Privacy policy

1. What we collect
 a) Install ID: a random string the app creates on first launch for anonymous sign-in (a guest account tied to this
    device). It is NOT a hardware identifier and NOT the IDFA / Advertising ID. The server assigns you a player ID (User ID).
 b) If you CHOOSE to register your account (from Qi Refining stage 5): with a game username + password -> we store the username
    and a HASHED password (bcrypt; nobody can read the original password); or with Google (Android) / Apple (iOS) -> the Google / Apple account identifier and, if the provider
    includes them, your email, display name and avatar; with Apple you may hide your email. We never use email for contact or marketing.
 c) Gameplay data: character name, realm, items, sect, quests, match results, auction trades in in-game currency.
 d) Content you create: chat messages (world, area, party, sect, direct), character names, sect names.
 e) Safety & anti-cheat: abuse reports (reporter, reported player, reason, the reported message and a few surrounding
    messages as evidence), the players you blocked, when you accepted the Chat Rules, a server-side action log (audit).
    IP addresses are stored only after a failed sign-in (to stop password guessing), with the time, for at most 1 day.
 f) On your device: save files, settings, an encrypted login session.
 We do NOT collect location, contacts, photos, camera, microphone, health or payment data. NO ads, NO third-party analytics or
 tracking SDKs, NO tracking across other companies' apps or websites.

2. How we use it
 Only to run the game: save progress, play with others, chat, sign in to a registered account on a new device, keep the community safe
 (word filter, handling reports, stopping spam / cheating). We do not sell, rent or share data with third parties for advertising.

3. Sharing
 - Other players see: your character name, realm, appearance, sect, and chat messages you send in channels they are in.
 - Infrastructure provider: a rented server (VPS) running Nakama + PostgreSQL stores the data on our behalf.
 - Google / Apple: only when you tap link / sign in, to verify the account.
 - Authorities: when required by law, or when content harms children (reported to the competent authorities).

4. Retention
 - Chat: direct messages 30 days; sect channels 7 days; area / party channels 24 hours; world channel keeps the latest 200 messages.
 - Abuse reports: until resolved + 180 days. Server action log (audit): 90 days.
 - Account data: until you delete your account. A guest (unregistered) account can only be reached from the device that
   created it: uninstalling or changing phones makes it unreachable; its data is still deleted on request (section 5).

5. Deleting your account
 In game: Pause > Account (Tài khoản) > Delete account (Xóa tài khoản; type XOA, then "Xóa vĩnh viễn"). Or on the web: https://thanhnguyen6702.github.io/tutienky-legal/delete-account.html
 (you need the player ID shown on the Account page; to prove ownership, send the request from the email of the registered
 Google / Apple account, or delete in the game on the device you play on / after signing in with your username). The account is kept 7 days so you can change your mind, then the server
 permanently deletes: the account, sign-in devices, username + password hash, Google / Apple links, progress, items, friends, sect membership, ALL chat
 messages you sent, and ends your open auction listings (seller name removed). Kept only as stated in section 4: abuse reports
 involving you and the audit log (no longer linked to any existing account), deleted when they expire. Local saves are removed
 when you uninstall the app.

6. Children
 The game is for players aged 13 and over and is not directed at children under 13. We do not knowingly collect data from
 children under 13; if we learn of such an account we delete it. Parents may contact support.feedback.vn@gmail.com.
 We have zero tolerance for child sexual abuse and exploitation (CSAE / CSAM): offending accounts are banned and reported to
 the relevant authorities.

7. Security
 Passwords (if you register a username) are stored only as bcrypt hashes; repeated failed sign-ins are locked for 15 minutes.
 Forgot your password: contact support.feedback.vn@gmail.com (we verify with your player ID / character name). There are no
 recovery codes. The
 login session on the device is encrypted. Connection to the server: encrypted (HTTPS/TLS).

8. Your rights
 You can see your gameplay data in the game, and request a copy, a correction or deletion at support.feedback.vn@gmail.com; we reply within 30 days.

9. Changes
 When this policy changes, the effective date above is updated; important changes are announced in the game.