ALZAROTH.FUN · PRIVACY
Privacy Policy
This policy explains what Alzaroth.fun collects when you create or use an Alzaroth account, play Unlimited Dungeons, or use the related website services.
At a glance
Guests can play without creating an account. Accounts are optional, but allow account-linked saves and future account features. We use the data described below to operate the site, protect accounts, diagnose abuse and improve the game. We do not sell personal data.
1. Who this applies to
This policy applies to Alzaroth.fun and its account services. It currently covers Unlimited Dungeons, including its Beta and Development environments. Each environment keeps game saves separate.
Alzaroth accounts are not available to users under 13. Guests may play without creating an account. If we learn that an underage user created an account, we may delete that account and its associated personal data.
2. Information we collect
Account information
- Username, e-mail address, password hash, account status and account creation stage.
- Confirmation that you meet the age requirement and accepted the account rules and this policy, with the applicable policy versions and timestamps.
- If you use Google sign-in: the Google account identifier necessary to link your Alzaroth account. We do not receive your Google password.
Security and technical information
- For security events such as sign-in attempts, we retain the IP address, country when available, user-agent, browser, operating system, device type, screen size and a technical fingerprint.
- Account sessions store hashed IP and user-agent values rather than their readable forms.
- We use essential session, CSRF and security cookies to keep you signed in and protect forms and account actions.
Game and usage information
- Account-linked game saves, game environment, character progress and related gameplay history.
- Basic session telemetry: session start and last-seen time, duration, connection hour, country when available, and a hashed IP value. This helps us understand when the game is used and diagnose service issues.
Optional communications
During registration you may opt in to occasional e-mails about major game updates, beta news and important Alzaroth.fun announcements. This is optional. You can withdraw consent from your profile at any time.
3. Why we use this information
- To create, verify, secure and recover accounts.
- To link saves to accounts and provide access to the correct game environment.
- To prevent abuse, rate-limit sensitive actions and investigate security incidents.
- To operate, maintain and improve the game and its account services.
- To send optional communications only where you opted in, and operational e-mails such as verification, password reset and account-deletion notices.
4. Human verification and third parties
Standard e-mail/password account creation uses Google reCAPTCHA to help protect against automated registrations. If you choose Google sign-in, Google handles the authentication flow. These services process information under their own terms and privacy policies.
We use e-mail delivery services to send verification, recovery and account-security messages. We may also use an IP-to-country lookup service; if country information cannot be resolved, no country is recorded.
5. Retention
- Security-event and telemetry records are scheduled for deletion after 90 days.
- When you request account deletion, you can recover the account for 30 days. Personal account data and linked game data are scheduled for deletion 120 days after the deletion request (the 30-day recovery period plus up to 90 additional days).
- We retain account information while an account remains active, unless a shorter period is necessary for a specific purpose.
6. Your choices
- Use the site as a guest without creating an account.
- View and update account details, including your e-mail address, from your profile.
- Withdraw optional marketing consent at any time.
- Request account deletion from your profile. The deletion flow requires a password confirmation, acknowledgement and the word DELETE, and sends an e-mail notice with a recovery link.
7. Security
We use password hashing, HTTPS, CSRF protection, Secure and HttpOnly account-session cookies, verification and recovery tokens, and rate limits on sensitive account actions. No internet service can guarantee absolute security, but we work to reduce the risk of unauthorized access.
8. Changes to this policy
We may update this policy as the site develops. The effective date and version at the top will change when we do. Where a new acceptance is required, we will request it before applying the new terms to account registration.
9. Contact
For privacy questions or account concerns, contact us through the Alzaroth Discord community or the contact method published on Alzaroth.fun.