Security & privacy

We keep as little about you as we can, and we protect what we keep.

What we store

• Your Account ID and a hashed copy of your password.
• Your email address. We use it only to send your verification code and password-reset codes, and to tell you about something important on your account. No newsletters, no marketing, and it's never shown to other players.
• Your pirates and their progress: name, look, items, gold, quests, friends and crew.
• Reports players send about each other, so moderators can act on them.

We don't ask for your real name, birthday or any payment details, and we never sell or share data.

How we protect it

• Encrypted connection. Everything between the game and our server, including your login, is encrypted (TLS), and the game checks it is really talking to our server.
• Hashed passwords. Passwords are stored only as salted PBKDF2-SHA256 hashes, never as plain text. Even we can't read them.
• Verified emails. Every account confirms its email with a one-time code, so a forgotten password can be reset safely.
• Login limits. After 5 wrong passwords an account locks for 15 minutes, which stops guessing. Codes stop working after 5 wrong tries or 30 minutes.
• Locked-down server. Only the game port and the encrypted account service are open to the internet. Accounts are backed up every night.
• Fair-play checks. The server checks what the game client sends and only accepts the official build.

Keeping your account safe

• Use a password you don't use anywhere else.
• Staff will never ask for your password. Anyone who does is not staff.
• Only download the game from piratesonline.net.

Deleting your account

Email [email protected] or ask on Discord with your Account ID, and we'll delete it and its pirates.