What we collect

Information you give us

• Account details: your display name, email address and password when you register. Passwords are stored only as a one-way hash, never in readable form.
• Age confirmation: your confirmation that you are 18 or older.
• Messages: anything you send us when you contact support.

Information created as you play

• Your virtual coin balance and a ledger of coin changes (spins, wins, daily gifts and rewards).
• Spin history, including the game, bet, result and time of each spin.
• Progress such as your level, quests, season pass, album cards, world stats and whether you have completed the welcome tour.

Technical information

• Diagnostics: to keep the games smooth, the app reports frame-rate summaries, slow frames, script errors and basic device facts (such as screen size, browser and device type). When a spin stutters badly or an error occurs, it may also send a small, low-resolution image of the game reels, at most once every two minutes. These images show the game board, not your camera or anything outside the game.
• IP address: used briefly to protect sign-in and diagnostics from abuse (rate limiting).

How we use it

• To create and secure your account and keep you signed in.
• To run the games: keep your balance, progress and rewards accurate and consistent across your devices.
• To find and fix bugs, crashes and performance problems.
• To prevent fraud, cheating and abuse, and to enforce our Terms of Service.
• To answer your questions and send essential service messages about your account.

Legal bases (EEA, UK and similar laws)

We process account and gameplay information to provide the service you asked for (performance of a contract). We process diagnostics and security information because we have a legitimate interest in keeping Realms of Luck working, fair and safe. Where the law requires consent, we will ask for it and you can withdraw it at any time.

Who we share it with

We do not sell or rent your personal information, and we do not share it with advertisers or data brokers. We share it only with:

• Service providers that host and run Realms of Luck for us (such as cloud hosting and database providers), under contracts that limit their use of the data to providing those services.
• Authorities when we are required to by law, or when it is needed to protect the rights, safety or property of our players, us or others.
• A successor if Realms of Luck is ever merged, acquired or sold, in which case this policy continues to apply to your information.

Cookies and local storage

We use one essential cookie to keep you signed in. It is marked HTTP-only, so page scripts cannot read it, and it expires after 14 days. The mobile apps use the same sign-in token without a cookie.

The site may also save small preferences in your browser’s local storage, such as sound settings or the last tab you opened. We do not use advertising or cross-site tracking cookies, so there is nothing to opt out of. Blocking cookies will stop you from staying signed in.

How long we keep it

• Account and gameplay records: for as long as your account is open. When you ask us to delete your account, we delete or anonymize them, except where we must keep records to meet legal obligations or resolve disputes.
• Sign-in sessions: up to 14 days, or until you sign out.
• Diagnostics: kept in a rolling buffer that keeps only the most recent reports; reel images are removed even sooner as new ones arrive.
• Rate-limit records: 15 minutes or less.

How we protect it

Passwords are hashed, sign-in tokens are stored only as hashes on our servers, connections are encrypted, and access to production systems is restricted. No service can promise perfect security, so please use a unique password and tell us right away if you think your account has been accessed without permission.

Your choices and rights

Depending on where you live, you may have the right to access, correct, download or delete your personal information, and to object to or restrict certain processing. To make a request, email [email protected] from the address on your account. We will respond within the time the law requires, and we will not treat you differently for exercising your rights.

If you are in the EEA or UK, you can also complain to your local data protection authority.

Adults only

Realms of Luck is for adults 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will close it and delete its information.

International transfers

Our service providers may store and process information in countries other than yours. When we transfer personal information internationally, we use appropriate safeguards required by applicable law.

Changes to this policy

We may update this policy as Realms of Luck changes. We will post the new version here with a new effective date, and tell you in the app or by email before significant changes take effect.