Last updated: 28 October 2026
This text is translated from the Turkish original. If the two texts conflict, the Turkish original prevails.
This text explains what we collect, why we collect it and how long we keep it. It is kept short: a long one would go unread, and a notice nobody reads informs nobody.
What we collect
For your account: your email address, display name, language preference and a hash of your password. Your password itself is never stored anywhere; we keep a hash that cannot be reversed. We also keep the version of the terms of use you accepted and when you accepted it, and, if you make a purchase, when you declared you are over 18. We do not ask for your date of birth.
For the game: your holding, army, marches, bids, alliance; in short, everything you play. This is the game itself.
For abuse detection: with every command, a salted hash of your IP address and browser details, and a random device marker we generate in your browser. Your raw IP address is not stored.
Why
The last item needs explaining. In this game a second account is a direct advantage: draining a rival's balance at the auction is a legitimate strategy, and a second account is the free version of it. To detect multiple accounts we need to be able to ask "does this come from the same place?"; equality is enough for that, the address itself is not needed.
The device marker is deliberately kept weak: no methods that enable cross-site tracking, such as canvas or WebGL fingerprinting, are used. If you clear your browser data you look like a new device, and that is a choice, not a flaw.
How long we keep it
Your account data, until you delete it. Game records are kept for the length of the Age and for the length of one more Age after it ends; then the world is archived: the chronicle, titles and rankings remain, the detail is deleted.
Your support conversations (the request, your email address, and the page and browser details attached to it) are deleted one year after the request is closed, or immediately if you delete your account.
Abuse records remain in anonymous form even if you delete your account: the personal link (account ID, IP and device hashes) is deleted, and only the count remains. The reason is plain: the right to erasure should not be a way to wipe a cheating history.
Downloading your data
On your profile, Settings → Account: Download my data. Also on the world selection screen. Every record tied to your account comes in a single JSON file: your account details, sessions, seats, chronicle and titles, ornaments, Lumen purchases and movements, and the hashes we keep for abuse detection.
Not in the file: session tokens and your full notification address (both are credentials, so that if the file ends up somewhere else it cannot open your account or your browser), and the detail of every building and every report in a world (you read those in the game).
Deleting your account
On your profile, Settings → Account, or on the world selection screen: Delete my account. You will be asked for your password. If you want to download your data before deleting, use the path above.
What goes when you delete: your email, password, sessions, notification subscriptions and your personal abuse signals.
What remains when you delete: your holding, battles and auction results in the Age you are in, without your name. An Age is the shared record of hundreds of people, and deleting one player's rows entirely would make everyone else's history unreadable.
Where you came from
When you first arrive on the site, we record the name of the site that sent you (e.g. google.com) or the campaign tag in the link (e.g. `utm_source=chatgpt.com`) on your account when you sign up. The purpose is to see which promotion works. The full address, your IP address and your browsing on other sites are not recorded. Visits that don't lead to a sign-up are kept only as a daily total. This information is also included in your data download.
Third parties
We use no ad networks, analytics tools or tracking scripts. We rely on three services to run the game; each sees only the data it needs for its own job:
- DigitalOcean (server and database, Frankfurt, Germany): all game data is stored here.
- Postmark (ActiveCampaign, USA): the emails we send you (address verification, password reset, support replies, end of an age) go out through this service. Postmark sees your email address and the content of the message. This data is transferred to the USA; the transfer is made under the safeguards in the provider's data processing agreement.
- Cloudflare (domain and incoming email): resolving the otenos.com address and forwarding the emails you send us (support@, privacy@).
Contact
For questions and data requests: privacy@otenos.com