PRIVACY POLICY

1. Introduction

This Privacy Policy explains how Driftkeep ("we", "us", or "our") collects, uses, and protects your personal information when you play our game. We are committed to protecting your privacy and being transparent about our data practices.

2. Information We Collect

Account Information

• Email address (required for account creation and recovery)
• Username (displayed to other players)
• Password (stored securely using industry-standard hashing)

Game Data

• Character information (class, level, appearance, inventory, equipment)
• Gameplay progress (XP, gold, community contributions)
• Play session data (login times, session duration, zones visited)
• Chat messages and communications within the game

Technical Information

• IP address
• Device type and operating system
• Browser type (for web players)
• Game client version

Payment Information

If you make purchases, payment processing is handled by third-party providers (such as Stripe or platform stores). We do not store your full credit card number or payment details directly.

3. How We Use Your Information

We use your information to:

• Provide and operate the game, including saving your progress
• Calculate offline gains and community goal contributions
• Authenticate your identity and secure your account
• Send important account notifications (password resets, security alerts)
• Moderate chat and enforce our Terms of Service
• Analyse gameplay patterns to improve game balance and features
• Respond to support requests and feedback
• Detect and prevent cheating, fraud, and abuse

4. Data Storage & Security

Your data is stored on secure servers using industry-standard encryption. We implement:

• HTTPS encryption for all data transmission
• Secure password hashing (bcrypt)
• JWT-based authentication with token expiration
• Regular security audits and updates
• Access controls limiting who can view your data

While we take security seriously, no system is completely secure. We encourage you to use a strong, unique password for your Driftkeep account.

5. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers - Hosting, email delivery (Resend), and analytics services that help us operate the game
• Payment processors - To process purchases you make
• Legal authorities - When required by law or to protect our rights
• Other players - Your username, character appearance, and level are visible to others in-game. Chat messages are visible to players on the same server.

6. Your Rights

Depending on your location, you may have the right to:

• Access - Request a copy of your personal data
• Correction - Update inaccurate information
• Deletion - Request deletion of your account and associated data
• Portability - Receive your data in a portable format
• Objection - Object to certain processing of your data

To exercise these rights, please contact us through our Discord community.

7. Data Retention

We retain your account and game data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where we are required to retain it for legal purposes. Anonymised gameplay statistics may be retained indefinitely for analytics and game improvement.

8. Cookies & Local Storage

The web version of Driftkeep uses local storage to save your session token and game preferences. We do not use tracking cookies for advertising. Essential cookies are used only for authentication and gameplay functionality.

9. Children's Privacy

Driftkeep is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. International Data Transfers

Your data may be processed on servers located outside your country of residence. By using Driftkeep, you consent to the transfer of your information to these locations, where data protection laws may differ from your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the Game or via email. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, please contact us through our Discord community.