OkichiMS is a non-commercial fan project run by The OkichiMS team.
Contact for anything on this page: contact address coming soon (until then, a staff member in game).
What we store
- WhyTo run your game and website account. The password is stored only as a bcrypt hash, never in readable form.
- How longUntil the account is deleted
- WhyEmail: account recovery and replies to your requests. Birthday: the game asks for it to confirm character deletion.
- How longUntil the account is deleted
- WhyThat is the game: your in-game progress.
- How longUntil the account is deleted
- WhySecurity and fair play: enforcing bans, limiting multi-account abuse of rewards (for example party quest coins per connection).
- How longWhile the account exists; ban records as long as the ban applies
- WhyTo give vote rewards and enforce “one rewarded vote per connection per day”.
- How longIP addresses are erased after 90 days; the rest of the vote history stays with your account
- WhyTo fix bugs and give bug bounty rewards. Only staff can read reports; exploit reports are never made public.
- How longUntil the account is deleted
- WhyInvestigating cheating, scams, harassment and lost-item reports.
- How longAbout 3 months, then the log files are deleted
- WhyRate limiting against password guessing and spam.
- How longOnly in the website's memory, never written to disk; counters expire after 15 to 60 minutes
Who else sees your data
GTop100When you click Vote you go to their site, where their own privacy policy applies. We send them your account name (in the vote link); they send back the vote result and your IP address.
Our hosting providerStores the server and its database on our behalf.
No payment dataWe take no payments: donations are not open.
Nobody elseWe never sell your data or share it, except where the law requires it.
Legal basis (GDPR)
- Account and game data: to provide the service you signed up for (Art. 6(1)(b) GDPR).
- IP addresses, MAC addresses and hardware IDs: our legitimate interest in keeping the game secure and fair (Art. 6(1)(f) GDPR).
- Optional fields: because you chose to give them.
Your rights and deleting your account
Copy, correct, object, deleteAsk for a copy of your data, a correction, an objection to its use, or deletion of your account.
How to askWrite to contact address coming soon (until then, a staff member in game) from the email on your account, or include your account name and be ready to prove you own it (for example by logging in to the website or game while talking to staff). We answer within 30 days.
What deletion removesThe account, its characters and items, and its vote and reward history. A banned account's name and the identifiers needed to enforce the ban may be kept for as long as it applies.
ComplaintsYou can also complain to the data protection authority in your country.
Security, children, changes
SecurityHTTPS only, passwords hashed with bcrypt, and the database can't be reached from the internet. No system is perfectly secure, so use a password you don't use anywhere else.
ChildrenUnder 16? Please ask a parent or guardian before creating an account.
ChangesIf we start storing something new, we update this page and its date first. See also the server rules.