Privacy
What we keep, and why
We keep as little as we can to run the game and keep your account safe. We don't sell anything about you, show ads or use tracking.
What we store
- Your account: account name, email address, and your password as a one-way hash (we can't read it).
- Your characters: everything the game needs to remember them, from jobs and items to where you logged out.
- Security records: the internet address and time of sign-ins, sign-in failures, password and email changes, and the emails we sent you. These help us stop people breaking into accounts.
- Trusted browsers: if you choose "Trust this browser", a random token in a cookie, stored by us only as a hash.
Cookies
The site uses three cookies, all needed for it to work: one keeps you signed in, one protects forms from being submitted by other sites, and one remembers a browser you chose to trust. No analytics or advertising cookies.
We email you sign-in codes, account confirmations and notices about security changes. We send them through an email delivery service, which handles your address only to deliver the message. No newsletters unless you ask for them.
How long we keep it
Account data stays while your account exists. Security records are kept for up to a year. Codes expire after ten minutes and are deleted soon after.
Your choices
You can change your email and password at any time on your account page. To have your account and characters deleted, write to lotusreach@youmail.email from the address on the account.