Privacy Policy

Last updated: 7 October 2026

Who we are

Age of Nations (ageofnations.world) is run by the operator of Age of Nations. Contact for anything about your data: [email protected]. We do not sell personal data or use it for advertising.

What we collect

• Account: e-mail address, username, chosen country, a hash of your password (never the password itself) and when you accepted the terms.
• Sign-ins and devices: for each sign-up, sign-in and password reset: IP address, the country reported by Cloudflare, browser type, a device id cookie, a hash of browser characteristics, and whether the address belongs to a VPN, Tor or datacenter network.
• Game activity: what your character does (travel, work, trades, battles, votes) and the record of every change to your in-game money and items.
• Messages and content: chat and direct messages, articles, comments and images you upload.
• Reports and sanctions: reports you file or that are about you, evidence, sanctions, appeals and the record of staff actions.
• Payments (Supporter plan): our reseller Creem processes the payment. We receive only what we need to give you the plan: your e-mail, the plan, its status and dates, and the amount. We never receive or store card numbers.

Why we use it

To run the game and your account, to keep it secure, to prevent multi-accounts, bots and cheating, to enforce the rules, to provide the Supporter plan, and to answer support requests. We rely on the contract with you (providing the game and the plan) and on our and other players' legitimate interest in a fair, secure game. Multi-account checks compare sign-in data between accounts; possible matches are reviewed by staff and never decided automatically.

Who can see what

• Public: username, avatar, country, level, rankings, articles, comments and public activity.
• Private to you: notifications, inventory, wallet history and direct messages.
• Staff only: e-mail addresses, IP addresses and sign-in history (only staff allowed to review evidence), report evidence and the record of staff actions.

Service providers

• Hetzner hosts our servers and database in Germany and Finland.
• Cloudflare delivers the website, protects it from attacks, runs the Turnstile bot check and stores encrypted backups.
• Resend sends our e-mails (verification and password reset codes).
• Creem is our Merchant of Record for the Supporter plan: it handles checkout, billing and taxes under its own privacy policy.

They process data only to provide these services to us.

How long we keep it

• Raw IP addresses are kept for 90 days, then replaced with a hash that can only show that two sign-ins came from the same address.
• The rest of the sign-in history is kept while the account exists. Read notifications are deleted after 30 days.
• Payment records are kept as long as tax law requires.
• Deleting your account replaces your username with an anonymous name, removes your e-mail address, password, bio and avatar, signs out every device and ends your offices and memberships. Your game history, sign-in records and any sanctions stay without your name, so the world's records and fair-play checks stay complete.

Cookies

We use a session cookie to keep you signed in and a device id cookie for security and multi-account checks. Cloudflare Turnstile may set its own cookie to tell people from bots. There are no advertising or tracking cookies.

Your rights

You can see and change your account details and delete your account in Settings. You can ask us for a copy of your data, or to correct or delete it, at [email protected]. You may also complain to your data protection authority.

Children

You must be at least 13 years old to play. In the European Union, players under 16 need the consent of a parent or guardian.

Changes

We may update this policy. The date at the top shows the latest version; important changes are announced in the game.