Privacy Policy — Alzaroth

1. Who operates Alzaroth.fun?

Alzaroth.fun and Unlimited Dungeons are operated by: Antoine PRESTY

Location: United Arab Emirates

Contact email: admin@alzaroth.fun

For questions or requests concerning your personal data, contact us at the email address above.

2. Information we collect

When you visit or play as a guest

We may collect:

your IP address;
the country associated with your IP address;
browser type, operating system and device information;
access dates and times;
requested pages and technical logs;
error, rate-limit and security events;
a temporary or persistent guest identifier;
guest gameplay progress and settings.

When you create an account

We may additionally collect:

your username and display name;
your email address;
your password in securely hashed form;
confirmation that you meet the account age requirement;
account creation and login dates;
gameplay progress, equipment, companions, achievements and save data;
leaderboard scores and related gameplay records;
account preferences;
support requests and messages sent to us;
your optional consent to receive game news by email.

We do not require your full date of birth.

We do not intentionally collect sensitive personal information such as health information, religious beliefs, political opinions or biometric information.

3. Why we use your information

We use personal information to:

provide access to the website and game;
create, authenticate and maintain player accounts;
save and restore gameplay progress;
operate rankings and leaderboards;
protect accounts against theft and unauthorized access;
prevent cheating, abuse, automated attacks and fraudulent activity;
apply rate limits and other technical protections;
investigate errors and security incidents;
respond to support requests;
send essential account or security messages;
send occasional game news when you have specifically consented;
comply with applicable legal obligations;
establish, exercise or defend legal claims.

Where applicable, these activities are based on:

performance of the service requested by you;
our legitimate interests in operating and securing the game;
your consent for optional promotional emails;
compliance with applicable legal obligations.

4. Server-side gameplay and leaderboards

Gameplay calculations, loot generation, progression, mission results and leaderboard submissions are processed by the Alzaroth.fun server.

We may review gameplay data and security logs to detect impossible results, duplicated requests, automated activity, exploits or manipulation of leaderboard scores.

Automated security systems may temporarily restrict access or flag an account for review. We do not use automated decisions that produce legal or similarly significant effects on users.

5. Cookies and local storage

Alzaroth.fun may use strictly necessary cookies or browser storage to:

maintain login sessions;
remember essential preferences;
protect forms and requests against security attacks;
associate guest progress with the same browser;
prevent duplicate actions.

These technologies are required for the website or game to function correctly.

6. Email communications

We may send emails necessary to operate your account, including:

email verification;
password reset messages;
security alerts;
responses to support requests;
account deletion or recovery confirmations;
important changes affecting the service or your account.

These operational emails are separate from optional game-news emails.

You will receive emails about updates, beta news or Alzaroth.fun announcements only when you have voluntarily selected the relevant option and have confirmed your age is at least 16.

You may withdraw this consent at any time by:

using the unsubscribe link included in the email;
changing your account preferences;
contacting us at admin@alzaroth.fun.

Withdrawing marketing consent does not affect essential account or security emails.

7. How long we retain information

Active accounts

Account information and gameplay saves are normally retained while the account remains active.

Security logs and IP addresses

Full IP addresses and related security events are normally retained for 90 days from the date of each individual event.

A new login does not extend the retention period of older events.

Specific records may be retained for longer when reasonably necessary to investigate:

confirmed account theft;
fraud or cheating;
attacks against the website;
serious Terms of Service violations;
legal disputes or claims.

Such extended retention will be limited to the relevant records and reviewed when no longer necessary.

Account deletion

When account deletion is requested:

normal access to the account is disabled;
the account may remain recoverable for 30 days to protect against accidental or unauthorized deletion;
after this period, the account profile, credentials and gameplay saves are deleted or anonymized.

Limited security records may remain for up to 90 days after deletion for fraud prevention, security investigations and the defence of legal claims.

Deleted information may remain in protected backup copies for up to 90 days before those backups are automatically overwritten. Backup data is not restored except for disaster recovery or security purposes.

Email preferences

Marketing consent is retained until it is withdrawn. We may retain a minimal unsubscribe record to ensure that we do not send further promotional emails to an address that has opted out.

8. Who receives your information?

We may share limited personal information with service providers necessary to operate Alzaroth.fun, including:

our web-hosting and server provider;
our email-delivery provider;
backup and infrastructure providers;
security or abuse-prevention providers, where used.

These providers may process information only for the services they provide to us.

We may also disclose information when reasonably necessary to:

comply with applicable law or a valid legal request;
investigate fraud, attacks or unauthorized access;
protect the rights and security of Alzaroth.fun, its users or other persons;
establish, exercise or defend legal claims.

We do not sell or rent personal information.

9. International processing

Alzaroth.fun is operated from the United Arab Emirates.

Its servers are currently hosted in Amsterdam, the Netherlands. Personal information may therefore be processed or accessed in:

the Netherlands;
the United Arab Emirates;
other countries in which an essential service provider operates.

Where applicable law requires safeguards for international transfers, we will use appropriate contractual, technical or organizational measures.

For information about our current service providers or transfer arrangements, contact admin@alzaroth.fun.

10. Security

We use reasonable technical and organizational measures intended to protect personal information, including:

encrypted HTTPS connections;
secure password hashing;
server-side validation of gameplay actions;
access restrictions for administration tools;
security logging and rate limiting;
protected backups;
measures against duplicate, forged or unauthorized requests.

No online service can guarantee absolute security. Users should use a unique password and should not share their login credentials.

Applicable data-protection rules require security measures appropriate to the risks of the processing.

11. Your rights

Depending on where you live and which laws apply, you may have the right to:

request access to your personal information;
obtain a copy of certain information;
correct inaccurate or incomplete information;
request deletion of your information;
request restriction of certain processing;
object to processing based on legitimate interests;
withdraw consent at any time;
request data portability where applicable;
lodge a complaint with a competent data-protection authority.

Some requests may be limited where information must be retained for security investigations, legal obligations or the establishment, exercise or defence of legal claims.

To exercise your rights, contact admin@alzaroth.fun. We may request reasonable information to verify that the request concerns your account.

12. Children and age requirements

Unlimited Dungeons is a general-audience fantasy game and is not directed to children under 13.

Users must be at least 13 years old to create an Alzaroth account.

We do not request a full date of birth. Account applicants are asked to confirm that they meet the minimum age requirement.

If we learn that personal information has been collected from a child in circumstances where parental consent or another legal authorization was required, we may suspend the account and delete the associated information.

COPPA applies in particular to child-directed services and services with actual knowledge that they collect personal information from children under 13.

13. Third-party links

Alzaroth.fun may contain links to third-party websites or communities, including Discord or Reddit.

Those services operate under their own privacy policies. Alzaroth.fun is not responsible for their privacy practices or content.

Joining the Alzaroth.fun Discord server is optional and is not required to play the game.

14. Changes to this Privacy Policy

We may update this Privacy Policy when:

the game or website changes;
new features or service providers are introduced;
retention periods change;
legal or security requirements change.

The updated version will be published on this page with a revised “Last updated” date.

Material changes may also be announced on the website, by email or through the Alzaroth.fun Discord server.

15. Contact

For privacy questions, account-data requests or deletion requests, contact:

Email: admin@alzaroth.fun
Controller: Antoine PRESTY
Location: United Arab Emirates