Privacy Policy

1. Information we collect

We collect account information such as your username, a securely derived password hash, account and session identifiers, and information you provide to Support. We do not store your plain-text password.

When you play, we store the actions and records needed to operate the persistent world, including companies, balances, inventory, orders, trades, land, structures, infrastructure, progress, notifications, and multiplayer presence. We may also process technical information such as IP address, browser or device details, timestamps, request logs, security events, and diagnostic data.

2. Payments

Payments are processed by Stripe. Stripe collects and processes payment details under its own privacy terms. Mercantile OS does not receive or store your full card number or card security code. We retain limited payment references, amount, currency, status, and entitlement information so we can confirm access, prevent fraud, provide support, and handle refunds or disputes.

3. How we use information

We use information to create and protect accounts; provide and synchronize gameplay; run the player economy and multiplayer systems; deliver paid access; respond to support requests; detect abuse, fraud, and security problems; maintain and improve the service; comply with legal obligations; and enforce our Terms.

4. Sharing and service providers

We share information only as needed with service providers that help operate the game, including Stripe for payments and hosting, database, networking, security, and diagnostic providers. We may also disclose information when required by law, to protect players or the service, or as part of a business reorganization subject to appropriate safeguards. We do not sell players' personal information.

5. Cookies and local storage

The site uses an essential secure session cookie to keep you signed in. It may use browser session storage for short-lived checkout confirmation and interface state. These technologies are necessary for account access, security, and core game functions rather than advertising.

6. Retention and security

We keep account, gameplay, transaction, and security records for as long as reasonably necessary to operate the persistent game, maintain financial and legal records, resolve disputes, and prevent abuse. Retention periods can differ by record type. We use access controls, secure sessions, password hashing, encrypted transport, server-side payment verification, and restricted secret storage, but no online service can promise absolute security.

7. International processing

Service providers may process information in Canada, the United States, or other countries where they operate. Information may therefore be subject to the laws of those locations. We use providers and safeguards appropriate to the service and information involved.

8. Your choices and rights

You may ask to access or correct personal information associated with your account, request account deletion, or raise a privacy concern through the Support page. Some records may need to be retained for security, payment, dispute, legal, or legitimate operational reasons. Depending on where you live, additional privacy rights may apply.

9. Young players

Mercantile OS is not intended for children under 13, and we do not knowingly collect their personal information. A player who has not reached the age of majority where they live should use the service only with approval from a parent or legal guardian.

10. Changes and contact

We may update this policy as the game or legal requirements change. Material changes will be presented through the site with a revised date. Use the public Support page for privacy questions or requests.