Privacy Policy

What data we collect

For accounts: email, display name, password (stored encrypted, never in plain text). For voting: we do not store the raw IP address or raw device identifier (HWID) — we exclusively use one-way cryptographic derivatives (HMAC) of these, which cannot be reversed back to the original value.

Why we collect this data

Identifiers derived from IP/HWID are used exclusively for: enforcing the cooldown period between votes, detecting fraud/abuse, and linking in-game rewards to the correct vote. We do not perform additional fingerprinting and we do not sell data to third parties.

Data retention

Votes and their metadata are kept as long as necessary for ranking, statistics and fraud prevention. Accounts may request deletion/anonymization of personal data by contacting support.

Cookies

We use a strictly necessary HttpOnly cookie for the authentication session (refresh token). We do not use our own tracking/advertising cookies.

Third-party services

We use a CAPTCHA provider (e.g. Cloudflare Turnstile) for anti-bot protection on voting, which may process the IP address according to its own policy.