Privacy Policy

What we collect

You can read the public pages (streaming, games, music, books, news) without an account. If you create an account or play a game, we store:

• Account details — your username and email address. Your password is never stored in readable form; we keep only a one-way, salted hash of it.
• Linked sign-ins — if you use “Continue with Google” or “Continue with Discord”, we store that service’s account ID for you plus the email and display name it shares with us (and whether it says your email is verified).
• Game data — your characters and their progress: stats, level, experience, gold, items, and similar game state.
• Account activity log — a record of security events on your account (created, sign-in method added or removed, password set/changed/removed, a blocked link attempt) with the time, your IP address and your browser’s user-agent string.
• Cookies and browser storage — a sign-in cookie that keeps you logged in (up to 14 days, renewed while you use the site), short-lived security cookies that protect forms and the Google/Discord sign-in step, and a small value in your browser’s local storage so the game remembers where you last adventured.

Like most websites, our hosting provider’s web servers also keep standard request logs (such as IP address, time, page requested and user-agent) for operating and securing the service.

Why we use it

• To create your account, sign you in, and let you link or unlink sign-in methods.
• To save and load your game characters and progress.
• To keep accounts secure — for example to slow down repeated failed sign-ins, investigate abuse, and show you recent activity on your account.
• To send account emails: a link to confirm your address, password-reset links you ask for, and security notices when a sign-in method or your password changes. They come from no-reply@pharone.com through our hosting provider’s mail server. We don’t send marketing email.

Google and Discord sign-in

Signing in with Google or Discord is optional. We only ask those services for your basic profile and email address (Google: openid, profile, email; Discord: identify, email). We can’t see your password for those services, your contacts, messages, servers, files or anything else, and we never post on your behalf. Google and Discord handle the sign-in step under their own privacy policies. You can remove a linked sign-in at any time (see below), and you can also revoke our access from your Google or Discord account settings.

What we don’t do

• We don’t sell, rent or trade your personal data, and we don’t share it with anyone for their marketing.
• We don’t run advertising, ad-tracking or third-party analytics scripts on these pages.
• Your email is never shown publicly. Your username may be visible to other players.

Your data is stored on servers operated by our hosting provider, who processes it only to run the site. We may disclose information if required by law or to protect the site and its users from abuse.

How long we keep it

We keep your account, linked sign-ins and game data for as long as your account exists. When an account is deleted, its account details, linked sign-ins and game characters are deleted. Activity-log entries may be kept for a limited time afterwards for security, and we remove old entries periodically. Server request logs are kept by our host for a limited period under its own retention settings.

Your choices: unlink, update or delete

• Unlink a sign-in method or remove your password: sign in and open Linked logins. You can add or remove Google, Discord and your password there (you always need to keep at least one way to sign in).
• Delete your account completely, get a copy of your data, or correct something: email pharone1@gmail.com from the address on your account (or tell us your username). We’ll confirm and handle it as soon as we reasonably can.

Children

The site isn’t directed at children under 13, and children under 13 shouldn’t create an account. If you believe a child under 13 has created an account, email us and we’ll delete it.

Security

We use HTTPS, hashed passwords, sign-in attempt limits and secure cookies to protect accounts. No website can promise perfect security, so please use a unique password (or sign in with Google/Discord).

Changes to this policy

If we change how we handle your data, we’ll update this page and its effective date. For significant changes we’ll make it clear on the site.

Contact

Pharone The Gnome — pharone1@gmail.com

See also our Terms of Use.