# Privacy Policy **Effective October 8, 2026** Crossroads Emulator ("we", "us") is a private, non-commercial, invite-only game server run for the preservation of a game whose original servers closed long ago. This policy explains what we collect when you use the site at crossroadsemulator.com, the launcher, the game server and the Server Manager (together, "the service"), why, and what you can ask us to do with it. The short version: we collect what it takes to run your account and the game, we keep it on our own server, we never sell it, and we do not use it for advertising or tracking. ## What we collect **Your account** - Your account name, a public account number, and your password, which is stored only as a one-way hash and never in readable form. - A recovery email address, and whether you have confirmed it. We use it only to send account links (confirming the address, resetting a password, recovering a forgotten account name) and notices about your account's security, such as a password change. - If you sign in with Google, your Google account's identifier and email address, used only to sign you in, and when it was linked and last used. We do not keep your Google name or picture. If you make your account with Google, its address also becomes your recovery email. - If you add a passkey, its public key, the name you give it, when it was added and last used, and the type of device your browser reports for it. Your device keeps the private part; we never see it. - If you choose to stay signed in on a PC, a scrambled copy of that PC's sign-in token and when it was issued and last used. **Your characters and play** - Your characters and their game state: names, appearance, faction, skills, inventory, location, friends list, block list, in-game phone number, and voicemail left for you. - Messages you post to in-game boards, and voicemail you leave for others, which are stored so other players can read them. - Reports you send us, with the in-game `bug` and `tos` commands or the Contact tab, including the text, your character, and where and when you sent it. **Your connection and devices** - The IP address you connect from. It is kept with a game session for about an hour and appears in the server's technical logs. - What the launcher tells the server when you play: which optional content packs and game patches you have installed, and the server you chose. The launcher does not send information about your computer's hardware or software. - The launcher keeps its settings on your computer. If you ask it to remember your account name, Windows protects it. If you choose to stay signed in, it keeps a sign-in token the same way. It never stores your password. **Technical logs** Our servers write logs to keep the game running and to fix problems. They include sign-ins, connections and their IP addresses, and the commands typed in the game, including what is said in chat. Logs are rotated automatically and overwritten as they fill. **What we do not collect** We use no analytics, advertising or tracking, and the site loads nothing from other companies. What the site and the Server Manager keep in your browser, sign-in cookies and a little browser storage, is there only to keep you signed in and to remember a few page preferences. The sign-in cookie ends when you close the browser or log out, and within 12 hours either way. ## How we use it - To run your account and the game, and to keep both secure. - To send the account emails described above. - To enforce our [Terms of Service](terms.html), look into reports, and keep the game fair and civil. Staff may watch a player's game session as it happens, including private messages sent to that player, to investigate a report or a rule being broken. - To fix bugs and improve the game. ## Who can see it - **Other players** see what the game shows them: your characters, what you say in game, and what you post. - **Staff** (accounts with an admin role) can see account names, characters, reports, ban notes, a masked form of your recovery email, and how you sign in: whether you have a password, your passkeys' names and dates, a masked form of your Google address, and how many PCs keep you signed in. Only the most senior staff see full email addresses and messages sent through the Contact tab. - **City owners** who run a city you join can see your account number and character names in that city, not your account name or email. - **Service providers** that help us run the service, used only for that purpose: our cloud hosting provider, which runs the server and holds the data; Resend, which delivers our emails; an off-site storage provider that holds backups; and Google, if you choose to sign in with it. When you set a password we check it against known data leaks through the Have I Been Pwned service. Only the first few characters of a scrambled form of the password are sent, so neither the password nor your account is revealed. We do not sell or rent your information, and we do not share it for anyone's marketing. We would disclose it only if the law required us to, or to protect players or the service from harm. ## How long we keep it We keep your account and characters while your account exists. Reports and messages you send us, and records of moderation actions, are kept as a record of how problems were handled. Server backups are kept for a limited time and then replaced. Session data is removed within about an hour, a PC kept signed in is forgotten after 30 days unused, and logs are overwritten as they rotate. ## Your choices and rights You can delete your characters yourself, and on the site's Account tab you can change your recovery email, remove a passkey, unlink Google, forget the PCs that keep you signed in, and sign out everywhere. You can ask us to: - tell you what we hold about you, or give you a copy; - correct it; - delete your account. Deleting an account removes the account, its characters, its recovery email, its passkeys, its Google link, its kept sign-ins and its roles. Some records stay: reports and messages you sent us, moderation records, and posts or voicemail you left for other players, which may still show your character's name. Copies in backups are replaced as backups expire. Depending on where you live, you may have further rights over your information. Ask, and we will honor them. ## Security The service runs over HTTPS. Passwords are stored only as hashes, and every new password is checked against known leaks. No system is perfectly secure, so use a password you do not use anywhere else, and tell us at once if you think your account has been misused. ## Children The service is not for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has an account, contact us and we will delete it. ## Changes We will post any change to this policy here with a new effective date. If a change matters to how your information is used, we will also tell you on the site or in the launcher. ## Contact Use the Contact tab on the site, or email support@crossroadsemulator.com.