privacy policy
Heaven Online stores the information needed to run the game: username, hashed password, session tokens, profile choices, inventory, friendships, reports, chat messages, guestbook posts and game stats.
Chat logs and reports can be reviewed by admins for moderation. Admin exports include usernames, rooms, timestamps and message text.
Passwords are hashed with bcrypt. Session cookies are httpOnly and use secure cookies in production.
For production, configure backups and delete data on request according to the laws that apply to your hosting location.