Privacy Policy

Last updated 9 October 2026

Parallel Kingdom Reborn (“the game”) is a free-to-play, fan-built, location-based game run as a small independent project (“we”, “us”). This page says what the game collects about you, what other players can see, who else receives any of it, and how to have it deleted.

2. What we collect

Your account

• Your username, email address and password. The password is stored only as a one-way hash, never in a form anyone can read back.
• When the account was created and when you last signed in.
• The six-digit codes we email to confirm your address or reset your password, stored as a hash and useless after 15 minutes.
• Each version of our Terms of Service you accept, when you accepted it, and whether on the website or in the app.

Your character

• Its name, gender and face, which set how your character looks.
• Everything about it in the game: position on the map, items, buildings, skills, progress, friends, enemies and blocked players.
• A record of how its Food, its gold, its event currencies (like Pumpkin Seeds) and its cosmetic items are gained, spent, traded, sold or used: what moved, how much, when, what caused it, and who was on the other side of a trade.

Purchases

If you buy Food, we record:

• which pack, its price, the character it was for and the account that bought it;
• when you pressed Buy, and the IP address and browser that press came from;
• the two boxes you ticked (your age or a parent’s permission, and delivery straight away), and which wording of them you saw;
• from Paddle: whether the payment went through, the amount, currency and tax charged, any refund or chargeback, and Paddle’s own reference numbers for the payment;
• the letter that delivered the Food, and when it was taken.

Paddle collects your payment details, name, email address and country to take the payment, under its own privacy policy. It does not send them to the game, but we can see an order in Paddle’s records, including the email address you gave Paddle, when we look into a refund or a problem with a payment.

What you write

• Local, global, trade, city and kingdom chat messages, with your character’s name and the time. For local chat we do not record where you were standing.
• Letters and parcels you send, and the record of each parcel’s delivery.
• Names and notices you write for a kingdom, and your kingdom’s activity record.

The forum

The forum runs on our own server, using software called NodeBB. You do not sign up for it separately: when you open it, the game gives your browser a signed pass holding your character’s id and name, and the forum makes your forum account from that. Your forum name is your character’s name, and changes if the character is renamed. The forum never receives your email address, your account username or your password. It stores:

• What you post, and the pictures and files you upload with it.
• Your forum profile: a picture, a cover image, an “about me” and a signature, if you add them.
• Private chats you have with other players on the forum.
• Who you follow, which posts you vote on, bookmark or watch, and any reports you send to the moderators.
• The IP addresses you use the forum from, and the kind of browser and device each time you sign in, which it keeps to fight spam and to enforce bans.

When you upload a picture, the forum removes the hidden details that phones and cameras store inside photos, including the place where the photo was taken.

Feedback and bug reports

When you send feedback from the game, we store what you wrote together with your username, character name, position in the game, the game version, your browser and device type, your screen size and the last thing you tapped. The feedback page tells you this before you send.

How you play

The server sees every action you take in the game, because that is how the game works. We also use that activity to check for bots and other automated play. To tell a person from automation, the game also counts how you use its controls while you play: how many taps, clicks and key presses there were and their timing, roughly where on a button or character each tap lands, whether the game is open in front of you, and whether your browser reports being controlled by automation software. It never records what you type. If something looks wrong, a private alert is sent to us naming your character, and a person looks at it. Nothing happens to your account automatically.

Anti-cheat checks

To keep the game fair, we collect information that helps us detect cheating, such as faked locations, emulators, modified versions of the game and automated play:

• your IP address, and the approximate location it points to, looked up on our own server (IP geolocation by DB-IP);
• your device’s model, its system version, and the version of the app;
• in the phone app: your device’s precise location and how accurate it is, using the location permission you give the app, and a summary of readings from its motion sensors (the accelerometer and gyroscope);
• in the phone app: information from your device about whether it and its location are genuine, such as whether the location comes from a location-faking app;
• in the phone app: a key the app creates on your phone, which lets us recognise the same phone when it connects again, and what your phone’s security hardware certifies about itself and the app: whether it is a genuine, unmodified device running an unmodified copy of the app, and its brand and model.

The phone app collects these only while it is open, never in the background. We keep them for 30 days, then delete them; the key and what your phone certified are kept until 30 days after your phone last connects. A person looks at what they show before any action is taken on an account. We also keep a list of the phone models the app has seen and which sensors each model has, with nothing in it about you or your phone. You can stop the phone app collecting your location at any time by turning off its location permission in your phone’s settings, and keep playing.

Server logs

The server keeps a running log to diagnose problems and to balance the game. It records sign-ups and new characters, each time you join (with your character’s position, whether you joined from the website or the phone app, and which version of the app), the location reading described below, why it could not be read if it failed (for example, that location was blocked) with the kind of device you were on, a note when an anti-cheat check does not add up, the email address each of our emails is sent to, your IP address only if you make too many sign-in attempts in a short time or connect with a program other than the game’s website or app (then with the name that program gives itself, and the characters that have played from the same address), your IP address when a sign-in is refused because its session is out of date or its account has been removed, your IP address, chosen username, email address and the name your browser gives itself when a sign-up on the website does not pass the robot check, and the summary of how you use the controls described in “How you play”, and what happens in play: fights, deaths, and how each dungeon run went for your character (the damage it took, what healed it, what it used, and how the run ended).

