1. About this notice
This notice covers BlackWood Protocol and its game features. The people operating BlackWood Protocol are responsible for the account information used to run the service. Contact the game’s administrator through the contact page about privacy or your account.
The game is for people aged 18 and over. If you believe an under-18 has registered, report it privately so we can investigate, close a confirmed underage account and address its personal information.
2. Information the game uses
- Account details: your email address, callsign, password hash and verification or password-reset records. Passwords are stored as hashes, not readable passwords.
- Game activity: progress, actions, inventory, rankings, faction membership and recent activity used for online status.
- Community content: profile details, forum posts, private messages and images you submit.
- Security records: IP addresses, login attempts, session information and relevant technical logs.
- Support and moderation: requests, reports, appeals and relevant action records. Reports may come from other players.
Required account details let us create and secure your account. Without them, we cannot provide a new account. Optional profile content and uploads are your choice.
3. Why we use it
We use account and game information to provide the service you request under our agreement with you. We use security, support and moderation records for our legitimate interests in keeping the game secure, fair and working, while considering players’ rights. We also use or retain information when necessary to meet a legal obligation.
Verification and password-reset emails are account messages. They are not a subscription to marketing.
4. What other people can see
Other players can see your callsign and the profile, activity or content made visible by each feature and its privacy settings. Your account email is not displayed as part of your public profile. Content you share with others may be copied by them.
Private messages are intended for their participants. Authorised staff can access stored messages when needed for support, moderation or security; they are not end-to-end encrypted. Do not use game messages to store sensitive information.
5. Services used by the game
- Railway hosts the application, database and uploaded files.
- Resend processes email addresses and account emails to deliver verification and password-reset messages.
- Cloudflare Turnstile checks browser and connection information during registration to help prevent automated abuse.
- Google Fonts supplies the site’s fonts; your browser contacts Google to load them.
These providers may process information outside the UK. Their privacy information describes their processing: Railway, Resend, Cloudflare and Google. Contact us with questions about the game’s use of these services.
If you follow a Discord link, Discord’s own privacy policy applies there. Player-supplied external images or links may also contact other websites when opened or loaded.
Relevant information may be disclosed where legally required, or where lawfully necessary to investigate abuse or protect people and the service.
6. Cookies and browser storage
The essential bwp_session cookie keeps you signed in. It has a two-hour inactivity lifetime which refreshes while you use the site. Blocking it prevents normal sign-in. Logging out clears it.
The registration security check processes browser information to detect abuse. If you install the game as an app, its service worker stores an offline fallback; it does not cache your live balances or game actions.
7. Keeping and removing information
Account and progress records are kept to maintain your persistent game account. Security, support and moderation information may be needed to investigate abuse, resolve disputes or meet legal duties. How long it is needed depends on the purpose, whether an incident remains unresolved and any applicable legal requirement.
Contact us to request account closure or deletion of personal information. We will assess what can be deleted or anonymised and explain any lawful reason to retain information. Shared posts and conversations may require separate consideration because they also involve other players. Backup copies may remain until the relevant backup expires.
Character death, a progress reset and deleting something from a mailbox are not the same as asking for all personal information to be erased.
8. Your rights
Depending on the circumstances, you can ask to access, correct, erase, restrict or receive a portable copy of your personal information.
You can object to processing based on legitimate interests. We will consider your request and explain whether there are lawful grounds to continue. If we rely on consent for a particular use, you can withdraw that consent.
Use the contact page to make a request. We may need proportionate information to confirm your identity. We normally respond within one month and will explain if a lawful extension or exception applies. You do not need to post personal information in a public forum.
You can also complain to the UK Information Commissioner’s Office.
9. Changes to this notice
We will update this page when the game’s use of information changes and draw material changes to players’ attention. The date above shows when this notice was last updated.