Privacy Policy

This policy describes how the DC Eternal Defense project handles information when you use the game, its website, account services and support. Contact the project team at dcreternaldefense-support@googlegroups.com.

DC Eternal Defense is an independent project developed by fans to help keep a game loved by its community alive. It is not affiliated with or endorsed by the original developers, publishers or rights holders. This policy describes this project's data practices, not those of the original game.

Account and game information

Our server stores your account identifier, username, a password hash when you create a password-based account, login sessions, game progress, inventory, matches and actions needed to operate the game. New accounts require a verified recovery email. Existing accounts can add and verify one in Settings. Network addresses and request information are used for security, rate limiting and service operation. The payment system uses your approximate country to determine currency.

Signing in with Google

Google sign-in requests the openid, email and profile permissions. Google may include your email address and basic profile information in the identity response. Our current integration verifies that response and stores your Google account's unique identifier to recognize your game account. When creating a new game account with Google, we also store its verified email for recovery. Existing accounts are never merged solely because their emails match. The integration does not store your Google profile name or photo, does not request offline access, and does not store Google access or refresh tokens. It does not request access to your Gmail messages, contacts or Drive files.

Google identity information is used only for sign-in, account linking and recovery. It is not sold or used for advertising. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can revoke the Google connection through your Google Account settings. Revoking it does not by itself delete your game account or necessarily end an existing game session.

Verification and password recovery

Resend delivers account confirmation and password recovery emails on our behalf. It processes the recipient email address and the message needed to deliver a short-lived, single-use code. The game stores a hash of the code and its expiry, never the plaintext code. Changing your password revokes existing game sessions. Do not share confirmation codes with anyone.

Payments and support

Stripe processes checkout and payment information. The game stores order references, purchased items, amounts, currency and payment, refund or dispute status to deliver purchases and handle abuse. Card details are entered on the payment provider's checkout, not stored by the game server. Google Groups handles messages sent to our support address; support conversations and the member list are restricted to the group's owner. Do not send passwords or verification codes to support.

Visibility and service providers

Your in-game name and gameplay information may be visible to other players through matches, rankings and social features. Account credentials and Google identifiers are not intended to be public. Hosting providers process information needed to run the service; Google and Stripe process information for their respective services. We may disclose information when necessary to comply with applicable legal obligations or protect accounts and service security.

Data on your device

The browser, Android app and Windows app cache game files to reduce downloads. They also store preferences and session credentials so you can remain signed in. Use Sign out on shared devices. Clearing local storage may remove cached files and your local login, but does not delete server-side progress.

Retention and your requests

Account and progress information is kept while needed to provide the game. You may contact support to request access, correction or deletion, subject to verification that the account is yours. The implemented deletion process removes account profiles, recovery email, sessions and linked Google identity; purchase references and opponent history may retain a non-reassignable account identifier. Operational backups are retained on a rolling schedule of approximately seven days. Some records may need to be retained for payment disputes, security or applicable legal obligations.

Updates

We will update this page when our data practices change and show the effective date above.

Terms of Use