Privacy policy

What we collect

• Account details: your username, email address and a hashed password (we never store your password itself), the race you choose, and your gender if you set it.
• Game data: everything you do in the game: land, buildings, troops, messages in chat and mail, your profile (motto, signature, picture and banner), reports you send, and your scores.
• Security data: IP addresses and a device cookie when you register and log in, and failed login attempts. We use them to keep the game fair (for example to detect one person running several accounts) and to protect it from abuse.
• How you found us: when you sign up we note how you first reached the site (the website that linked you, a tag on the link, or who invited you) and your answer to “How did you hear about Dukes & Dragons?” if you give one. We use it only to see which places bring new players.

Cookies

• Necessary cookies: a session cookie keeps you logged in, and a device cookie helps protect accounts. The game does not work without them.
• Sign-up cookies: before you have an account, a cookie remembers who invited you or how you reached the site, for up to 30 days, so it can be noted when you sign up. It is removed once you register.
• Cloudflare Turnstile (the “are you human” check on registration and login) may set its own cookies.
• Advertising: the game may show ads provided by Google AdSense. Google and its partners may use cookies and similar technologies to show and measure ads, including personalised ads where you consent. Where the law requires it (for example in the EU, UK and Switzerland) you will be asked for your choice, and you can change it later. You can learn more and manage your ad settings at policies.google.com/technologies/ads.

Purchases

Gem packs are sold by our reseller Paddle.com, the Merchant of Record. Paddle collects your payment details, billing address and email to process the order, handle tax and send your receipt, under Paddle's privacy policy. We never see or store your card details. We keep a record of each purchase (what you bought, when, the amount and Paddle's order number) to deliver your Gems, handle refunds and prevent fraud.

How we use your data

• To run the game, show your name and profile to other players, and deliver chat and mail.
• To send you the emails the game needs (confirming your address, resetting a password, notices you ask for).
• To moderate the game: staff can read reported messages and profile content, and act on abuse.
• To pay for the game through advertising.

Your profile, name, scores and public messages are visible to other logged-in players. Private chat and mail are only read by staff when a message is reported or the rules are being enforced.

Who else handles your data

Our web host stores the game's data. Email is sent through our hosting provider. Cloudflare provides the Turnstile check. Google provides advertising. We do not sell your personal data.

How long we keep it

Account and game data are kept while your account exists. Public chat is deleted after a few days and mail after a few weeks. Security logs are kept only as long as needed to protect the game. When a round ends the world resets, but your account, trophies and profile remain.

Your choices and rights

You can change your profile at any time. You can ask to see, correct or delete the data we hold about you, or to close your account, by contacting the Game Master through the in-game mail or the bug report form. Depending on where you live you may also have the right to complain to your local data protection authority.

Children

The game is not meant for children under 13 (or the minimum age in your country). If you believe a child has given us personal data, tell us and we will remove it.

Changes

If this policy changes we will update the date above and, for important changes, tell players in the game.