Privacy Policy
Last updated: 9 October 2026
This policy explains what personal data the AnarchyMu team collects when you use our services, why, how long we keep it and what you can do about it. It covers this website, the AnarchyMu game, its launcher for Windows, macOS and Linux, and the mobile app for Android, including the version published on Google Play as Anarchy Legend (together, "the Service").
1. Who we are and how to reach us
The Service is run by the AnarchyMu team, which decides how your data is used. For any question about this policy or your data, contact us by email at [email protected].
2. What we collect
Your account. When you register: your username, your password (we store only a one-way Argon2id hash of it, never the password itself), your email address, and the security question and answer if you choose to set one. We also record when the account was created, the country your connection came from at registration (worked out from your IP address on our own server), whether you agreed to receive news by email, and the secret for two-factor authentication if you turn it on.
Your game. Your characters and everything that belongs to them: names, levels, items, game currency, progress, quests, guild membership, friend lists, in-game mail you send and receive, rankings, and the virtual items you obtain or buy. Chat messages are delivered to the players they are meant for; we do not keep a record of them.
Your connection and device. The IP address you sign in from (to the website and the game), the time of each sign-in, and a log of account actions taken on the website (for example a password change). The game client sends a device identifier when it connects: on Windows, macOS and Linux an identifier derived from the computer's hardware, on Android the device's Android ID for our app. We use it to protect accounts and to enforce the game rules (for example against banned devices). We also see the client's version and operating system.
Crash reports. If the game or the app crashes, a crash report is sent to our error monitoring provider: the app version, device model, operating system version and the technical state of the program at the moment of the crash. It does not include your password or your messages.
Payments. Donations are processed by PayPal or Stripe. We never see or store your card details. We receive and keep the transaction reference, amount, currency, date and status, and the email address the payment provider gives us for the payer.
Support. The messages you send through support tickets, and our replies.
Cookies. The website uses only the cookies it needs to work: a session cookie that keeps you signed in, a cookie that remembers the game server you chose, and a cookie that remembers your language. We do not use advertising or analytics cookies.
3. Why we use it
- To run your account and the game, and to deliver what you buy (our contract with you).
- To keep accounts and the game secure: to stop unauthorised sign-ins, cheating, fraud and abuse, and to enforce bans (our legitimate interest in a fair and safe game).
- To send emails about your account: confirmations, password recovery, two-factor and deletion messages. News emails only if you agreed to them; you can stop them at any time.
- To fix crashes and bugs (our legitimate interest in a working game).
- To keep payment records as accounting and tax law requires (a legal obligation).
- To answer your support requests.
We do not sell your data, and we do not use it for advertising or profiling.
4. Who else processes it
We share data only with the services that help us run the Service, and only what each one needs:
- Our hosting providers in the European Union, where the game servers, website and databases run.
- Cloudflare, which delivers the website and the game downloads and protects them against attacks (it sees your IP address).
- Sentry, which receives the crash reports described above.
- PayPal and Stripe, for payments, under their own privacy policies.
- Our email provider, to deliver account emails.
- On some pages (registration, sign-in, password recovery) a CAPTCHA service that checks you are not a bot: Google reCAPTCHA, hCaptcha or Cloudflare Turnstile. The website also loads fonts from Google Fonts. These services see your IP address.
We may also disclose data when the law requires it. Some of these providers process data outside the European Economic Area (for example in the United States); they do so under safeguards such as the European Commission's standard contractual clauses.
5. How long we keep it
- Account, game, connection and website log data: as long as your account exists. When you delete your account, they are deleted with it (see section 7).
- Crash reports: up to 90 days at our error monitoring provider.
- Payment records: for as long as accounting and tax law requires. After an account is deleted they are kept only in a form that no longer names the account or holds an email address.
- Support tickets: until the account is deleted.
6. Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Where we rely on your consent (news emails) you can withdraw it at any time. You can change your email and password yourself in the account panel. For anything else, contact us by email at [email protected]. You also have the right to complain to the data protection authority of your country.
7. Deleting your account
You can delete your account at any time on the account deletion page, from any device, without installing the game. You sign in with your username and password and confirm the request from the email we send to the address on your account. From that moment the account is locked. If you sign in to this website within 30 days, the deletion is cancelled. After 30 days the account is permanently deleted: your account details, your characters and their items, your progress, your guild membership, your friends and mail, your web credits, your support tickets and your connection logs. Payment records are kept only as section 5 describes.
8. Children
The Service is not intended for children under 13, or under the minimum age for consent to online services in your country if that is higher. We do not knowingly collect data from them. If you believe a child has given us personal data, contact us and we will delete it.
9. Security
Passwords are stored only as one-way hashes. The website uses HTTPS, and the game encrypts its connection to our servers. Access to the data is limited to the team members who need it to run the Service.
10. Changes to this policy
If we change this policy, we publish the new version on this page with a new date. If a change matters for how we use your data, we also announce it on the website.