Privacy

What is stored

Your account name, your password (only as a salted hash), your e-mail address (encrypted, plus a keyed fingerprint to find duplicates), when you signed up, confirmed and last logged in, a ban if there is one, and what the realms report for your career (below). Nothing else: no tracking, no analytics, no advertising, nothing from other sites.

Why

To log you in to the Bannerfall realms. The e-mail address is only used for the confirmation link and for resetting your password; it is never shown to anyone, not even to the realms.

What the realms get

When you log in to a realm, it gets a random id of your account and your name, nothing else.

Your career

Realms that take part send this server how you are doing there: your name there, points, villages, rank, achievements, a few battle totals (attacks and defences won, units killed, villages conquered) and, once a world has ended, its result for you. It is shown on your career page, which only players logged in here can see. Deleting your account removes it too.

Cookies

A session cookie keeps you logged in (30 days), a second one remembers your language. Both are needed for the site to work.

Logs and addresses

Your IP address is kept in memory for a few minutes to slow down attacks on passwords; it is not written to any log.

Deleting your data

You can delete your account yourself on the account page; everything about it is removed at once. Sign-ups that are never confirmed are deleted after 7 days.