UK GDPR

Your privacy, in plain words.

This page explains how Dark War Codes looks after the details of your linked game login. The controller is the operator of Dark War Codes, the site at https://darkwarcodes.com. This notice doesn't publish a contact address. It isn't Omnilojo's privacy policy.

The short version

• We don't ask for or store email addresses.
• We never ask for your password, and you can use this with no contact detail at all.
• Your game session is encrypted. The website itself can't read it. Only the claim worker can.
• Unlink anytime. One click deletes the saved login. Coming back uses the cookie already in this browser.

What we keep

• That encrypted player id, so we can redeem gift codes for the id you confirmed. The dashboard and the operator page show the last four digits only.
• The name and server, shown once on the confirm step so you can check them. After that they are shown as the last four characters, and they are not written into logs or Discord notes.
• An encrypted in-game session, only if you choose the optional daily web rewards step. The website itself cannot read it. Only the claim worker can.
• The login id the game sends back with that session, because some daily calls need it. It is not shown on the site.
• Your reward choices and a short claim history.
• A gift code, only while it sits in your queue.
• A shared gift code is the code and the date it was added. Not who sent it.
• A Discord webhook, only if you choose a pause note. Leave it blank and we store nothing extra.
• A browser reminder, only if you turn on the re-approve switch. It is sealed the same way as the session. Unlink, or turning the switch off, deletes it. We do not write the browser address into logs.
• A random cookie so this website remembers your dashboard.

Why

We use this to redeem gift codes for the player id you confirmed, and to collect daily web rewards only after you connect an in-game login. The lawful basis is your consent. A Discord note is a separate choice. You can change your mind by unlinking, switching a reward off, or clearing that field. We don't sell data, and we don't use it for ads.

Who else sees it

The claim worker sends the player id to the gift centre at giftcenter.darkwar-survival.com to redeem a code. If you connect daily web rewards, it sends that session to pay.darkwar-survival.com. If you save a Discord webhook, a short note goes there. It doesn't include the login, your name, or your player id. We don't ask for or store email addresses.

How long

Unlink deletes the saved id and the linked record, including history, queued codes, and any Discord webhook. A daily login that needs a fresh approve keeps the player id so gift codes continue, and we store when that login was approved and when it first needed a fresh one. The operator page shows the average of those spans, not a name. We clear the saved login when the game says the account is gone, or when the game returns a child-protection response. If you don't open the dashboard for 30 days, the player record and website session are deleted.

Where it lives

The site runs on a server in the United Kingdom. Session keys are wrapped with AWS KMS in London (eu-west-2). Encrypted backups may sit in an EU storage bucket. If that bucket is outside the UK, the operator still needs to record how that transfer is protected. This page doesn't say that step is done yet.

Children

Please don't link a child's account. If the game tells us an account is protected that way, we delete the saved login and stop.

How we look after it

Dashboard cookies are HttpOnly. Forms are checked against this site. The link form can ask for a Cloudflare Turnstile check. The encrypted session uses a key the web process can't use to decrypt.

Your rights

If you ever have a concern about how your data is handled, just contact us first. You also have the right to contact the UK ICO (ico.org.uk).