Privacy, in plain language
What we keep
- Your callsign: it is your public name in the world.
- A scrambled password verifier. The password itself is never stored and never leaves the sign-in machinery; what we keep cannot be turned back into it.
- Session records for staying signed in, and device approvals for installed clients you have approved.
- Sign-in security metadata: timestamps and rate-limit counters, including the connecting address while a limit applies. This exists to slow down password guessing, not to profile you.
- Your characters and gameplay state (position, inventory, professions, the works). That is the game.
- Backups of the above, bound to release generations, so a crash does not eat the world.
What we do not have
No email. No phone number. No real name. No payment anything. No advertising trackers, no analytics scripts, no third-party embeds. This site loads from its own origin and phones nobody.
Cookies
One cookie, __Host-successor_session, HttpOnly and same-site. It exists to
keep you signed in and is set when you use account features; the marketing pages set
nothing. There is no cross-site anything to opt out of.
Where it lives
On the game server and in its backups, under Lycaon LLC’s control. Gameplay state and account records ride the same durability machinery; that is what keeps your character alive through a crash.
Deletion
Deleting your account (from the account page, password required) signs you out everywhere, revokes devices, and queues removal. A minimal ownership record remains so world history stays coherent. In this cut, backups are pruned on a schedule rather than edited, so deleted data ages out of them as old backups expire.
Invite alpha honesty
The world can reset and the rules above can change; the version date at the top moves when they do. Registration records the version you accepted.
Contact
Same as the terms: no public address yet. Invite alpha: reach the operator the way you already do.