Privacy

Korimons is run by its owner and staff. For questions about your data, to see, correct or delete it, or to complain, contact the site owner (no contact address has been added yet).

Your account

Your username, your display name if you set one, and your password in hashed form if you set one. The Rokori account you linked: its user id and username, as reported by our verification game or checked by staff. Your roles, badges, watchlist, deal alerts and notifications.

What you post

Trade ads, trade proof screenshots and the details you add to them, reports, and inventory lists you submit.

Signed-in browsers

For each browser you sign in with: when you signed in and last used the site, its IP address and its browser name. This is deleted when the session ends, after 30 days or earlier when you log out.

Security log

Sign-ins through the verification game, account links, password changes and every staff action, with the IP address they came from. We use it to look into abuse and to keep staff accountable. IP addresses are removed after 90 days. The rest of the log is kept and cannot be edited.

Sign-in codes

Only a scrambled (hashed) form is stored, and it is deleted within 24 hours.

Server logs

Technical logs can contain the IP address of failed requests. They are deleted after 14 days.

Backups

The database and uploaded pictures are copied every night, and each copy is kept for 14 days. Something that was deleted can stay in a backup for up to 14 days.

Your username, your badges, the Rokori profile you linked, your trade ads, and your trade proofs once staff have verified them. Player pages show Rokori inventories that staff checked against the public Rokori profile.

• rk_session keeps you signed in, for 30 days or until you log out.
• rk_game_login connects this browser to your sign-in code while you sign in with Rokori. It expires shortly after the code does.
• rk_theme remembers light or dark mode for a year, and is only set if you switch it.

There are no advertising, analytics or tracking cookies, and no third-party scripts.

• Item pictures load from rokori.com, so Rokori can see your IP address when your browser shows them.
• The verification game runs on Rokori. Rokori's own privacy policy applies there.
• Our hosting provider stores this data for us. We do not sell your data or share it with anyone else.

You can ask us to show you the data we have about you, to correct it, or to delete your account: contact the site owner (no contact address has been added yet). Security-log entries are kept as described above. If you live in the EU or the UK, you can also complain to your data protection authority.