Privacy Policy
Draft version 0.2
What we collect
- Account: email, username, display name, date of birth, an optional bio and avatar, and a salted password hash (PBKDF2). We never store your password itself. If you tell us you’re under 13 when signing up, we don’t keep anything.
- Age: we use your date of birth to work out whether you’re under 18, which decides who you can chat with and befriend. We don’t show it to anyone or give it to games.
- Activity: games you play, ratings, favourites, comments, scores, achievements, saves, items, equipped cosmetics and wallet transactions.
- Chat: the last 100 messages per game channel and room (with masked words already masked), reactions, and reports and moderation actions (mutes, chat bans) about you.
- Friends: your friends, requests, blocks and invites. While you’re online, which game you’re playing and the status line the game sets (for example “In room ABCD”) are kept in memory and shown to your friends, unless you turn that off or appear offline.
- Payments: what you bought, when, and the payment provider’s reference. Card details only go to the payment provider. Your supporter tag comes from how many Rings you’ve bought. During the preview no real payments happen.
- Security: IP address and browser for signed-in sessions, and short-lived counters for rate limiting.
- Ads: daily totals of ad impressions and clicks per campaign. We don’t build an ad profile about you, and no third-party ad network is active.
Cookies
One essential cookie keeps you signed in. It’s HttpOnly and Secure, and it’s only sent to ringstack.co. Games never see it, wherever they’re hosted. They ask RingStack who you are through its SDK. We use no tracking cookies. Games on other websites may set their own.
Who sees what
Your username, display name, avatar, bio, level, supporter tag (unless hidden), badges, public scores, comments and favourites are public. Chat messages are seen by players in the same channel and the same age group. Games you connect on other websites only get the permissions you approve. We don’t sell personal data. Our host is Cloudflare, which processes data for us.
Your choices
You can edit your profile, hide your supporter tag, stop friends seeing what you play, appear offline, block players, download all your data including your chat messages (Account, Privacy), revoke connected games, and delete your account. Deleting your account removes your personal data and your chat messages; payment records are kept anonymously where the law requires.
Retention
Sessions expire after 30 days without use. Rate-limit counters are deleted after two days. Chat keeps the last 100 messages per channel. Invites expire after 10 minutes. Ledger records are kept for accounting.
Children
RingStack isn’t for children under 13, and we don’t knowingly keep their data. Players aged 13 to 17 can only chat with and befriend other players under 18, and can only send emoji in chat.
Contact
Joshua Bemenderfer, josh@thederf.com.