Privacy Statement
This statement explains which personal data Montaroza processes, why, how long we keep it and which rights you have. Montaroza is a hobby browser game; we only collect what is needed to run it.
1. What we store
Account data: username, e-mail address, gender (as chosen at registration), a salted password hash (we never store your password), registration date, last activity time and the last IP address you used.
Game data: your character, money, items, transactions, crime and combat history, family membership.
Communication: private messages, chat and whisper messages, forum posts, news reactions and support tickets.
Technical data: for security and fraud prevention we log requests of logged-in players (page, time, IP address, browser user agent and the address that referred you).
2. Why we use it
To provide the game and your account (agreement), to keep the game fair and secure, including detecting multiple accounts and cheating (legitimate interest), to send account e-mails such as verification and password reset, and, only if you accept, to measure how the website is used (consent).
3. How long we keep it
Request logs: 14 days. Last known IP address: removed after 90 days of inactivity. Account, game and message data: for as long as your account exists. When an account is deleted, the personal data linked to it is removed; only anonymous entries that other players' history depends on may remain.
4. Cookies
Essential: a session cookie that keeps you logged in, and, only if you tick "remember me", a login cookie valid for 30 days. These cannot be switched off while using the game.
Analytics (optional): Google Analytics, loaded only after you accept in the cookie banner, with IP anonymisation. You can change your choice by clearing the site data of your browser.
5. Who receives data
Our hosting provider and mail service process data on our behalf. If you accept analytics, Google receives anonymised usage data. Other players only see what you make public in the game (username, rank, profile text, avatar, chat and forum posts). We do not sell personal data.
6. Your rights
You may ask for access to, correction of, or deletion of your data, object to processing, and request a copy of your data. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Send your request to support@montaroza.com. We answer within one month.