Dextrata Software Inc.
Privacy Policy
Effective: 29 September 2026 · Last updated: 29 September 2026 · Version 1.0
Dextrata Software Inc. is responsible for the personal information collected through Dusk Lord Online. We collect as little as a multiplayer game can run on. We do not sell personal information, we show no advertising, and the game sends no analytics or telemetry.
The short version. To play you choose a username and password; we do not ask for your email or real name. We store your password only as a salted hash, and your game progress on our servers. The game connection is not encrypted, so use a password you use nowhere else. Your age check answer stays on your own PC. Chat is not stored. The website sets no cookies and loads nothing from Google. To have your data deleted, write to [email protected].
1.Who we are and how to reach us
| Organisation | Dextrata Software Inc., British Columbia, Canada |
|---|---|
| Privacy contact | [email protected] — start the subject line with PRIVACY REQUEST — |
| Applies to | The Dusk Lord game client and updater for Windows, our game servers, and dusklord.com |
Under Canadian privacy law we are the organisation accountable for your information; under the GDPR and UK GDPR we are the controller; under US state privacy laws we are the business.
2.What we collect
2.1 Information you give us
| Category | What it is | Where it is kept |
|---|---|---|
| Account | Your username; a salted hash of your password (PBKDF2-HMAC-SHA256 with a random per-account salt — we never store the password itself); when the account was created; and the version of the Terms you accepted and when. | Our game server |
| Character and names | Character name and appearance, and the names of guilds and settlements you create. | Our game server |
| Things you write | Chat, in-game mail, forum posts, and Ideas board submissions and votes. See Section 6 for which of these are kept. | Our game server |
| Correspondence | Emails you send us, and what they contain. | Our email provider |
| Purchases, if offered | The account, item, price and payment processor's transaction identifier and result. Card details go straight to our processor; we never receive them. | Our game server |
2.2 Information created as you play
| Category | What it is |
|---|---|
| Game state | Your character's position, level, skills, inventory, equipment, gold, quests, settlements, guild membership, friends list, auction listings, ladder standing, and when you last signed in. |
| Connection | Your IP address, which our game server holds in memory for as long as you are connected, to run the connection and to rate-limit sign-in attempts. The game server does not write it to a log or keep it after you disconnect. |
| Website requests | Like any website, the servers that deliver dusklord.com and the game download receive your IP address, browser type and the page or file requested, and may record them in standard server logs used for security and troubleshooting. |
2.3 The age check
Before you create an account, the game asks for your birth month and year. The game works out on your PC whether you are under 13, 13 to 17, or an adult, and does not send your date of birth to us or keep it. It saves only the result ("adult" or "minor"), or, if you are under 13, the time of the refusal so the check is not immediately retried, in a small file on your own PC (see Cookies & Local Files). If you buy something, we may ask you to confirm that you are 18 or over and record that answer against your account.
2.4 What we do not collect
We do not ask for your email address, real name, postal address or phone number. The game sends us no analytics, telemetry, crash reports or hardware details, and does not read your contacts, microphone, camera or precise location. We do not collect payment card numbers, government identifiers, or sensitive information such as health, religion or political views — please do not send us any, including in chat or on the Ideas board.
2.5 Google sign-in
The live game does not currently offer Google sign-in. If we offer it later and you choose it, Google will tell us your Google account identifier, email address and name; we would keep only the identifier and the name you choose in the game, and update this policy before switching it on.
3.Why we use it, and our legal bases
| Purpose | Information | GDPR basis |
|---|---|---|
| Create your account and sign you in | Account | Contract |
| Keep children under 13 out and limit purchases to adults | Age check result | Legal obligation; legitimate interests (protecting children) |
| Run the world, save your progress, show you to other players | Game state, character and names | Contract |
| Chat, mail, forum, guilds, trade and the Ideas board | Things you write, names | Contract |
| Process purchases and keep tax records | Purchases | Contract; legal obligation |
| Security, preventing abuse and cheating, enforcing the Code of Conduct | Connection, website requests, things you write | Legitimate interests (protecting the game and its players) |
| Answer your questions and requests | Correspondence | Contract; legal obligation |
| Comply with the law | Any, as needed | Legal obligation |
Under Canadian law (PIPEDA and BC PIPA) we rely on your consent: express when you create an account or make a purchase, and implied where a use is obvious from playing the game. Where we rely on legitimate interests you may object; see Section 8. We do not use your information for advertising, sell it, or use your content to train machine-learning models.
4.Who we share it with
| Recipient | Role | What they receive |
|---|---|---|
| DigitalOcean, LLC | Hosting | Our game servers and website run on DigitalOcean in Toronto, Canada, and the game download is served from DigitalOcean storage in New York, United States. They host all the data described above. |
| Helcim Inc. (Canada) | Payment processor, only if you buy something | The card and billing details you enter on their checkout page. We receive only the result and a transaction identifier. |
| Our email provider | Messages you send to [email protected]. | |
| Professional advisers | Legal, accounting, insurance | Only what a particular matter needs. |
Other players. Your username, character name and appearance, chat, mail and forum posts you send, guild and settlement names, Ideas board posts, and what your character does in the world are visible to other players. Treat them as public, and do not put your real name or other personal details in them.