What we do not collect

No analytics, no advertising identifiers, no tracking pixels, no contacts, no photos (other than pictures you choose to upload to the forum), and no card or payment details: those go to Paddle. The game’s database stores your IP address only in the anti-cheat checks above, for 30 days, and in the record of a purchase; it also keeps the address of a connection it refused for not coming from the game’s website or app, or for signing in to an account we removed, for 90 days after the last one, to recognise it if it is used to play, and the email and IP addresses of an account closed for breaking the rules until its ban is lifted. The forum’s keeps the IP addresses you use it from, as described above.

3. Your location

The game is played on a map of the real world. At the end of the tutorial it asks your device for its location. That precise reading becomes your character’s home, where you start and where the game builds your first patch of world. Like every location the game reads, it is checked for cheating as described in Anti-cheat checks, and the game may ask you to try again. We store your home for as long as your account exists, and it is written to the server log.

After that, you move around by tapping the map: your real location never moves your character. The phone app also reads your location while it is open, for the Anti-cheat checks, using the location permission you gave the app. It never reads it in the background, and you can turn the permission off in your phone’s settings at any time. The website does not read your location again after the tutorial. We never send your location to any other company, apart from the rounded position of a flag or tower described under Who else receives it. Map tiles come from our own server.

A location is needed to place your character, so if you decline at the end of the tutorial, you cannot finish it. Turning the app’s location permission off later does not stop you playing. If you do not want the game to know where you are, do not create a character.

4. What other players can see

This matters most in a location game, so please read it.

• Your character, and its name, on the map while you are online.
• What you build (flags, homes, towers and the rest), to anyone within a few kilometres, labelled with your character’s name. Your first buildings are likely to be near the real place where you finished the tutorial.
• Whether you are online, and when you were last seen, on your player card.
• What you say in chat, and in letters to the people you send them to.
• Global and trade chat are also posted, under your character’s name, to channels on our Discord server, which anyone can join.
• Your forum posts, the pictures in them, and your forum profile, under your character’s name, to anyone at all: the forum can be read without an account.
• On the forum: whether you are on it now and when you last were, who you follow and who follows you, and the posts you upvote. Downvotes are shown only to moderators.
• Private forum chats, to the people in them. We can read them too, and do when one is reported or when we look into abuse.
• Forum moderators, who may be players we choose, also see reports and deleted posts. They do not see IP addresses; only we do.

Your email address, your real location as a coordinate, your IP address, your anti-cheat checks and your account username are never shown to other players.

5. How we use it

• To run the game and its forum: your account, your character, the shared world and what you post.
• To send the emails you need: the code that confirms your address, the code that confirms a new one, the code that resets a forgotten password, and a reminder of the usernames on your address when you ask for one. The last two only go to an address you have already confirmed. We send no marketing email.
• To keep the game fair and safe: catching bots, cheating and abuse, and dealing with reports.
• To fix problems, using feedback and the server log.
• To answer you when you write to us.

If you are in the European Union or the United Kingdom: we use your account, character and gameplay data because we need them to provide the game you signed up for; logs, the anti-cheat checks (including the location and motion sensor data they use) and security measures because we have a legitimate interest in keeping the game running and fair; and your location for placing your home because you allow your device to share it. You can object to the anti-cheat checks by writing to us, or stop the app reading your location by turning off its permission in your phone’s settings.

6. Who else receives it

We never sell your data or share it for advertising. A few services receive some of it:

• Resend sends our emails. It receives your email address and what the message says: a code, or the usernames on your address.
• Discord receives global and trade chat lines under your character’s name, for the public channels. It also carries private messages to us: the email address and in-game name of each new player, the username and in-game name of an account deleted after deactivation (so we remember to delete its forum account too), feedback (your character name and what you wrote), and the bot alerts described above.
• Paddle (Paddle.com), our reseller and the merchant of record for purchases, receives only our number for your order from the game. Opening the Food shop loads Paddle’s checkout from Paddle’s servers, which see your IP address and use it to show prices in your currency, and everything you enter in the checkout goes to Paddle.
• OpenTopoData, a public height service, receives the position of a flag or tower, rounded to about 100 m, when its height cannot be found any other way. It receives no name or account.
• Cloudflare runs our domain and carries all traffic between you and the game and its forum, so it handles your IP address and your requests. It may set cookies of its own for security. When you create an account on the website, its Turnstile check looks at your browser, device and IP address to tell a person from an automated sign-up, and tells us only whether the check passed. The phone app does not use it.
• Your browser’s push service (run by Google, Apple, Mozilla or Microsoft, depending on the browser) delivers forum notifications to your device, but only if you turn them on there. The notifications are encrypted, so it cannot read them.

