Privacy

• Your email address, when you create an account, or from the waitlist if you joined it before the beta opened. It is how we reach you about the game.
• Your password, stored only as a cryptographic hash by our authentication provider. We never see it.
• If you were invited to the closed beta: your invite code, so a code is used once and we know which account belongs to which invitation.
• Your progress: your traveller, level, gold, pack, farm and the rest of your save. As a guest, without an account, it stays in your browser and never reaches us.
• While the beta runs, a log of what you do in the game when you are logged in: each action (a fight, a sale, a craft), what it changed, and where that left you. What you write on your profile stays out of it.
• Anything you write in a bug report or a feedback form, along with which page you were on.
• When a page breaks in your browser, an automatic error report: which page, what the error said and where in the game's code it happened, which version of the game and which browser, and your account if you are logged in.
• Ordinary server logs, including an IP address and browser, kept briefly to keep the site up and to stop abuse.
• When you log in, create an account, ask for a reset link or send a report (yours or an automatic one): a one-way scrambled form of your IP address, and for a login or a reset link of the email address you typed, so that no one can try endlessly. While you play (saving, the Auction House, waving and sending gold, friends, raids, and showing you are online): a one-way scrambled form of your account, so that one account cannot flood the game. None of it can be turned back into the address or the account.

That log is our own and stays with us. We use no third-party analytics, no advertising and no tracking across other websites. There are no third-party trackers on this site.

• To let you log in and to give you your game back on your next visit.
• To email you about the game: a reset link when you ask for one, and the occasional message about the game itself.
• To fix what you report, and to weigh what you ask for.
• To see how the beta actually plays: how quickly people level, where the gold goes, where they get stuck. It is how we balance the game on evidence rather than on hunches.
• To keep the beta fair, for example to spot one person running several accounts.

We do not send marketing email about anything other than Monster Foundry, and every email we send has a way to stop receiving them.

We run on a small number of services, and each of them only gets what it needs to do its job:

• Our hosting provider, which serves the site and keeps short request logs.
• Our database and authentication provider, which stores the waitlist, accounts, saves and the play log.
• The mail server of our domain provider, which delivers the emails we send you.

Nobody else receives your data. We do not sell it, and we do not share it for advertising.

• Your account and save: until you ask us to delete them, or until we close the beta down.
• The play log: until the beta ends, when we delete it. Deleting your account deletes your part of it straight away.
• The waitlist: until the beta is over, or until you ask to be taken off it.
• Bug reports and feedback: until they are dealt with, and then in summary form for our own notes.
• Server logs: a matter of weeks.
• Error reports: until the beta ends.
• Those scrambled addresses and accounts: one day.
• Encrypted backups of the database: eight weeks, after which each one is deleted. An account you delete stays in them until then.

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. One email is enough, and we will not ask why. Deleting your account removes your save with it, which cannot be undone.

Write to registration@monsterfoundry-mmo.com. If you think we handled your data badly, you may also complain to your national data protection authority.

The beta is meant for players of 16 and older. We do not knowingly keep data about anyone younger; if you believe we do, please write to us and we will remove it.