TaroMU

The short version

We collect the minimum needed to run a game account: an email, a password hash, and the IP you connect from. We do not sell anything to anyone, we do not run advertising trackers, and we never see your card details.

What we collect

Data	Where it comes from
Account name & nickname	You choose them at registration
Email address	You provide it; used for activation and password recovery
Password	Stored only as a bcrypt hash — we cannot read it, not even staff
IP address & country	Recorded automatically on login, for security
Game data	Characters, items, levels, guild — created by playing
Activity log	Logins, password changes, reward claims, purchases
Support messages	Tickets you write, and staff replies

We do not collect real names, addresses, phone numbers, dates of birth, or any payment card data.

Why we need it

Email — the only way to activate an account and recover it if you lose the password. We do not send marketing.
IP address — to detect ban evasion, multi-account abuse of reward systems, and attacks against the server. It is also what tells us a "hacked account" report is genuine.
Country — derived from the IP, used for statistics and to show flags on rankings.
Activity log — so that when you report something lost, we can actually look at what happened instead of guessing.

Payments

Purchases in the Store are processed by PayPal. Your card or bank details go to PayPal, never to us.

What we receive back and store is limited to: the transaction ID, the amount and currency, the payment status, and the email address that paid. We keep it to match a payment to your account, to redeliver a purchase that failed, and to meet accounting obligations.

PayPal processes your data under their own privacy policy.

What other players can see

Some information is public by design, because the game is competitive:

Character names, levels, class, resets and guild — on rankings and character pages.
Your account nickname and avatar, where you appear in vote rankings, tournaments or feeds.
Guild membership, emblem and guild statistics.
Rewards you claimed in tournaments, shown in the public journal on each event page.

Your email address and IP are never shown publicly. You can hide your character's equipment from other players in account settings.

Third parties

We share data with a very small number of services, only where it is necessary:

PayPal — payment processing.
Cloudflare — sits in front of the website to filter attacks; it sees the traffic that reaches us.
Vote listing sites — when you vote, the site tells us that an IP voted, so the reward can be credited. We send them nothing about you.
Discord — only if you choose to join our server; that relationship is between you and Discord.

We do not sell, rent or trade your data. There are no advertising or analytics trackers on this site.

Cookies

We use cookies only to make the site work, not to follow you around:

Session cookie — keeps you logged in. Without it, you would have to log in on every page.
Preferences — remembers small choices, like whether you asked for the desktop or mobile layout.
Cloudflare — may set a security cookie to distinguish real visitors from bots.

Clearing cookies logs you out but does not affect your account or characters.

How long we keep it

Account and game data — while the account exists, and while the server runs.
Activity and login logs — kept for a limited period, long enough to investigate abuse and account theft.
Payment records — kept longer, because accounting requires it.
Support tickets — kept so there is a history if the same issue returns.

Your rights

You can ask us to:

Show you what we hold about your account.
Correct anything wrong — most of it you can change yourself in My Account.
Delete your account and the personal data attached to it.

Deletion is permanent. Characters, items and purchases are gone and cannot be brought back. Payment records are kept where the law requires it, and a ban record may be retained so a banned player cannot simply delete and re-register.

To make any of these requests, open a ticket from the account in question — that is how we confirm it is really you asking.

Contact

Questions about this policy, or about the data we hold: support for anything account-related, or the contact form for formal requests.

See also: Terms of Service · Game Rules

36

36

Privacy Policy