What we store
Your account name, your e-mail address, and a hash of your password — never the password itself. Alongside it we keep the link between your website account and your game account, and a record of what your account did here: sign-ins, purchases, currency movements and support actions.
Why we keep it
The e-mail address is the only way to confirm a new account and the only way back in if you forget your password. The activity record is what lets us investigate a stolen account or a disputed purchase. We do not use any of it for advertising and we do not sell it.
Security signals
We keep limited technical information — the IP address a request came from and basic browser details — to rate-limit abuse, spot account theft and investigate incidents. It is kept only as long as it is useful for that.
What is never written down
Passwords in plain text, session tokens, password-reset links and confirmation codes are never written to any log. Session records are stored only as cryptographic hashes, so a copy of the database does not let anyone use your session.
Payments
Payments are handled by the payment provider. We receive confirmation that a payment succeeded and its reference, so we can credit your account. We never see or store your card details.
Your rights
Write to support@jdmortal.net from the address on the account and you can ask for a copy of what we hold, a correction, or deletion of the account and its data. We answer within thirty days. Deleting an account also removes its characters — that cannot be undone.
Changes
If this policy changes in a way that affects you, it will be announced on the news page before it takes effect.