Signing up and signing in
The server stores your username, a secure password hash, your recovery phone number and the account creation date. Passwords are not stored as plain text. A session cookie keeps you signed in. Signing out ends the authenticated session.
Game progress
Progress and game resources are stored locally in your browser, separately for each account. Clearing site data removes them. Signing in on another device does not transfer your progress yet.
Protection against repeated login attempts
Counters with one-way identifiers temporarily limit repeated login attempts. Those records are removed after the limit expires. Your hosting provider may keep its own technical logs.
What you do not need to provide
Sign-up does not ask for your email, real name or payment details. Your phone number is stored only for account recovery; no SMS is sent at sign-up. It remains unverified until the first code. The SMS service is not connected yet, so keep your username and password safe. Once connected, the service will receive your number only to send a recovery code.