Last updated: September 1, 2026.
The server stores your username, an optional email address, a one-way Argon2 password hash, active session records, inventory, player state, and changes made to the shared world. Passwords themselves are never stored.
Connection addresses may appear temporarily in security and operational logs and are used in memory for abuse rate limiting. The game does not include advertising or third-party analytics.
Graphics, sound, control settings, your current skin, and your saved skin library are stored in your browser. They remain on that browser until you clear its site data. A selected skin may be transmitted to other connected players so they can render it.
This data is used to authenticate accounts, keep the persistent multiplayer world working, restore player progress, prevent abuse, diagnose failures, and display players to one another.
Account data is kept while the account exists. Expired sessions and operational logs are periodically removed. Use DELETE ACCOUNT on the title screen while signed in to permanently remove the account, sessions, and saved inventory. Edits already made to the shared world are not removed because they form part of the common world state.
The deployment operator controls the server database and backups. Hosting providers may process encrypted traffic and stored server files solely to provide infrastructure. The release page for a public deployment must identify its operator and provide a privacy contact before registrations are opened.