Legal and corporate. We may disclose information where the law or a valid legal demand requires it; to establish or defend legal claims; to prevent fraud, abuse or a threat to someone's safety; or to a buyer as part of a merger, financing or sale of assets, who must honour this policy or give you notice and a choice.
5.International transfers
We are based in Canada and our game servers are in Toronto. Downloads are served from New York, and some of our providers may process data in the United States or elsewhere, where courts and authorities may be able to access it under local law. For transfers from the EEA or UK we rely on the European Commission's adequacy decision for Canada, and otherwise on Standard Contractual Clauses (with the UK Addendum where needed). Ask us for a copy at [email protected].
6.How long we keep it
| Information | Kept |
|---|---|
| Account and game state | While the account exists. We may delete an account that has not signed in for 24 months. |
| Chat | Not stored. Messages are passed to the players who should see them and then discarded. |
| In-game mail and forum posts | Only in server memory; lost when the server restarts. |
| Ideas board submissions and votes | Until removed, or until the account is deleted. |
| IP address on the game server | Only while you are connected. |
| Website server logs | Only as long as needed for security and troubleshooting. |
| Purchase and tax records | As long as tax and accounting law requires (generally six years in Canada). |
| Correspondence | As long as needed to deal with it, and any related legal need. |
| Age check result | On your own PC, until you delete it (see Cookies & Local Files). |
We may keep information longer where the law requires it, or to resolve a dispute or enforce our agreements. Deleted data may remain in backups for a short time before they are overwritten.
7.Security
Passwords are stored only as salted PBKDF2 hashes. Sign-in attempts are rate-limited. The updater downloads the game over HTTPS and checks every file against a SHA-256 hash before installing it. Access to our servers is limited to the people who run them.
The game connection is not encrypted. The Dusk Lord client talks to our game servers over a plain network connection. Everything sent between them — including your username and password when you sign in, your chat, mail and forum posts, and your moves in the game — could be read by anyone able to watch the network in between, such as someone on the same public Wi-Fi. So: use a password you use nowhere else, do not put anything private in chat, mail or forum posts, and avoid signing in on networks you do not trust.
No system is perfectly secure, and we cannot guarantee the security of information sent to or stored by us. If a breach of security safeguards creates a real risk of significant harm, we will report it to the Office of the Privacy Commissioner of Canada and notify affected people as the law requires, and meet any GDPR notification deadline that applies. Because we do not hold email addresses, we will give such notice in the game and on this website.
8.Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you;
- Correct it if it is wrong;
- Delete it, subject to what the law requires us to keep — this closes your account;
- Portability — receive it in a structured, machine-readable format;
- Object to or restrict processing based on legitimate interests;
- Withdraw consent at any time (without affecting what was already done; some withdrawals mean we can no longer provide the game);
- Not be discriminated against for using these rights.
We make no decisions with legal or similarly significant effects about you by automated means alone.
How to ask. Email [email protected] with a subject line starting PRIVACY REQUEST —, your username, and what you want. Because we hold no email address for your account, we will need to confirm that the account is yours before acting — for example by asking you to sign in and do something in the game that we describe to you. We will answer within 30 days, or the period your local law sets, and tell you if we need longer. Someone you authorise may ask on your behalf with written proof.
Complaints. Please tell us first. You can also complain to the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia, your EEA or UK supervisory authority, or your state attorney general.
9.Children
Dusk Lord is not directed to children under 13 and we do not knowingly collect their personal information. The age check refuses anyone under 13, and players aged 13 to 17 need a parent or guardian's agreement. An age check is a good-faith measure, not identity verification, and can be defeated; if you believe a child under 13 is playing, tell us at [email protected] and we will delete the account and its information. A parent or guardian may ask to see, correct or delete a minor's information, or withdraw consent to its use. See also Terms of Service, Section 3.
10.Cookies and files on your PC
dusklord.com sets no cookies, uses no analytics or tracking, and loads no third-party fonts or scripts. The home page fetches the current version number from our own download storage, and a small panel of our other games from our company site, dextrata.com, which sets no cookies either. The game and updater keep a few files on your PC; the Cookies & Local Files page lists them. We do not track you across other sites, so there is nothing for Do Not Track or Global Privacy Control to switch off.
11.Other sites
The Service links to sites we do not control, such as dextrata.com and, if you make a purchase, Helcim's checkout. Their own privacy policies apply to them.
12.Changes to this policy
We may update this policy; the date above shows the latest change. If a change materially affects how we handle your information, we will announce it in the game and on this page before it takes effect, and ask for your consent where the law requires.
13.Contact
Dextrata Software Inc., British Columbia, Canada — [email protected].