Privacy & Cookie Policy

Last updated: February 12, 2026

🛡 Your privacy matters to us. This policy explains what data Pyrewing collects, how we use it, and what rights you have. We keep things simple — no tracking, no ads, no data selling.

1. Information We Collect

When you use Pyrewing (https://pyrewing.com), we collect the following:

Data Type	What We Collect	Why
Account	Username, email address	Account creation & password recovery
Connection	IP address, browser user agent	Security & abuse prevention
Session	Login timestamps, session duration	Authentication & session management
Game	Character data, in-game activity	Stored by the game server for gameplay

2. How We Use Your Data

✓ To provide and maintain our services
✓ To authenticate your identity and secure your account
✓ To detect and prevent abuse, cheating, and security threats
✓ To process donations and maintain transaction records

3. Cookies

🍪 Session Cookie Only

Pyrewing uses one session cookie (PYREWING_SESSION) which is required to keep you logged in. This is a functional cookie only — it does not track your activity, is not shared with third parties, and is deleted when your session expires or you log out.

🚫

No Tracking Cookies

We do not use any tracking, analytics, or advertising cookies. Zero.

🔒

Functional Only

Our single session cookie exists purely to keep you logged in. Nothing else.

🗑

Auto-Deleted

The cookie is automatically removed when your session expires or you log out.

4. Local Storage

We use your browser's localStorage to save UI preferences (such as cookie consent choice, dismissed notifications, and display settings). This data stays on your device and is never transmitted to our servers.

5. Third-Party Services & Data Sharing

Service	Purpose	Data Exposed
Google Fonts	Typography & font loading	Your IP address may be collected by Google when fonts load. See Google's Privacy Policy.
Discord API ⓘ	Community widget & live member display	Your browser sends requests to `discord.com` which may expose your IP address. See Discord's Privacy Policy.

🛡 No Data Selling

We do not use any third-party analytics, advertising, or tracking services. We do not sell, rent, or share your personal data with any other third parties beyond what is described above.

6. Data Retention

Data	Retention Period
Account data (username, email)	Until account deleted
Security logs (IPs, login attempts)	Up to 90 days
Game data (characters, activity)	Until account deleted
Session cookie	Until logout or expiry

You may request deletion of your data by contacting us at any time.

7. Your Rights

✓ Access — View the personal data we hold about you
✓ Correction — Request correction of inaccurate data
✓ Deletion — Request deletion of your account and associated data
⚠ Cookie Opt-out — Decline cookies (note: declining the session cookie will prevent you from logging in)

8. Data Security

🛡

CSRF Protection

All forms are protected against cross-site request forgery attacks.

⏱

Rate Limiting

Automated protection against brute-force and abuse attempts.

🔒

SRP6 Hashing

Passwords are never stored in plain text. We use industry-standard SRP6.

🔐

Secure Sessions

Session tokens are cryptographically generated and expire automatically.

🌐

Content Security Policy

A managed domain whitelist controls which external sites may load resources. Unlisted domains are blocked.

🚫

Access Blacklist

Abusive IPs and accounts can be blocked from accessing the site, with optional expiry for temporary blocks.

However, no system is 100% secure. We take every reasonable measure to protect your data.

9. Children's Privacy

👶 Age Requirement

Pyrewing is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this policy at any time. Changes will be reflected on this page with an updated revision date. Major changes will be announced via our Discord server.

11. Contact

📧 For privacy-related questions or data requests, contact us at support@pyrewing.com.

Last revised: 2026. This policy applies to https://pyrewing.com and all related Pyrewing services.