Privacy Policy
Version of October 14, 2026.
This policy explains what data Reach World stores, why and for how long. The controller of your data is Jeferson Cabrera (Colombia), and it is processed under Colombian Law 1581 of 2012 on personal data protection. Contact: jeferjk2009@gmail.com.
1. What we store
- Your account: username, email address, the date you created it, the date of your last login and which version of the terms you accepted.
- Your password: we never store it as is. We only store an encrypted fingerprint (bcrypt) that is used to check it but from which the password cannot be recovered.
- Your session: if you tick "Remember session", your device keeps an access key and we keep only a fingerprint of it. It expires on its own and is deleted when you log out.
- Your game: your characters and their progress (level, gold, items, quests, skills, achievements, map position), your friends and ignored players, and your guild.
- Login log: every time someone tries to log into an account we store the username, the IP address, the time and whether it succeeded. It is used to detect account theft attempts and abuse.
- Sanctions: if an account is sanctioned, the reason and duration.
We do not store chat. Messages pass through the server to reach other players, but they are not saved.
Your settings (graphics, sound, language, keys) are stored only on your device.
2. What we use them for
- So you can log in and play, and to save your progress.
- To protect your account and the server (login log, attempt limits).
- To enforce the Terms of Use.
- Your email, for account matters (for example, recovering access). We will not send you advertising.
3. Who we share them with
We do not sell or hand over your data. There is no advertising and no third-party analytics in the game.
The data is on a server rented from a hosting provider, which only stores it on our behalf. We would only share it with others if required by law.
Other players see your characters' names, class, level and appearance, what you write in chat and your guild. They never see your username, email or IP.
4. How long
- Account and game data: as long as the account exists.
- Login log: 12 months. After that it is deleted automatically.
- Session keys: until they expire or you log out.
- If you ask us to delete your account, we delete the account, its characters and the associated data. We only keep what the law requires us to keep.
5. Security
The connection to the server is encrypted (TLS), passwords and session keys are stored only as fingerprints, login attempts are limited, and game updates are signed so nobody can slip in a fake one. No system is perfect: if we detect a problem affecting your data, we will let you know.
6. Your rights
You can ask us at any time to see the data we hold about you, correct it, delete your account or withdraw your consent. Write to jeferjk2009@gmail.com from your account's email. We will reply within a reasonable time and at most within the time set by law. You can also file a complaint with Colombia's Superintendencia de Industria y Comercio (SIC) or with the data protection authority of your country.
7. Children
The game is not aimed at children under 13. If you are a parent or guardian and believe your child under 13 has an account, contact us and we will delete it.
8. Changes
If we change this policy in an important way, we will announce it in the game or on the official page.