The forum is not on this list because it is not another company: it runs on our own server, like the game. A forum post can show a picture stored on another website; your browser then fetches that picture from that website, which sees your IP address, as with any page on the web.

We would also disclose data if the law required it, or to protect players or the game from harm.

7. Storage on your device

The game keeps these in your browser’s local storage: your sign-in token and your character (so you stay signed in), and your map and display preferences. A small background script also keeps a cache of map tiles so the map loads faster. Signing out clears the sign-in token from that device.

The game sets one cookie, and only when you open the forum: the signed pass described above, holding your character’s id and name, which the forum reads to sign you in. It lasts up to a week, and signing out of the game removes it. The forum sets a session cookie of its own for everyone who visits it, lasting up to 14 days, which is what keeps you signed in there, and it keeps a few preferences and unsent drafts in your browser. None of these cookies track you. Paddle’s checkout, when you open the Food shop, may store data of its own in your browser to run the payment.

8. How long we keep it

• Account and character data, including your home location: as long as the account exists.
• Chat: 30 days, in every channel including local, so we can look into reports. Older messages are deleted. Deleting your account does not remove the last 30 days of your messages; they stay under the name you used until they expire.
• Letters, parcels, trade records and feedback: kept, because other players and our bug fixing rely on them.
• The record of Food, gold, event currencies and cosmetic items: kept permanently, including after an account is deleted, because it is how we check what happened to Food, gold and items that changed hands, and how we look into cheating and disputes between players. Each movement of gold is kept on its own for 30 days; after that, it is kept as a daily total for each character, cause and trading partner.
• Purchase records: kept permanently, including after an account is deleted, because they are how we answer refunds, chargebacks and disputes, and the record of a sale that tax rules require.
• Forum posts and chats: until your account is deleted. A post or chat message you or a moderator deletes is hidden from other players but kept, and moderators can still see it, until we remove it for good.
• Your forum profile, uploads, and the IP addresses the forum records: as long as your forum account exists.
• Server logs: normally deleted after 14 days.
• IP address records and anti-cheat checks: 30 days, then deleted.
• An account we close for breaking the rules: a copy of its account and character data (not its anti-cheat checks) is kept for 90 days after it is closed, so the decision can be undone if it was wrong, then deleted.
• A deactivated account: kept as it is for 30 days, in case you sign in again. Then it is deleted, and a copy of its account and character data (not its anti-cheat checks) is kept for 90 days more so it can be restored on request, then deleted.
• Sign-in tokens last 30 days, and the forum pass up to 7.
• Backups: we keep copies of the database for recovery, and use copies on our own machine for testing. Deleted data can remain in a backup until newer backups replace it.

9. Your choices and rights

• Stop the phone app reading your location at any time by turning off its location permission in your phone’s settings. You can keep playing.
• Change your email address or password at any time in the game, under Options → Account.
• Delete your account yourself under Options → Account → Deactivate, with your password. It signs you out on every device. If you sign in again with your password within 30 days, the account stays and nothing is lost. If you do not, we delete it after 30 days, as described below.
• To get a copy of your data, correct it, or have us delete your account, email [email protected] from the address on your account, with your username.
• If we close an account for breaking the rules, we keep its email address and the IP addresses it played from on a ban list, until we lift the ban, so it cannot simply sign up again. We may also refuse sign-ups from a whole email service that is used to make throwaway accounts.
• When we delete an account, we delete the account, the character and the personal data tied to them. Letters you sent to other players, records of trades and parcels, and the record of Food, gold, event currencies and cosmetic items, can keep your character’s name, because they are part of other players’ history. Purchase records are kept, with your username and character name, for the reasons in section 8. If you used the forum, we delete your forum account too, with your posts, chats and uploads.
• When a deactivated account is deleted after its 30 days, its flags stay standing in the world, white, with no owner and no name of yours on them. Everything else it owned is removed. A copy of its account and character data (not its anti-cheat checks) is kept for 90 days, so we can restore it if you ask, then deleted.
• You can also ask us to delete only your forum account, the same way. The forum has no delete button of its own, and opening the forum again afterwards makes a new, empty forum account.
• You can download a copy of your forum profile, posts and uploads yourself, from Your Rights & Consent in your forum profile’s menu.
• Depending on where you live, you may also have the right to object to or limit how we use your data, and to complain to your local data protection authority.

10. Age

The game is for people 16 and older, and buying Food is for people 18 and older or with a parent’s permission. If we learn that we hold data about someone younger than 16, we will delete the account.

11. Security

Connections to the game are encrypted. Passwords and email codes are stored only as hashes, and sign-in attempts are rate limited. Changing your password signs out every other device; signing out on one device does not sign out the others. Signing out of the game on a device also signs that device out of the forum. No system is perfectly secure, so please use a password you do not use anywhere else.

12. Changes to this policy

If we change what we collect or how we use it, we will update this page and the date at the top, and for a significant change we will also say so in the game or on the site.

13. Contact

Privacy questions and requests: [email protected].