Privacy Policy

The following data is stored on our servers when you create and use an account:

• Email address — used to verify your account, recover your password, and for enforcement (e.g. bans). It is required to register.
• Username — your public display name in the game services.
• Password — stored only as a one-way bcrypt hash. The original password is never stored or readable by us.
• IP address — recorded on registration, login, and verification for abuse prevention and security.
• Account status — verification state, ban state and expiry, and whether your account has developer access.
• Game statistics — your progress in each game, such as level, prestige, XP and credits, which you can view and edit in your Account Settings. The games also record statistics of their own, which are stored with your account too. Not all of these are documented, so we only show the ones we can reliably interpret.
• Friend relationships — for each game, the players you are friends with, pending friend requests you sent or received, and players blocked between you.
• Text messages — in Assassin's Creed Brotherhood, the in-game messages you send and receive, so they can be delivered when the recipient comes online.
• Logs — our services (this website and the game servers) create logs, which we store for security and troubleshooting. They record events such as registering, logging in, changing your password and using the game services, and can include the time, your username, email address and IP address.

• Session cookie — an opaque, server-side identifier that keeps you logged in. It contains no personal data itself.
• Cookie consent — a cookie named animus_cookie_consent remembers your privacy choice so we don't ask again.
• Theme preference — if you allow preferences, your chosen light/dark theme is saved in your browser's localStorage. This stays on your device and is never sent to us.

We only send transactional emails related to your account. There are exactly three, and each one is sent only after you trigger it:

• A verification code when you register. Sent once, to the address you signed up with, so we can confirm it is yours before the account is created. The code expires after 24 hours.
• A password reset link when you request one. Sent only in response to a reset request from the login page, and it stops working after one hour or one use, whichever comes first.
• A copy of your account data when you ask for it. Sent when you use the data request option in Account Settings. It contains your account details — username, email, account ID, signup date and IP, and your verified, banned and developer status — your friend relationships in every game, and your Assassin's Creed Brotherhood text messages. Other players appear in it by username only. This is the only email that carries your data, and it goes to your own address only.

Every one of these is sent by us alone, to your own address, and none of them is triggered by anyone else. We do not send marketing or advertising emails, and we do not use a third-party mailing or analytics service.

• To create and secure your account and keep you logged in.
• To verify ownership of an email address and prevent abuse.
• To operate the multiplayer services for Assassin's Creed Brotherhood, Revelations & III.
• To enforce our rules (e.g. issuing or lifting bans).
• To keep logs that let us investigate abuse and security incidents and troubleshoot problems with the services.

We do not publish, share, sell, or process your data with any third parties. All of it is stored solely to provide you with these online services.

• You can request a copy of your data from your Account Settings (GDPR data export).
• You can delete your account and purge your data at any time from your Account Settings.
• You can change or withdraw your cookie preferences anytime using the cookie button at the bottom-left of the screen.

Your account data is kept for as long as your account exists. If you delete your account, your personal data is removed. Pending (unverified) registrations that are never verified expire automatically and are cleaned up after a short period. Logs are kept separately from your account and only for security and troubleshooting; they are not removed when you delete your account.