NO FALSE PROMISES · NO HIDDEN GAME ECONOMY
PRIVACY & SAFETY.
This describes the current beta site's implemented data flows. Website account enrollment and purchases are not automatically enabled merely because these pages are public.
Public browsing
You can read the public encyclopedia and lore without creating an account. Cloudflare, if used as the host, may process standard network details necessary for requests, abuse mitigation and performance. We do not currently embed a third-party advertising or analytics tracker in the new account and community pages.
If registration becomes available
The proposed passwordless account system stores an email address, your chosen public display name, account role, timestamps, and hashed random authentication tokens in the configured Cloudflare D1 database. Short-lived one-use login links expire after 15 minutes; session cookies are marked Secure, HttpOnly and SameSite=Strict and currently expire after seven days. These cookie and expiry rules are defined by the current server code.
Some request activity is rate-limited using hashed network identifiers. The current schema does not yet automate long-term retention or account deletion, so registration will remain closed until a retention and deletion procedure is confirmed.
Forum content and privacy
Forum contributions include the author's account identifier, public display name, time and message content. Public boards are readable without login; member and staff boards are subject to backend access checks. Do not post passwords, real-world addresses, financial details, medical information, or game account recovery secrets, even in private boards.
Payments and Jadeite
The website does not accept payment-card data. Future Jadeite transactions must use a vetted hosted checkout, verified payment notifications and an authoritative game-side balance. Until that integration is tested, checkout stays disabled.
External services
When account services are activated, Cloudflare Turnstile and a verified email delivery service may process information needed to protect sign-ins or send one-time links. Their terms and privacy statements apply separately. No third-party payment processor is currently enabled.
Player safety
Use only official URLs announced by the project. Never enter passwords, one-time email links, recovery codes or card details into chat, forum posts or messages from unknown users. Do not install alleged game updates sent through direct messages. Moderation and account-recovery processes must be established before public registration opens.
Contact, data access and deletion
The verified privacy support contact is not yet configured; public enrollment will stay closed until it is.
Signed-in website members can download their recent website records and request account closure from the Account Center. Closure requires a second one-use confirmation sent to the registered email, revokes every active web session, anonymizes the account identifier shown to other members and redacts stored forum posts. Website financial audit ledger entries may need to be retained under applicable requirements. This does not delete independent Unity character data or merchant records.
Automatic housekeeping removes expired login links, expired sessions, old rate-limit records and resolved forum reports. Pending moderation reports are preserved for review. A full privacy retention and administrator request-handling procedure must be established before registration opens. Never place sensitive personal information in public GitHub issues or forum posts.