LiPengyu ("we", "us") respects your privacy. This Privacy Policy explains how we collect, use, store and share personal information when you use Fortcraft (the "Service"), and the rights you have. Please read it before using the Service; by using the Service you acknowledge it. We will announce significant changes in advance, as section 13 describes.
1. Data controller
- Controller: LiPengyu, an individual based in HK
- Privacy contact: support@wokanhao.com
- Data protection officer: not appointed
2. Personal information we collect
2.1 Information you provide
- Account information, through third-party sign-in. When you sign in with Google, Facebook or Discord, the provider gives us your user ID with that provider and your display name. We do not receive or store a password, and we do not ask for your email address.
- Payment information. What you bought, the amount, whether it was paid, refunded and delivered, and the payment processor's order number. We do not store card numbers; card data is handled by the payment processor (section 5).
- Communications. The emails you send us and our replies.
2.2 Information collected automatically
- Game data. Your saved progress (your base, resources, tasks and settings), when it was saved, and your leaderboard scores.
- Device, network and log data. IP address, browser type, request times and error logs, recorded by our servers.
We do not collect location data, and we use no analytics or advertising trackers.
3. How we use your personal information
| Purpose | Legal basis |
|---|---|
| Providing the game: sign-in, saving progress across devices, leaderboards | Contract |
| Delivering purchases and keeping purchase records | Contract |
| Customer support | Contract / legitimate interests |
| Service notices (changes to the game, these terms or this policy) | Legitimate interests |
| Security, fraud and cheat prevention, including checking saves for impossible progress | Legitimate interests |
| Legal compliance | Legal obligation |
We do not use your personal information for marketing or profiling.
4. Cookies and tracking technologies
| Type | Purpose | Can be turned off |
|---|---|---|
| Strictly necessary | The fortcraft_session cookie keeps you signed in |
No |
| Functional | Browser local storage keeps your settings, such as sound volume, and some game data | Yes, by clearing site data in your browser |
| Analytics | None used | – |
| Marketing | None used | – |
5. Sharing and disclosure
We do not sell your personal information, including "selling" as defined by laws such as the CCPA. We share it only as follows:
- Service providers: our server hosting and backup storage providers, which store data on our behalf under confidentiality obligations. Payment card data is processed exclusively by our PCI-DSS compliant payment processor, Waffo Pancake, and is never stored on our servers.
- Sign-in providers: the provider you choose, to confirm who you are.
- Other players: your display name and scores appear on the public leaderboards. Nothing else about you is shown to other players.
- Legal and regulatory requirements: where required by law, court order or a lawful request from a competent authority.
- Transfer of the Service: if the Service is transferred to someone else, we will tell you in advance and the protections in this policy will continue to apply.
- With your consent: for any other purpose you have explicitly agreed to.
6. Data security
- Encryption in transit: all traffic uses TLS / HTTPS.
- No passwords: we never store a password, and sign-in session tokens are stored only as one-way hashes.
- Access control: only the operator can access the servers and the data on them.
- Payment data never passes through our servers.
If a security incident affects your rights, we will notify you through the game and this site, and the relevant authorities where the law requires, within 72 hours of discovering it.
7. How long we keep it
| Data | Kept for | Then |
|---|---|---|
| Account information, game data and leaderboard scores | While your account exists; 30 days after it is closed | Deleted |
| Purchase records | While your account exists; 2 years after it is closed, for refunds and chargebacks | Deleted |
| Support emails | 2 years after the conversation ends | Deleted |
| Server logs | 30 days | Deleted |
| Backups | 48 hours, overwritten hourly | Overwritten |
8. Your data rights
To use any of these rights, email us and tell us which sign-in provider and display name you use; we may ask you to confirm the account is yours. We respond within 30 calendar days.
| Right | What it means |
|---|---|
| To be informed | Know what data we collect and how we use it |
| Access | Get a copy of your personal information |
| Rectification | Correct inaccurate or incomplete information |
| Erasure | Have your data deleted, in certain circumstances |
| Restriction | Pause processing, in certain circumstances |
| Portability | Receive your data in a machine-readable format |
| Objection | Object to processing based on legitimate interests |
| Withdraw consent | Withdraw any consent you have given |
If you think we have not handled your data properly, you can complain to your local data protection authority.
9. Marketing communications
We do not send marketing messages. We do not have your email address unless you write to us, and we use it only to reply.
10. International data transfers
Our servers and service providers may be located outside your country. When personal data from the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses in our providers' data processing terms.
11. Children's privacy
The Service is meant for users aged 13 and over. We do not knowingly collect information from children under 13. If you believe a child under 13 has given us information, email us and we will delete it promptly.
12. Third-party links and services
The Service links to third-party services, such as the sign-in providers and Waffo Pancake's checkout. This policy covers only the information we collect ourselves; please read those services' own privacy policies.
13. Changes to this policy
We will announce significant changes in the game and on this page at least 15 days before they take effect, and update the "Last updated" date above. Continued use after that means you accept the changes.
14. Contact us
- Privacy and support: support@wokanhao.com
- Operator: LiPengyu, HK
- We reply within 2 business days.
LiPengyu · https://fortcraft.wokanhao.com