Controller and contact
DarkDominion – Lead Developer / Server Administration. Contact: support@darkdominion.info.
General information and scope
Protecting personal data is important to us. These notices apply to the DarkDominion website, launcher, account system, support and game-related online services. Personal data are processed only where this is necessary to provide, secure and administer these services or where another legal basis applies.
What is personal data?
Personal data means any information relating to an identified or identifiable natural person. Examples include an email address, date of birth, IP address, account ID, username, pilot name, login data, technical usage data and the contents of a support request.
Website and account data
For registration, website login and account management, we process in particular username, pilot name, email address, password hash, account ID, language, account status, role and verification status.
Date of birth
The date of birth may later be used for age checks, birthday features and additional identity verification in case of account issues.
Login, session and account security
For authentication and security, IP address, login times, technically necessary session and CSRF data, rate-limit data and other security events may be processed. If two-factor authentication is enabled, the required 2FA status and secret key data are processed for verification.
Email verification and password reset
For email verification and password recovery, temporary verification or reset data and timestamps are processed. Verification links are currently valid for 24 hours and password-reset links for 30 minutes.
Support inquiries
When you use the website support form, the selected request category, your email address, the description and technical security data required to submit the form are processed. The inquiry is sent by email to support@darkdominion.info.
Game information
Progress, inventory, transactions, rankings and technical game events are stored as required for game operation.
Purposes and legal bases
Registration, account administration, login, password recovery, launcher access and game operation are processed to provide the requested service and to take steps related to the user relationship (Art. 6(1)(b) GDPR). Security and abuse prevention may be based on legitimate interests (Art. 6(1)(f) GDPR); legal obligations on Art. 6(1)(c) GDPR.
Recipients and service providers
Where technically necessary, personal data may be processed by the hosting provider STRATO and by the email service used for account, verification, password-reset and support messages. Personal data are not sold.
Storage periods
Account data are generally retained while the account exists and as long as required for operation, security or legal obligations. Temporary verification and password-reset data expire after their stated validity periods. Support emails and security logs are retained only as long as necessary for their respective purpose or applicable legal obligations.
Cookies and technically necessary storage
The website uses a technically necessary session cookie for login, security and form protection. The session cookie is configured as Secure and HttpOnly and is used only for the requested website functions. No optional tracking or advertising cookies are currently used.
Your rights
Subject to the legal requirements, you may have rights of access, rectification, erasure, restriction, data portability and objection, and you may withdraw consent for the future. You may also lodge a complaint with a competent data-protection authority.
Privacy contact
support@darkdominion.info
Automatically collected technical data
When our website and online services are accessed, technically necessary information may be processed or recorded in server logs, such as IP address, date and time, requested resource, browser and operating-system information, referrer information and access or error status. These data are used for stable and secure operation, troubleshooting and abuse prevention.
Captcha and form security
DarkDominion currently generates and checks the security codes used in forms itself. No external captcha provider is currently used. CSRF protection and rate limits are used to protect forms and authentication functions against automated or abusive requests.
Newsletter and game information
If you enable game information in the Account Center, we process your email address, account association and stored newsletter preference for this purpose. Messages are sent only while this option is enabled. You can disable it again at any time in the Account Center with effect for the future.
External content and external links
The website contains simple links to external services such as Discord and YouTube. No content from these services is embedded merely by visiting the website. If you follow such a link, the respective provider may process technical data under its own privacy terms. For the QR-code display used during optional 2FA setup, a JavaScript library is currently loaded from the jsDelivr content-delivery network; this may technically transmit your IP address and request data to the CDN provider when the relevant page is opened.
Data security
We use appropriate technical and organisational measures to protect personal data. These include HTTPS/TLS, password hashing, protected session cookies, CSRF protection, rate limits and optional two-factor authentication. Nevertheless, no internet-based system can guarantee absolute protection against every security risk.
Provision of data
Certain data are required to register for and use DarkDominion. Without the necessary registration and access data, an account cannot be created or protected account functions cannot be used. Optional features, such as receiving game information by email, are not required for ordinary use of the game.
Automated decision-making and profiling
DarkDominion currently does not use solely automated decision-making that produces legal or similarly significant effects within the meaning of Art. 22 GDPR and does not use advertising profiling.
Right to lodge a complaint
You have the right to lodge a complaint with a competent data-protection supervisory authority if you believe that the processing of your personal data infringes data-protection law. In particular, you may contact the authority responsible for your habitual residence, place of work or the place of the alleged infringement.
Changes to this Privacy Notice
We may update this Privacy Notice when functions, processing operations, technical systems or legal requirements change. The current version is published on this website. Last updated: 18 August 2026.
Login history and session security
For account security, we store recent website logins including time, IP address, browser/device information and a technical session identifier. The Account Center displays the five most recent website logins and allows other website sessions to be invalidated. Game and launcher sessions are managed separately.
Back to home