Privacy Policy

• Your website account: username, email address, a salted hash of your password (never the password itself), when you joined and last signed in, your role, and your forum posts.
• Your game account and characters: names, appearance, class, level, items, positions, quests, achievements and play time.
• Sign-in and security records: your IP address and the time, when you sign in or the server refuses something (a wrong password, a malformed message, a cheat attempt), so we can stop break-ins, cheating and abuse.
• Chat: in-game chat passes through the server and is not stored, except the last few minutes are attached to a /report someone files, for staff to review.
• Reports you send: /report and /bug text, with your character, where you were and the game build.
• Gameplay statistics: events like levels gained, quests taken or dropped, and where sessions end, used to balance and improve the game.
• Crash reports the launcher saves on your own computer, only if you send them to us.

If you choose Link Discord, we keep your Discord user ID and display name, and which roles our bot gave you. We use Discord sign-in only to read that ID and name (identify) and to add you to our server (guilds.join). We never see your Discord password, messages or friends.

While you play, the launcher can show your character, level, class and location on your Discord profile (Rich Presence). It only does this with Discord running on your computer, and you can turn it off in the launcher's Settings.

Our bot posts game events in our server: level milestones, dungeon records, and bug reports (character name, never account name). Unlink any time on your Account page; the game roles are removed.

Contributions are handled by Ko-fi, with PayPal processing the payment. Your card or PayPal details never reach us. Ko-fi tells us that a payment was made, and we keep: the amount, currency, date, the email and name you gave Ko-fi, your Ko-fi message (to find your support code) and which account it was for. See Ko-fi's privacy policy and PayPal's.

Your character's name, class, level, play time, gear and look on the rankings, and your forum posts and username. Your email, IP address and account details are never shown publicly.

The website runs on Cloudflare (hosting and database); payments go through Ko-fi and PayPal; the game server runs on a rented server; Discord handles the parts you link to it. Each processes data only to provide its service. We share data with others only if the law requires it.

Account data is kept while your account exists. Security records rotate out after a few months; gameplay statistics are kept in summary. Alpha wipes delete characters but keep accounts and achievements.

• Change your email and password, sign out everywhere, and unlink Discord on your Account page.
• Turn off Rich Presence in the launcher.
• Ask us to show you, correct, or delete your data and account: post on the Support board or message an administrator on Discord. Deletion removes your accounts and characters; some security records may be kept briefly to prevent abuse.

One cookie: your sign-in session (tfg_session). No tracking or advertising cookies.

The service is not for children under 13. If you believe one has made an account, tell us and we will remove it.

We will update this page when what we keep changes; the date above shows when.