Privacy Policy
Last updated August 2026. What we collect, why, and what we never do with it.
1. Who this covers
This policy covers the Sand & Steel website and account system — the backend service we built ourselves, described in our Terms of Service. It does not cover the game client itself, which is third-party software we don't control and aren't affiliated with.
2. What we collect
- Account information: the username, email, and password hash you provide when registering. We never store your password in plain text.
- Wallet address: if you sign in with a wallet, we store the public address you authenticate with. We never ask for, receive, or store a private key or seed phrase — signing happens entirely in your own wallet software.
- Game account link: if you connect a game account to your web account, we store that link so the site can show your characters and manage your account.
- Technical data: basic request data (like IP address) kept briefly for security purposes — rate-limiting abuse, investigating account compromise, that kind of thing.
3. What we use it for
Strictly to run the game service: authenticating you, showing your account and characters, enforcing bans and account actions, responding to support tickets, and keeping the service secure. We don't use your data for anything beyond operating Sand & Steel.
4. What we don't do
We do not sell your data. We do not share it with advertisers or data brokers. We do not distribute it to third parties, except where required by law or to comply with a valid legal request. There is no ad-tracking or analytics network sitting behind this site collecting a profile on you.
5. How long we keep it
We keep account data for as long as your account exists. If you ask us to delete your account, we'll remove what we can — some records (like moderation logs for banned accounts) may be kept longer where needed for security or to prevent abuse of the service.
6. Your choices
You can ask to see what data we hold about your account, correct inaccurate information, or request deletion, through the support page. Because this is a small, fan-run project, we handle these requests manually rather than through an automated system — expect a human on the other end.
7. Changes to this policy
If this policy changes in a way that matters, we'll update the date at the top of this page.