Privacy & sign-in

Your account

We keep your account email, account identifier, verification status and game progress so you can sign in and return to your characters. Email-and-password accounts store a protected password hash rather than a readable password. We also keep account-security information, such as failed sign-in attempts, and information needed to answer support requests.

Character names, chat and other information you share in the game may be visible to other players. Game activity and support records may be reviewed by the team to investigate problems, enforce the rules and protect accounts. If you make a purchase, we keep the order, amount, payment status and transaction reference needed to deliver it and resolve payment questions.

Google and Discord sign-in

Google sign-in requests only your basic sign-in identity and email address (openid and email). We receive Google's account identifier, email address and whether that address is verified. We use these details to create your Mir Ametrine account on your first sign-in and find that same account when you return. We do not request access to your Gmail messages, contacts, calendar or Drive files.

Discord sign-in requests identity and email access. We receive your Discord account identifier, username, email address and verification status for the same purpose. Signing in does not give us access to your private Discord messages or permission to join servers for you.

We keep the provider's account identifier with your game account, and use a verified email when creating it. Provider access tokens are used during sign-in and are not saved. We never receive your Google or Discord password. We do not sell your Google or Discord account information or use it for advertising.

Each sign-in method has its own account. Using the same email address with another method does not combine your accounts or characters.

Remembering your sign-in

If you select Remember Details, Windows Credential Manager stores the password or a Mir Ametrine sign-in credential on your PC for that installation. Choose Forget on the saved-account list to remove that local saved login. This does not delete your game account.

You can remove Mir Ametrine's access in your Google or Discord account settings. That stops future browser authorisations, but does not delete your game account or cancel a Mir Ametrine credential already issued. Contact us if you also want your account data removed or saved access revoked.

Website, connections and diagnostics

Cloudflare hosts this website and serves game downloads. Our hosting and network providers process connection information, such as IP addresses and browser requests, to deliver and protect these services. This website does not itself store game passwords or sign you into the game.

The game can send technical error reports to help us fix crashes and connection problems. These include the game version, error type and limited game/network events. Automatic reports exclude passwords, chat text and raw message contents. You can turn them off using Send diagnostic reports in Settings > Game. Support-log uploads are a separate choice when dealing with a support ticket.

Why we use and share information

We use account and game information to provide the service you request. We use security, support and diagnostic information to keep the service working, prevent abuse and resolve problems. Payment records may also be needed to meet legal and accounting obligations.

Access is limited to the team and service providers needed to operate the game, website, sign-in, email delivery and payments. Google and Discord process sign-in under their own privacy policies. Cloudflare, our game-hosting provider and email providers process information needed for their services; payment providers process payments when you choose to use them. These services may process data outside your country. We may disclose information when required by law or to protect users and the service.

Keeping, accessing and deleting information

Account and game records are retained while the account is available, including between visits. There is no automatic deletion after a period of inactivity. If you request deletion, we review the account and any information that must remain for payment, security or legal reasons. Contact us for the retention details relevant to your account. Automatic error reports on the server are limited to 14 days; unsent reports on your PC are limited to seven days.

You can ask to access, correct or delete your personal information by emailing jamiem151@gmail.com. Include your account email and sign-in method, but no password. We may need to verify that you own the account. Depending on the law that applies, you may also have rights to restrict or object to processing, receive a portable copy of your data, or withdraw consent where processing relies on it. Some records may need to be retained for legal or security reasons.

If you are unhappy with how we handle your information, please contact us. You can also complain to your local data-protection authority, including the UK's Information Commissioner's Office.

We will update this page when our practices change, with the date shown above.