Privacy Policy

1. Who we are

This policy covers Gluttony, the browser game, and the team that runs it. We process your personal information in line with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules. Reach us at [email protected].

2. What we collect

• Your account: your email address, your username and your password. We never store the password itself - only a one-way bcrypt hash of it.
• Your game: your character and everything that happens to it - stats, cash, gear, activity log, fights, trades, Market listings, family membership, and your friends and blocked players.
• What you write: city and family chat messages, and mail you send to other players.
• Technical data: your IP address, used to limit request rates and protect the game from abuse, and the time you were last active.

3. Cookies and browser storage

We use one cookie: a secure, httpOnly session cookie that keeps you signed in, for up to 30 days. It's strictly necessary for the game to work. We also save which chat room you last had open in your browser's local storage.

We don't use advertising or analytics cookies, and we don't track you across other websites.

4. How we use it

• To run the game: your account, your character, fights, trades, chat, families and leaderboards.
• To keep it fair and safe: checking account age before trades and prizes, spotting abuse, and enforcing the Code of Conduct.
• To answer you when you contact us.

5. What other players can see

Your username, avatar, title, family, public stats and rankings, how recently you were active, and what you post in city chat. Family chat is visible to your family, and mail to its recipient. Your email address is never shown to other players.

6. Who we share it with

We don't sell your personal information, and we don't share it for advertising.

• Service providers that host and run the game for us, only as needed to provide it.
• Google Fonts: the game loads its fonts from Google, which receives your IP address when your browser requests them.
• The law: when we're required to, or when it's needed to protect players or the game.

7. How long we keep it

We keep your information while your account exists. When you ask us to delete your account, we delete it and its personal information from the live game within 30 days. Copies in backups, if any, expire on their normal schedule.

8. Your rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to:

• be informed about how your information is processed,
• access your information and get a copy of it,
• have it corrected,
• object to its processing,
• have it erased or blocked,
• data portability,
• claim damages, and
• file a complaint with the National Privacy Commission.

Email [email protected] from the address on your account. We may ask you to confirm it's really you before we act.

9. Security

Passwords are hashed, the session cookie can't be read by scripts on the page, and the game is served over HTTPS. No system is perfectly secure, but we work to protect your data.

10. Age

Gluttony is for players 16 and older. If we learn that an account belongs to someone younger, we'll close it and delete its information.

11. Where it's stored

Your information may be stored and processed on servers outside the country where you live. Wherever it's processed, we protect it as described here.

12. Changes

If we change what we collect or how we use it, we'll update this policy and the date at the top, and tell you in the game when the change is significant.

13. Contact

Privacy questions and requests: [email protected].