Legal
Privacy policy
This describes what the system actually does — every point checked against the source, not copied from someone's template.
1.What we store
Your email address and in-game name; a fingerprint of your password and recovery code (the password itself is never stored); the dates your account was created, last signed in and last seen; your game progress; your forum posts; active sessions with a description of the device that opened them.
2.IP addresses
The application does not save your IP address: it is not in your session, not in your profile, not in the database. One exception is anti-abuse protection: on public actions that get abused by scripts (sign-in, registration, guest sign-in, VK sign-in, account and session recovery, support requests) the address goes into a request counter. That counter lives only in the server's memory, for no longer than an hour, is never written down and is not linked to your game profile. Beyond that, your IP reaches the web server's technical log, which is overwritten every 14 days. Separately, the traffic counter sees your IP — see its section.
3.Cookies
We set exactly one cookie of our own — abilit_session: it holds your session, lives 30 days, cannot be read by page scripts and travels only over a secure connection. The traffic counter sets cookies of its own — see the separate section below. There are no advertising cookies. Fonts are served by us: your browser never fetches them from a third party.
4.Who else sees it
There are four external services. Sendersy delivers our email: it receives the recipient address and the message text, and nothing else. Yandex Metrica is the traffic counter — it has its own section. The Yandex ad network: in the game a container can be opened by watching a clip, and it is the network that plays the clip; there are no ads on the site's pages, and inside VK the clip is served by the platform itself. And the Compasly reviews service — the “What players say” block at the bottom of the home page: its contents come from that service, and its script is attached only after the page has been rendered.
5.Traffic counter
The site runs Yandex Metrica (counter no. 111369937). It exists so we can see which sections get used and which nobody opens. Metrica sets cookies of its own and sees your IP address, the page address and where you came from. 🔴 Session Replay is enabled: it records what you do on the page — cursor movement, scrolling, clicks and typing. The project's author watches these recordings to find places where the interface is unclear. Passwords and the contents of the sign-in and registration fields are not captured. You can opt out with a blocker extension or the browser's «Do Not Track» setting; the site keeps working either way.
6.How long we keep it
Account data lives as long as the account does. The database is backed up daily and copies older than 14 days are deleted automatically. So after an account is deleted, its traces leave the backups within the same window.
7.What others can see
Your in-game name, level and ladder position are public, along with whatever you opened via the switches in your account. Your email, wallet, password fingerprints and session list are never published — they are not among the configurable fields.
8.Your rights
You can ask for a copy of your data, a correction, or deletion of your account — by writing to support@abilitrpg.com from the address the account uses. Closing other sessions you can do yourself in your account.
9.Children
The game is not intended for children under 13 and we do not knowingly collect their data. If such an account comes to light it will be deleted at a parent's request.