Account privacy

This policy explains how Moonstone Royalty Productions uses information for Moonstone accounts, sign-in, connected services and related game access at moonstonerp.com. Contact [email protected] with privacy questions or account data requests.

Information used for your account

Registration uses your username, email address and password. We store a salted password hash, never your plain password, along with your email verification status. Google sign-in requests basic identity information: your Google account identifier, email address, verification status and profile information such as your name and profile picture. We use the identifier, email and name to create or recognize your Moonstone account and sign you in. Google may also provide your Workspace domain to help verify ownership of your email address. This sign-in integration does not request Gmail messages, contacts, Drive files or calendar access.

Storage and purpose

Our server stores your Moonstone account identifier, email, display name, verification and creation records, and identifiers and profile details for services you connect. These support authentication, account connections, development invitations and access to your selected game save. Google identity information is used for account authentication and connection management. Google access tokens are not stored in the account connection table.

Sign-in uses essential session and security cookies. Registration and password recovery links expire after 24 hours and can be used once. Development invitation links expire after 15 minutes. We store a hash of the verification token. Security controls also record request limits; when configured behind a trusted proxy, these can use your IP address. Hosting and network services may process request information to deliver and protect the website.

Optional connections and game features

Connecting Discord provides Discord identity information for FiveM features and existing role checks. Connecting Twitch provides Twitch identity information for Studders features. Connected identities may be associated with game progress, applications, support requests or development access when you use those features. Choosing a legacy Discord save keeps it separate from your Moonstone save. Preregistering for Moon Commanders stores your email, registration date, delivery status and subscription preference without requiring an account. We display the total number of unique subscribed emails, never the addresses. Your confirmation email includes an unsubscribe link.

Age screening and Guest saves

New account registrations and new Moon Commanders Guest saves ask for birth month and year before proceeding. The submitted date is used to determine eligibility and is not stored by the age-screening code. A signed security cookie keeps only the outcome, for one day after a passing answer or 30 days after an underage answer. This is a self-declared screen, not proof of identity. Existing accounts and saves have not all been age-screened.

A Guest save does not require an email or account. The server keeps a Guest identifier, save records, creation and expiry information, and a hash of the Guest credential. A browser cookie contains the credential used to resume that save. Linking a Guest save to an account associates the existing progress with that account. Clearing cookies or losing the installation can prevent recovery of an unlinked Guest save.

Service providers

Google processes Google sign-in requests. Resend processes recipient email addresses and confirmation, recovery, invitation or release messages to deliver email links. Cloudflare and the website hosting infrastructure process network requests needed to serve and protect the site. Discord and Twitch process connection requests when you choose to connect them. These services also have their own privacy policies. The account integration does not sell Google user data or use it for advertising.

Your choices and data requests

You can sign out, disconnect Discord or Twitch in account settings, and revoke Moonstone access through your Google account settings. Disconnecting a service does not delete your Moonstone account or stored game progress. To request a copy, correction or deletion of your account data, contact [email protected] from your account email address. We may need to verify ownership before handling a request.

Guest players can contact the same address without creating an account. Explain that the request concerns a Guest save; do not email a password, Guest credential or recovery token. The studio will need to establish which save the request concerns before changing it.

Account and game records remain stored until removed; disconnecting or revoking a provider alone does not erase them. Security, backup and other records may require separate review when handling a deletion request. Contact us for details about your records.

Changes

We will update this page when account data practices change. If Google data would be used for a new purpose, we will disclose that change and request consent before the new use.