Privacy & cookies
Last updated: 24 September 2026
Who is responsible
The controller of your personal data is , . Contact: . For the payment itself, Onelink (a Stripe company) is a separate controller under its own privacy policy.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| The name, message, champion and capital city you choose | Shown publicly on the site and in the pictures, videos and posts it makes about reigns — that is the service you buy. We ask for a nickname rather than your real name, and you can pick "Atlantis" instead of a real city. | Contract |
| Your email address (you give it to Onelink at checkout; it is passed to us only if you leave "Email me once if someone overthrows me" ticked) | To send you one email when you are overthrown. We keep the address only while you rule (or wait in a siege) and delete it the moment you are overthrown, as that email is sent. To recognise you if you take the crown again (dynasty numbers, The Avenger title) we keep only a one-way fingerprint of it, which can't be turned back into your address. Never shown publicly. If you untick the box we keep neither. | Contract; legitimate interests (recognising returning rulers) |
| Payment details, and the name and billing address asked for at checkout | Handled by Onelink, which sells your purchase to you and needs your address to work out sales tax. We never see your card details and don't keep your billing address on our site. We can see the payment record in our Stripe account. | Contract; legal obligation (tax records) |
| Reports you send about a name or message: the reason and any note you add | To check the report and hide content that breaks the rules. We don't record who sent it. Handled reports are deleted after 90 days. | Legitimate interests; legal obligation (Online Safety Act) |
| A random number for each open page (never saved on your device) | To count, live, how many people are watching. It does not identify you and is gone when you close the page. | Legitimate interests |
| Technical logs, including IP addresses, kept by the companies that host the site | To deliver the pages and keep their services running and secure. | Legitimate interests |
We don't use your data for automated decisions about you, don't sell it and don't use it for advertising. The service is not aimed at children.
Who we share it with
Only the services that run the site: Stripe and its Onelink service (payments, receipts and sales tax), Supabase (our database, in London), Resend (sends the one email), OpenAI (checks names and messages for abusive content before payment; it receives only the name and message, never your email), Google (Analytics, only if you allow it), Hostinger (web hosting) and jsDelivr (delivers some scripts and the map outline, and sees your IP address when your browser fetches them). If we post crown changes on Discord or X, those posts contain only the public name and city. Fonts are served from this site itself.
Some of these providers process data outside the UK, mainly in the United States. They do so under the safeguards UK law requires, such as the UK–US data bridge or the UK's standard data-transfer clauses.
How long we keep it
- Public reign details (name, message, champion, city, times) are kept as part of the site's history. You can ask us to hide them at any time.
- Your email address is deleted as soon as you are overthrown (when the one email is sent). The fingerprint used to recognise returning rulers is deleted automatically two years after your last reign ended.
- Payment records stay in our Stripe account for as long as tax law requires us to keep business records (at least five years after the tax year's filing deadline).
Your rights
You can ask to see, correct or delete your data, to restrict or object to its use, or for a copy of it, by emailing . To stop the overthrown email, untick the box when you buy, or email us while you rule. We reply within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk).
Cookies and storage
We use no advertising or profiling cookies, and we never share what we measure with advertisers. We do count visits with Google Analytics, but only if you allow it: the bar at the foot of the page asks first, nothing is loaded or stored until you answer, and "No thanks" is remembered. What Google Analytics receives is the page you looked at, roughly where in the world you are, your browser and device, and which site sent you — never your name, your message or your email address. Our legal basis is your consent, which you can withdraw at any time by clearing this site's data in your browser; the bar will then ask again.
The site saves a few small settings in your browser's local storage, only so it works the way you expect:
| Item | Purpose |
|---|---|
| crown-sound, crown-tab | Remember whether you turned sound off and which leaderboard you were looking at. |
| crown-my-reigns, crown-tokens | Remember which reigns you paid for in this browser, so you can use the ruler's buttons and defend your throne. |
| crown-cup-celebrated | Remember that you've already seen this week's Nation Cup celebration, so it isn't shown again. |
| crown-consent | Remember your answer to the cookie bar, so you are only asked once. |
| _ga, _ga_… (cookies, only if you allowed it) | Google Analytics: tell repeat visits from new ones. They expire after two months. |
Stripe may set its own cookies inside the payment window, to process the payment and prevent fraud; see Stripe's privacy policy.
Changes
If we change this notice we'll update the date at the top.