Privacy

We keep only what your account needs to work and what protects players. We do not sell or share your data for advertising.

Your account (website)

Username and password. Your password is never stored as typed: we keep only a one-way fingerprint of it (PBKDF2 hash).
E-mail, to confirm sign-up with a code and to recover access if you forget your password.
Two-step verification, if you turn it on: we store the authenticator app key and the recovery codes.

The public address of the wallet you link to your account (the link is permanent). We never ask for or store your secret phrase or private key.
Everything that happens on the blockchain (purchases, NFTs, deposits and withdrawals) is public by nature and cannot be erased by anyone.

Sign-up uses the Cloudflare captcha (Turnstile), which checks the browser to tell people from bots.
To limit sign-up and login attempts we keep a scrambled version (hash) of your internet address (IP), deleted automatically within 2 days.
In the game, the server receives your IP and an identifier of your computer's network card (MAC), used only to protect accounts (access limit per computer, fighting bots and fraud) and kept for up to 90 days in the security logs.

Messages in the @ channel (Citizen), which every player already sees in the game, also show up in the website chat, read-only, with the character name. We show only the last 50, never the account, IP or any other data. Messages with links or outside contacts are not shown on the website. Whispers, party, guild and kingdom chats never appear.

Only the necessary ones: your session (so you stay logged in), two temporary ones for sign-up/login (pending request and code), your chosen language, the guild invite and the campaign one (remembers for 30 days which promotion link brought you). We do not use advertising cookies.
To learn which promotions work, we count visits per campaign link (wydsolana.io/v/…) and whether an account was created through it. We count numbers only: the IP becomes a scrambled version (hash), deleted automatically within 2 days. We do not use Google Analytics, social media pixels or third-party tracking.

Amazon (AWS) servers in São Paulo, Brazil (account, game and logs), Cloudflare (game download, captcha and e-mail delivery) and Vercel (this website).

You can ask to see, correct or delete your data by opening a ticket on our Discord. Security logs and blockchain transactions may be kept for the period above or cannot be erased, as explained.

Updated on October 9, 2026.