Privacy Policy

What we collect, why, and the control you have over it.

Last updated: 5 October 2026

1. Who we are

WinQuest Worlds is operated by Cris & Lolwut / InfinityArts. This policy explains how we handle your information when you visit the site, create an account, or play.

2. What we collect

• Account data: username, email, and a securely hashed password.
• Gameplay data: character progress, levels, items, in-game activity and logs needed to run the game and keep it fair.
• Future wallet features: no wallet connection is required for Gold or Rubys. $RWC features are not live; any future wallet-data processing will be explained before those features launch. We never ask for or store your private keys or seed phrase.
• Technical data: IP address, device/browser info and cookies or local storage used to keep you logged in and to protect the service.

3. Why we use it

• To create and secure your account and run the game.
• To prevent cheating, fraud, abuse and money laundering, and to meet legal obligations.
• To process optional in-game purchases you choose to make, where available.
• To improve the game and respond to support requests.

4. What we do NOT do

• We do not sell your personal data.
• We do not take custody of your external crypto assets.
• We do not require any financial information to play for free.

5. Sharing

We share data only with service providers that help us run the game (e.g. hosting, payment or anti-fraud providers) under confidentiality obligations, or where required by law. Gold and Rubys transactions are in-game records, not public blockchain transactions.

6. Cookies & local storage

We use strictly necessary cookies/local storage to keep you logged in and to secure the service. We also store the date when this browser last displayed the welcome notice, so it normally appears once per calendar day in Europe/Berlin time. This preference is stored locally, not sent to the server, and is not used for tracking. If local storage is unavailable, we try session storage; clearing or blocking both can cause the notice to reappear. You can clear browser storage, but parts of the game may then not work.

7. Data retention

We keep account and gameplay data while your account is active and for as long as needed for security, legal and anti-fraud purposes. You can request deletion at any time; we may anonymise rather than hard-delete where records must be kept by law.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to or restrict certain processing. To exercise these rights, contact us through the support or community links on the home page.

9. Security

We use reasonable technical and organisational measures to protect your data (including password hashing). No system is 100% secure, so you are also responsible for a strong password and for keeping your login and any wallet safe.

10. Changes

We may update this policy. Significant changes will be posted here, and continued use means you accept the updated policy.

11. Legal basis for processing

Where data-protection law (such as the GDPR/UK GDPR) applies, we process personal data to perform our contract with you (running your account and the game), to comply with legal obligations, for our legitimate interests in securing and improving the service and preventing fraud and abuse, and, where required, with your consent, which you may withdraw at any time.

12. International transfers

Your data may be processed in countries other than your own. Where we transfer data internationally, we rely on appropriate safeguards (such as standard contractual clauses) where legally required.

13. Your regional rights

Depending on where you live you may have additional rights. For example, EU/UK residents may lodge a complaint with their data-protection authority, and California residents have rights under the CCPA/CPRA including the right to know, delete, correct and opt out of “sale”/“sharing” (we do not sell personal data). We do not discriminate against you for exercising your rights.

14. Automated decisions & Do Not Track

We may use automated checks to detect fraud, cheating and abuse; where these significantly affect you, you can ask for human review. Our site does not respond to browser “Do Not Track” signals, as no common standard exists.

15. Data breaches

If a breach affecting your personal data occurs, we will investigate and, where required by law, notify the relevant authorities and affected users without undue delay.

16. Contact

Privacy questions? Reach us through the in-game support channel or the community links on the home page. See also our Terms & Conditions.