1. Scope
This policy explains how Rey handles information when you visit openrey.com, create an OpenRey account, use account recovery, or make a future direct ReyGame purchase.
2. Information you provide
- username and email address;
- date of birth and country selected during registration;
- password information stored as a salted cryptographic hash, not as the password you typed;
- support messages and files you choose to share; and
- purchase references, product ownership, amount, currency, status, and refund information for future direct purchases.
3. Information collected automatically
- session identifiers stored in an essential secure cookie for up to 30 days;
- browser user-agent information associated with a login session;
- hashed network identifiers used to limit abusive registration, login, verification, and password-reset attempts;
- technical request, security, and browser information processed by Cloudflare.
4. How information is used
- create and secure accounts;
- maintain login sessions;
- verify email addresses and reset passwords;
- prevent fraud, spam, and abuse;
- process and reconcile purchases, refunds, and ownership;
- deliver future downloads and updates;
- respond to support and privacy requests; and
- comply with legal, tax, accounting, and security obligations.
5. Service providers
Information may be processed by services needed to operate OpenRey:
- Cloudflare for hosting, database infrastructure, network security, and Turnstile verification;
- PayPal for future payments, refunds, and payment verification. Rey does not receive your full payment-card number;
- Resend, only when transactional email is configured, to deliver account-verification and password-reset messages; and
- Patreon when you choose to access historic release posts or membership content there.
External community links such as Discord, X, and YouTube operate under their own privacy policies.
6. Cookies
OpenRey uses an essential session cookie to keep you signed in and protect account access. It is marked Secure, HttpOnly, SameSite=Lax, and is not used for advertising. PayPal and Cloudflare may set their own cookies when their payment or security interfaces are loaded.
7. Retention
Account information is kept while the account remains active or while it is needed to provide the service. Expired sessions and temporary verification or reset records are cleaned up periodically. Purchase, refund, and ownership records may be retained longer for delivery, fraud prevention, accounting, and legal obligations.
8. Sharing and sale of data
Rey does not sell personal information or use it for third-party advertising. Information is shared only with service providers described above, when you request it, to protect the service, or when required by law.
9. Game and debug data
Historic ReyGame builds store saves, settings, player state, and debug logs locally on your device. Debug information is not automatically sent to Rey. It is shared only if you choose to submit it for support. Review logs before sharing them.
10. Your choices and requests
You may request access to, correction of, or deletion of your account information through the support page. Certain purchase or security records may need to be retained when required for legal, accounting, fraud-prevention, or dispute purposes.
11. Security
OpenRey uses HTTPS, hashed passwords, hashed session tokens, secure cookies, request limits, and payment-webhook verification. No system can guarantee absolute security, so use a unique password and report suspected unauthorized access.
12. Changes and contact
This policy may change when ReyGame, account services, or payment providers change. The updated date will appear at the top. Privacy questions and requests can be started through the support page.