Privacy Policy
1. What we keep
- Your account: email address, account name and tag, a hashed password (never readable), when you confirmed you are 18+, when you accepted these terms, whether your email is confirmed, and your alpha access.
- Devices: each device you are signed in on (website, launcher or game) with its browser or device name and when it was last used, so you can see and sign them out.
- Your character: its name, which other players see, and its look (character, skin tone, outfit colours), plus a record of name changes so impersonation can be looked into.
- Play: which game server you joined, when, for how long, and your character's name; the servers you marked as favourites. Your recently played list comes from this.
- A security log of account events (new accounts, logins, password changes, bans, deletions). It never contains your password; email and IP addresses appear in it only as scrambled codes that cannot be reversed.
- Network addresses: your IP address is used briefly to limit repeated attempts (kept in memory, not stored) and is seen by the game server while you play.
2. Why
To run your account and let you play, to keep accounts secure, to stop cheating and abuse, and to fix bugs. That's the whole list. We don't sell your data, show you ads, or track you across other sites.
3. Cookies
One cookie, to keep you logged in on this site. It is strictly necessary, holds no personal data, and is never used for tracking. No analytics, no third party scripts, no fonts or files loaded from other companies.
4. Who else handles it
- Hostinger (our server, where the database lives).
- Resend (sends account emails: your address and the email's content).
- Backblaze (encrypted nightly copies of the database; only we hold the key).
- Google Workspace (our support inbox, if you email us).
5. How long
Your account data is kept while your account exists. When you delete your account it is closed at once and erased 30 days later (logging in before then cancels it). After erasure, records of games you played stay as unnamed server history, and the security log keeps only your account's number. Encrypted backups are kept for 30 days, so erased data leaves them within 30 days of erasure.
6. Your rights
You can see your account details and devices on your account page, and delete your account there. To get a copy of your data, correct it, or ask anything about it, email support@sycorp.online.
7. Security
Passwords are hashed with Argon2id. Email links and login tokens are stored only as hashes, are single use where they should be, and expire. The site is HTTPS only.
8. Age
The game is for adults (18+). We don't knowingly hold accounts of anyone younger; if you believe we do, tell us and we will delete it.