Privacy Policy

Information we handle

• Account information: your username, email address if one is provided, password hash, email-verification status, login and session records, permissions, notification settings, and other account preferences. LegendHUB does not store your password in plain text.
• Builder information: character profiles and Builder preferences. Anonymous and unverified Builder data is stored in your browser. If you use verified account storage, selected Builder profiles and preferences are stored on the LegendHUB server so they can follow you between devices.
• Content and feedback: game information, revisions, change notes, feedback titles, and feedback descriptions that you choose to submit. Contributions may be associated with your username. Feedback submitted through the feedback form becomes a public GitHub Issue, so do not include private information in it.
• Technical and security information: cookies, session identifiers, verification and recovery records, request paths and response metadata, and network information used to prevent abuse. LegendHUB stores hashed versions of IP addresses for login and account-security controls.

How we use information

LegendHUB uses information only to:

• operate, maintain, secure, and troubleshoot the site;
• create accounts, authenticate users, and manage sessions;
• verify email addresses and provide password recovery;
• save preferences, notifications, and account-backed Builder data;
• display and maintain user-submitted game information;
• respond to feedback and requests; and
• detect spam, automated traffic, fraud, and other abuse.

LegendHUB does not sell or rent personal information and does not use it for advertising, targeted marketing, or cross-site behavioral tracking.

When information is disclosed

LegendHUB does not share personal information for advertising or marketing. Limited information may be disclosed in these situations:

• Services needed to operate LegendHUB: hosting, private backup, and email-delivery providers may process the information necessary to provide those services.
• Google reCAPTCHA: registration and feedback use reCAPTCHA to reduce automated abuse. Google processes information under its Privacy Policy and Terms of Service.
• Public GitHub feedback: when you submit feedback, its title and description are sent to GitHub and published as an Issue. GitHub handles that information under its Privacy Statement.
• Legal and safety needs: information may be disclosed when reasonably necessary to comply with a valid legal obligation or to protect LegendHUB, its users, or others from fraud, abuse, or a security threat.

Cookies and browser storage

LegendHUB uses cookies for sign-in, preferences, timezone display, notification behavior, and remembering cookie or reminder choices. The Builder also uses browser local storage for device-local characters and migration acknowledgements. See the Cookie Policy for more information. You can remove cookies and local storage through your browser, but doing so may sign you out, reset preferences, or delete Builder data that exists only in that browser.

Retention and deletion

• Active account information is retained until you request account deletion.
• Session, verification, recovery, rate-limit, and security records are retained for their operational lifetimes and removed or replaced as they expire or are no longer needed.
• Account-backed Builder data is retained until you delete it, delete the account, or request deletion. Deleting Builder data removes its active stored payload.
• Private disaster-recovery backups may contain account information. Information deleted from the active system may remain in those private backups until the backups are retired. Backups are used for recovery and security, not to restore an individually deleted account during ordinary operation.
• Public game contributions and GitHub feedback may remain public after account deletion. Contact LegendHUB if you also want a specific public contribution or feedback Issue reviewed for removal.

Your choices and requests

Account Settings lets you update your email address, password, notification settings, and Builder storage. Builder data can be exported or deleted from Account Settings. Browser-only information can be removed through your browser controls.

To request access to, correction of, or deletion of your account information, email rufus@legendmud.org. LegendHUB may need to verify that the request concerns your account. Rights may also vary depending on where you live.

Security

LegendHUB uses technical and operational safeguards intended to protect account information, including password hashing, hashed session validators, access controls, private backups, and encrypted web connections. No internet service can guarantee absolute security.

Children

LegendHUB is not directed to children under 13 and does not knowingly collect personal information from them. A parent or guardian who believes a child provided personal information should contact rufus@legendmud.org so it can be reviewed and deleted.

Do Not Track signals

LegendHUB does not use personal information for cross-site behavioral advertising. Because necessary site operation does not change based on a browser's Do Not Track signal, LegendHUB does not respond differently when that signal is enabled.

Changes to this policy

This policy may be updated when LegendHUB's features or information practices change. The effective date above will be updated, and material changes will be announced through the site or changelog.

Contact

Questions or privacy requests can be sent to rufus@legendmud.org.