Ironbound Privacy Notice

Information used by the game

When you create an online account, Ironbound stores your username, a salted password hash (not your plaintext password), a random session token hash, and the game state needed to provide online play. Friends and trading features store friend requests, presence timestamps, item ownership, and trade history. The service uses rate-limiting records derived from request IP addresses to reduce abuse.

The offline game stores its save and selected local resource-pack settings in your browser. Imported resource-pack images remain in that browser and are not uploaded to player accounts.

Service providers and advertising

The online site and account service are hosted by Cloudflare Workers and D1. If Google AdSense is approved and enabled, Google and its advertising partners may use cookies, local storage, device information, and other data as described in Google’s notices and your consent choices. No AdSense ads are active until the site is approved and the owner configures real ad-unit IDs.

For visitors in the EEA, UK, or Switzerland, the owner must configure an appropriate Google-certified consent management platform before serving personalized ads.

Retention and your choices

Account and game records are kept to provide online play and protect the service. Session cookies expire after 30 days. The owner must publish the final retention periods and a working process for account deletion or data requests before public launch.

Contact the site operator to ask about account data, deletion, or privacy questions: [OWNER CONTACT EMAIL — REPLACE BEFORE LAUNCH].

Security

Passwords are hashed on the server, authenticated sessions use protected cookies, and game rewards are intended to be calculated by the server. Do not send passwords to support or reuse a password from another service.