Privacy Policy
We are a free fan project, not a business. We collect the least we can get away with while still being able to run the servers and keep cheats and banned players out. We do not sell your data to anyone, ever, and there is no advertising here.
The short version
- We keep your username, email, and a scrambled version of your password so you can log in and get back in if you forget it.
- We keep security logs — login attempts and IP addresses — so we can stop attacks. Once our launcher's anti-ban-evasion update ships, these will also include a hardware identifier for your device, so a banned player cannot just make a new account.
- We keep game and chat logs so we can look into reports of cheating and harassment.
- During the testing phase the game client also sends us play-testing telemetry — performance and diagnostic logs of your sessions — so we can find and fix the bugs and stutters testers actually hit.
- Only our administrators see any of it. We do not sell it or hand it to advertisers.
- Ask us and we will delete your account. Most of it is gone within 30 days.
What we collect, and why
| What | Why we need it |
|---|---|
| Username | It is your account name and how you log in. |
| Email address (required) | To verify the account is real, to let you reset a forgotten password, and to contact you about your account or a moderation decision. We do not send marketing email. |
| A hash of your password | So we can check your password without storing it. We store a one-way Argon2id hash — we never store or see your actual password, and it cannot be turned back into one. |
| Hardware identifier (HWID) | Planned — not collected yet. A code our launcher will work out from your computer's hardware once this feature ships, so that a banned player cannot simply make a new account and come straight back. It will be stored as a hash. It is not a file scan, it will not identify you by name, and we will not use it for anything except ban enforcement. |
| IP addresses | Your IP reaches our servers whenever you connect, as it does with any website. We record it against logins and game sessions to spot attacks, block abuse, and enforce bans. Other players never see it. |
| Browser / launcher identification (user agent) | The line your browser or our launcher sends saying what it is. It is the cheapest way to tell a real player apart from a script. |
| Security and login logs | Every login, logout, registration and failed attempt, including the username that was tried when it does not exist, plus whether the attempt was rate-limited. This is how password-guessing attacks against everyone's accounts become visible at all. |
| Game and moderation logs | Significant in-game actions — gold and item changes, kills, ship captures, and moderator actions — recorded against the account that did them, so a report of cheating or harassment can actually be investigated. |
| Chat | Kept for a short window so reports of harassment can be checked. |
| Play-testing telemetry (testing phase) | The game keeps diagnostic logs while you play — frame-rate hitches, your pirate's position trail, gameplay events (fights, deaths, teleports, taking a ship's helm), and any errors the game runs into — including the model names of your graphics card and processor, so performance problems can be told apart by machine class. When you log in — and briefly when you close the game — the game uploads these logs, recorded against your account, and we use them for exactly one thing: fixing the game. They never feed moderation or gameplay decisions. |
| Download records | When your account requests the game client, we log that it did. The file itself is the same file everyone gets — we do not put a hidden per-player mark in your download. |
| An anti-bot check at signup | The signup form uses a third-party anti-bot ("CAPTCHA") widget to keep automated account farms out. See Third parties below. |
What we do not collect: no payment details (there is nothing to buy), no real name, no address, no phone number, no location, no contacts, no advertising or tracking profile, and nothing from your computer beyond the play-testing telemetry described above (which includes your graphics card and processor model names, and nothing else about your machine) and the (planned, not yet collected) hardware identifier.
How long we keep it
| Data | Kept for |
|---|---|
| Your account (username, email, password hash, characters, progress) | As long as the account exists. |
| Login and security logs, including IP addresses and user agents | 90 days, then deleted. |
| Session records (device, IP, when you played) | 90 days after the session ends. |
| Hardware identifier (once it ships) | As long as the account exists. If the account is banned, it is also stored on the ban record — see below. |
| Chat logs | 30 days. If a message is attached to a moderation report, that copy is kept as long as the report. |
| Game and moderation logs | 12 months. |
| Play-testing telemetry (diagnostic logs uploaded by the game client) | 30 days, then deleted. |
| Download records | 90 days. |
| Ban records (including the hardware identifier they block) | A temporary ban: 12 months after it expires. A permanent ban: kept for as long as the ban stands, so that it can be enforced. |
| Backups | A rolling 30 days. Deleted data can survive in a backup for up to 30 days after it is deleted from the live servers. |
Who can see it
Only the project's administrators and moderators — a small volunteer team — and only to run the game, investigate reports, and enforce bans. We do not sell your data, we do not rent it, we do not share it for advertising, and we do not hand it to anyone else except where the law actually requires it.
Third parties
- The anti-bot check on the signup form is run by an outside provider (a privacy-focused CAPTCHA service such as Cloudflare Turnstile or hCaptcha). To do its job it sees your IP address and some basic details about your browser, under their privacy policy, not ours. It runs only on the signup form.
- Our hosting and content-delivery providers necessarily carry the traffic between you and us, which means they handle your IP address in transit.
We use no analytics, no ad networks, no social-media trackers and no third-party login.
Cookies
This website sets no cookies and does not track you across sites. When
you log in here, your browser holds a short-lived login token in
sessionStorage, which your browser throws away when you close the tab.
That is the only thing we store on your device from the website.
Younger players
You must be at least 15 years old to have an account. We do not knowingly collect anything from anyone younger. If we find out an account belongs to someone under 15, we delete the account and its data. If you are a parent or guardian and you think we have your child's information, contact us (see Contact below) and we will remove it.
Your choices
- See or correct your data. Ask us (see Contact below) and we will tell you what we hold on your account and fix anything wrong.
- Delete your account. Ask us (see Contact below); we will confirm you own the account first. We delete the account, its email, its password hash, its characters and its progress within 30 days.
- What survives a deletion. If the account was banned, we keep the ban record — including the hardware identifier and the reason — for as long as that ban stands. Otherwise a ban would be undone by deleting the account, which is exactly what a ban is meant to prevent. Security logs age out on their own 90-day schedule, and backups roll over within 30 days.
How we protect it
Passwords are stored as Argon2id hashes, which are designed to be slow and expensive to attack, and we rehash them as we raise the settings. The site and the game servers talk over encrypted connections. Login tokens are short-lived and can be revoked, so logging out or being banned actually ends access. Nothing is perfect — if we ever find a breach that affects accounts, we will say so publicly and email affected players.
Changes to this policy
We will update this page when what we collect or how long we keep it changes, and we will change the date at the top. If a change is significant, we will say so on the site.
Contact
Data questions, access requests, deletion requests and everything else will go through our Discord server, which is coming soon and will be linked from the homepage when it opens.