Account information
We store your screen name, email address, password hash, date of birth, UK eligibility confirmation and acceptance time. Passwords are hashed rather than stored as readable text. Sessions let the server recognise a signed-in account; signing out invalidates the current session.
Product activity and preferences
The server records your fictional credit balance, the welcome allocation, Daily Stash claims, settled game rounds and bounded credit activity. It also stores the scarf, vault-glow and session-reminder settings you explicitly choose, and the end date of any account break. These records provide continuity, calculate your Hoard Shelf, prevent repeated claims and enforce your limits.
Support and password recovery
Support stores your reply email, topic, message and reference. Do not include sensitive documents, passwords or payment information. Password-reset tokens are stored as digests. Brevo delivers password recovery and support messages. ImprovMX forwards inbound support email to the support inbox and administration system. These providers process message content and delivery information to deliver the service.
Cookies and optional services
Essential cookies maintain sessions and protect state-changing requests. Optional comfort cookies remember your reading light. With your separate permission, Google Analytics 4 measures visits and navigation on public pages using cookie identifiers and technical information such as browser and device details. The Google tag is downloaded when a page loads, so Google receives connection information, including your IP address, for that download. Analytics events and cookies remain disabled until you grant analytics permission and the measurement setup is active. We do not send account details, credit balances, support messages, URL query strings or password-reset tokens. Advertising features are not enabled. Google sign-in is not enabled. You can refuse or withdraw analytics in Cookie Preferences.
Google Analytics and international processing
Google provides the optional analytics service and may process measurement information on servers outside the United Kingdom, including in the United States. Analytics is based on your consent. See Google’s Privacy Policy at policies.google.com/privacy and its partner-site data explanation at policies.google.com/technologies/partner-sites. Withdrawing consent stops future collection; it does not automatically delete measurements already received by Google. Contact hello@alokasko.com with privacy questions.
Security and retention
Server validation, password hashing, protected requests and rate limits help reduce misuse. Account records are retained while necessary for account continuity, security and support. Cloudflare provides DNS, HTTPS delivery and network protection; the application and database run on our hosting server. These services may process connection information, including IP addresses. Contact us to request deletion; we may retain limited records needed to enforce an active exclusion or resolve misuse.
Your choices and questions
Use Support to ask about access, correction or deletion of your information. Use Cookie Preferences to withdraw optional storage and Player Care to manage access breaks. Contact hello@alokasko.com for privacy requests and product questions.