PRIVACY.

YOUR COMMUNITY ACCOUNT.

We store your chosen public username, private email address, account role, account status and account creation information. Email-and-password accounts use a password hash rather than a readable password. Verification emails contain expiring, single-use links; the website stores a hash of each verification token.

Sign-in sessions use a secure cookie so you can stay signed in. Recovery codes can reset account access and are shown to you to save; the service stores their hashes rather than readable codes. Keep your password and recovery code private.

GOOGLE AND DISCORD.

Google sign-in requests basic identity information: an account identifier, email and basic profile access. We verify Google's signed response and email-verification information. Gmail and matching Google Workspace addresses can use Google's verified-email proof. Other email addresses must also open a verification link sent by this website before their first sign-in. We store Google's stable account identifier and the connected email address; we do not store a Google password or keep Google's access or refresh tokens. We do not request access to Gmail, Drive or your contacts.

A new Google account still requires you to choose a unique community username and save a recovery code. A matching email address never automatically merges an existing community account. To connect Google to an existing account, sign in to that community account first and choose Connect Google.

Optional Discord linking stores your Discord account identifier and username so you can use it to sign in and, if you opt in, receive mentions in community record or video alerts. It does not grant access to your private messages. Google and Discord also process sign-in information under their own privacy policies.

POSTS, REPORTS AND GAME RECORDS.

Forum posts and replies show your username and relevant community role publicly. Reports sent through Contact us are available to the community staff rather than published as forum posts.

The game server stores player progress, settings and records. Public leaderboards and run videos can show player names, maps, times and gameplay. Linking your player to a website account uses a one-use in-game challenge and a hashed game identifier; a matching player name is not treated as proof.

You can choose whether your linked player's competitive records or published videos produce community alerts, and whether those alerts mention your connected Discord account. Public posts or alerts may also be seen or copied by other people.

RUNNING AND PROTECTING THE SERVICE.

We use account and request information to provide sign-in, verify email, prevent abuse, moderate the community and maintain the service. The account service keeps security rate-limit buckets and staff action records. Hosting and network providers process connection information needed to deliver the website, game server and downloads.

The website is hosted through Sites; the game server, downloads and community account service run on Hostinger infrastructure. Verification emails are delivered through Resend. Donations are handled on Patreon; payment details entered there are processed by Patreon and its payment providers, rather than this website.

Operational backups may contain account and game data. Backups retain earlier versions of service data. Requests involving account data, records and backup copies are reviewed by the team.

YOUR CHOICES AND REQUESTS.

You can sign out, recover your account using its saved recovery code, change connected-account preferences, and disconnect Google or Discord after confirming a working password. Google-created accounts can set a password through the recovery flow before disconnecting their Google sign-in method.

Use Contact us to request a correction, account deletion or help with privacy. If you cannot sign in, contact the team through the community Discord. Staff may need to verify control of the account before acting. Tell us which account, post or game record your request concerns; do not send a password, recovery code or sign-in token.

Some public community contributions or service records may need separate review when an account is removed. We will explain what can be changed for your request.