MonMMO

Privacy policy

Version: 2026-10-24.1 · Effective 24 October 2026

Information and purposes

  • Account details: account ID, username, verified email, password hash and verification timestamps let us identify you, protect sign-in and recover access. We process the password you enter to verify it; stored account credentials use a hash rather than a readable password.
  • Account security: sessions, temporary verification and reset records, and connection IP addresses support sign-in, email changes, recovery and limits on abusive requests. Stored session and email tokens use digests. Email addresses are processed when you request verification, including before an account is created.
  • Agreement records: signup or an explicit later agreement records the account, acceptance time and exact Terms, Code of Conduct and Privacy Policy versions. The Privacy Policy entry records acknowledgement, not permission for unrelated uses of your information.
  • Eligibility declaration: we record your self-declared eligibility confirmation, its server timestamp and declaration version with the pending email verification and, when completed, with your account. New signup keeps the original declaration time from before email verification separately from the final policy acceptance time. First-time email linking keeps the declaration and agreement times from that linking request; it does not backfill a historical declaration for an older account. This signup and linking process does not collect your date of birth or identity documents and does not verify your age or a parent or guardian's permission.
  • Beta access: we record beta-code redemptions, the code identifier and label, the linked account and redemption time, and your game-access status. Authorized account administrators can review the association with your current verified email and record access changes with the acting administrator, time and reason.
  • Game information: characters, progress, inventory and other saved game state let the shared world function. Game chat messages—including whispers and the original text of messages blocked or masked by the chat filter—may be recorded and reviewed by authorized administrators for moderation, support and investigating abuse. Chat records include the message, time, channel, sender and, for delivered whispers, recipient.
  • Reports and contact: information you submit in bug reports, contest entries or correspondence helps us respond and run those features. Do not include passwords, recovery links or other people's private information.
  • Technical information: connecting to the website or game exposes connection details, including your IP address, to the systems serving it. We use connection information to limit abusive requests. Service error logs help diagnose failures, and staff-action records identify administrative changes and access to game chat logs for security and accountability.
  • Team applications: when you apply through Join the Team, we store your account association, verified email at submission, preferred name, chosen contact method, any Discord handle, intended role, answers and optional experience, portfolio link and availability. Authorized administrators review applications and record status changes, private notes, reviewer identity and times. Applications are not public. You can view your submitted answers and status; internal review notes are not shown to applicants or ordinary forum moderators.

Account verification and recovery messages serve the action you requested. Registering does not opt you into promotional email. Any future marketing choice must be optional and separate.

Public information

Other players can see character names and activity made visible by game features. Public rankings and world information display selected game information. Bug report listings can display the reporter name, title and report text. Do not use public reports to send private account or security information.

Your account email is private account data and is not included in public rankings. Linking an email to an existing account keeps the same account and characters; it does not create a separate public profile.

Forum: your chosen public forum name, topics, replies, posting times and forum role are visible to everyone, including people who are not signed in. Your forum profile is linked internally to your game account; public forum responses do not include your login username, email or account ID. Choose a public name you are comfortable sharing. We keep previous forum names and change times to enforce the 90-day change limit, reserve names against impersonation and investigate abuse. Authorized account administrators can review this history alongside the associated account and verified email. Name history and account email are not part of public forum responses or ordinary forum moderator access.

Forum setup records your agreement and eligibility declaration, the document versions and the time alongside your forum profile. It does not rewrite the agreement history of an older game account.

Reports and moderation reasons are not public. Authorized forum moderators and administrators can review reports, including the reporter’s public forum name, and hidden content to investigate abuse. We store forum restrictions and an audit record of staff actions. Hiding a post removes it from public forum views; it does not delete the stored record or copies someone else may have made. Forum moderators do not receive account settings or private support tickets through their forum role.

Providers and storage

Authorized MonMMO staff use account information to administer accounts, provide support, and investigate issues. Hosting and network providers, including Cloudflare for website hosting and delivery, process information needed to operate these services.

When account email is enabled, Resend processes recipients’ email addresses and message content, including verification and recovery links, to deliver those messages.

Our website uses Google Fonts, which receives connection information, including your IP address, when your browser loads fonts. External services such as Discord and Ko-fi have their own privacy policies. Contest participation is subject to separate contest rules.

For privacy questions, contact founder@monmmo.com.

Your browser

The account portal uses a session cookie to keep you signed in. Its configured maximum lifetime is seven days; signing out ends that website session. Verification and recovery links expire after 30 minutes and can be used once. The account page does not save your email, password or email-link token in browser local storage or session storage.

Blocking the account cookie prevents persistent website sign-in. The sprite editors use browser local storage for saved artwork, projects, recent colors and editor settings. You can clear this through your browser's site-data controls, which also removes locally saved work. Token expiry limits access; it is not a promise that all related records have already been deleted.

Retention

We retain personal information for as long as reasonably necessary to operate your account, preserve game progress, provide support, protect the service, and meet applicable legal obligations. Retention depends on the information’s purpose and any unresolved security issue or dispute. You may request deletion by contacting founder@monmmo.com.

You can request whole-account deletion at the bottom of account settings. You must enter your current password and confirm the request. Once accepted, website and game access are disabled and existing sessions and recovery links are revoked. You have 30 days to cancel using your game username and current password through deletion status and cancellation. Cancellation requires a new normal sign-in and does not remove other account restrictions.

After the displayed deadline, permanent deletion removes private account credentials, email and profile data, account-owned support and application content, and characters and game progress. Shared forum and review records retain their structure with the departing account’s own content removed. Deletion may be delayed while a service is unavailable or shared obligations need to be resolved; check deletion status rather than assuming that processing has completed.

Shared history, copies received by other players, moderation records, operational logs and backups may remain under the retention purposes above. Existing mail, game history and other immutable world records may retain historical names. Minimal unusable account or profile records and necessary audit references may remain to preserve shared records and accountability. Deletion does not promise to erase every historical reference or a copy held by someone else. No fixed backup or log deletion deadline is promised by this account-deletion process.

Choices and requests

Account settings let you change your password, verify a replacement email, sign out website sessions, manage your public forum name and redeem a beta code for game access. An existing account needs a verified email for website recovery; replacing it requires verification of the new address.

For questions or requests to access, correct, export or delete your information, contact founder@monmmo.com. Describe the request without sending a password or recovery link. A request may require a safe identity check. Whole-account deletion is also available in account settings as described above. Export and other requests use this contact route.

Children

MonMMO is for players aged 13 and older. If you are below the age of majority where you live, you must review these Terms with a parent or legal guardian and have their permission to play. Children under 13 may not create or use an account, even with parental permission. We may suspend accounts that do not meet these requirements.

The eligibility confirmation is a self-declaration. If you have an underage account concern, contact founder@monmmo.com privately without including identity documents, a full date of birth, passwords or recovery links.

Changes

Acknowledging this notice means you have been shown the explanation of data handling. It does not waive your rights or authorize unrelated future collection. Material changes need a clear notice and, where required, a separate choice. New published versions will identify their effective date.