages are usedFrom: Your browser, when you open a page
• Event notifications (only if you turn them on): a delivery address your browser gives us and two technical keys, with no account or other detailWhy: To tell your device when an event startsFrom: Your browser, when you press Notify me on the Events page

We take no payments today, so we store no payment or card details.

If you press "Notify me" on the Events page and allow notifications, your browser gives us a delivery address and two technical keys so we can tell your device when an event starts. We store only these, without your account, IP address or any other detail. The message itself is fetched from our website, not sent through third parties. You can turn it off at any time on the Events page or in your browser settings, and we then delete the stored address.

• Cloudflare carries all website traffic and protects it from attacks; it processes your network address to do so.
• Discord: if you talk to us there, Discord's own privacy policy applies.
• Your browser's push service (only if you turn on event notifications) delivers the wake-up signal to your device; it never receives the message text.

We never sell your data, and we use no advertising or tracking cookies.

• Account and game data: while your account exists.
• Website sign-ins: until they expire.
• Support tickets and account-change records: 12 months.
• Event notification addresses: until you turn notifications off, or your browser reports them as no longer valid.
• Page counts: kept as totals; they contain nothing about you.

• Remove your data: ask a staff member on our Discord from the account's owner, or open a support ticket. Deleting the account removes your game characters and items; this cannot be undone.
• Get a copy or correct something: ask the same way.
• Turn off page counting: switch on Do Not Track or Global Privacy Control in your browser.
• Turn off event notifications: on the Events page, or in your browser settings.