Legal
Privacy policy
This describes what the system actually does — every point checked against the source, not copied from someone's template.
1.What we store
Your email address and in-game name; a fingerprint of your password and recovery code (the password itself is never stored); the dates your account was created, last signed in and last seen; your game progress; your forum posts; active sessions with a description of the device that opened them.
2.IP addresses
The application does not store your IP address anywhere: not in sessions, not in your profile, not in the rate limiter — that one counts by email address and account id. On our side your IP only reaches the web server's technical log, which is overwritten every 14 days and is not linked to your game profile. Separately, the traffic counter sees your IP — see its section.
3.Cookies
We set exactly one cookie of our own — abilit_session: it holds your session, lives 30 days, cannot be read by page scripts and travels only over a secure connection. The traffic counter sets cookies of its own — see the separate section below. There are no advertising cookies. Fonts are served by us: your browser never fetches them from a third party.
4.Who else sees it
There are two external services. Sendersy delivers our email: it receives the recipient address and the message text, and nothing else. And Yandex Metrica is the traffic counter — it has its own section. There are no ad networks on the site.
5.Traffic counter
The site runs Yandex Metrica (counter no. 111369937). It exists so we can see which sections get used and which nobody opens. Metrica sets cookies of its own and sees your IP address, the page address and where you came from. 🔴 Session Replay is enabled: it records what you do on the page — cursor movement, scrolling, clicks and typing. The project's author watches these recordings to find places where the interface is unclear. Passwords and the contents of the sign-in and registration fields are not captured. You can opt out with a blocker extension or the browser's «Do Not Track» setting; the site keeps working either way.
6.How long we keep it
Account data lives as long as the account does. The database is backed up daily and copies older than 14 days are deleted automatically. So after an account is deleted, its traces leave the backups within the same window.
7.What others can see
Your in-game name, level and ladder position are public, along with whatever you opened via the switches in your account. Your email, wallet, password fingerprints and session list are never published — they are not among the configurable fields.
8.Your rights
You can ask for a copy of your data, a correction, or deletion of your account — by writing to support@abilitrpg.com from the address the account uses. Closing other sessions you can do yourself in your account.
9.Children
The game is not intended for children under 13 and we do not knowingly collect their data. If such an account comes to light it will be deleted at a parent's request.