Privacy policy

Who processes your data

The team that runs Bareking processes the data on this site; you can reach us at brayso198@gmail.com about anything. The game server and its database are hosted in Paris, France, so the data stays inside the European Union.

What we keep

Only what the game needs to work:

• Account: the player name you chose, an irreversible hash of your password (scrypt), your avatar colour, your sign-up and last login times, and your language.
• Game profile: your resources, buildings, army, fiefs, XP, bank account, market orders, kingdom membership and friend list.
• Session: a hash of the login token held by your browser, so we don't have to ask for your password every time.
• On your device: the login token and zoom setting live in your browser's local storage (w2d_token, w2d_zoom), your language in the bk_lang cookie and your cookie-box choice in the bk_consent cookie — these are needed for the site to work and measure nothing. Only if you accept Analytics are additional cookies starting with _ga stored. There are no advertising cookies at all.
• Server logs: the web server's access log keeps your IP address and request details for 14 days. Your IP is never written to the game database; during play it is held only in memory, to limit floods of requests from one connection.
• Guest play: if you play without signing up, we create an account named like Guest1234 with no password; you continue on the same device with the login token. If you play Bareking on a game portal (such as CrazyGames or Poki), the portal processes its own data under its own privacy policy.
• Email address (optional): if you add one, only the address you verify is stored. It's used only to verify the address, to reset your password and to tell you when the address changes; no ads or newsletters, and it's never shown to other players. Emails are sent from our own server and are not passed to an email delivery company.

Why we process it

To keep your account working, to run the game (production, war, market, bank) and to prevent abuse. The legal basis is performing the agreement made when you create an account; anti-abuse measures rest on legitimate interest. Chat, private messages and voice are not stored on the server — they are only relayed to the players online at that moment.

Voice chat

Voice chat is push-to-talk: audio is only sent while you hold T (players nearby) or Y (your squad), or the talk button on screen. Your browser asks for microphone permission the first time you talk. Your voice is relayed through our server only to the players who can hear it at that moment: players within 16 tiles for nearby talk, your squad members for squad talk. Audio is never recorded or stored; the server only passes it on. Players never see each other's IP addresses, and no other company is involved in voice. If you do not want to hear voices, turn voice chat off in the Account tab or with the V key.

Third parties

There are no ads, no social buttons and no externally loaded fonts on this site. We use Google Analytics to see how many people visit, but only if you accept it: unless you press "Accept" in the cookie box on your first visit, Analytics never loads, no cookie is written and no data reaches Google. If you accept, cookies whose names start with _ga are stored in your browser and data about your visit (including your IP address) is sent to Google. You can change your mind at any time through the "Change cookie choice" link at the bottom of every page. We do not sell your data and do not share it for marketing. The only other third party is the company hosting the server (Hostinger, France).

How long we keep it

The periods are:

• Your account and game profile stay until you delete them.
• Web server access logs are deleted after 14 days.
• Daily database backups are kept for 14 days, so a deleted account disappears from the backups within 14 days at most.
• Guest accounts that are not saved with a name and password are deleted, together with their game profile, after 30 days without play.
• Your email address stays until you remove it or delete your account. Verification links are valid for 24 hours and password reset links for 1 hour; expired links are deleted shortly after.

Your rights

At any time you can:

• Delete your account yourself from inside the game — the account, game profile, bank record, market orders, kingdom membership and friend list are removed for good.
• Ask what data we hold about you and request a copy.
• Have incorrect information corrected.
• Object to the processing and complain to us at brayso198@gmail.com. In the European Union you may also complain to your national data protection authority, and in Türkiye to the Personal Data Protection Authority (KVKK).

The 13+ age limit

Bareking is for ages 13 and over; under-13s may not create an account. If we learn that an account belongs to someone under 13, we delete it. If you notice such an account, write to brayso198@gmail.com.

Changes

If we update this text, the date at the top of the page changes. For an important change we also announce it inside the game.