Privacy Policy
Effective date: 20 May 2026 · Applies to: Drust (Android app & web client)
Drust is a free multiplayer text adventure game (MUD) available via web browser and as a mobile app on Android. We collect only the minimum data needed to run the game and keep it secure. We do not sell your data, show you ads, or share your information with third-party marketers.
1. Who We Are
Drust is operated by an independent developer based in New Zealand. The live game server is hosted at mud.mlmc.nz. For privacy questions, contact us at privacy@mlmc.nz.
2. What Information We Collect
Account information
- Username — the name your character is known by in the game world. This is visible to other players.
- Password — stored as a one-way cryptographic hash. We never store or transmit your plaintext password.
- Email address (optional) — only collected if you choose to provide one for account recovery purposes. Not required to play.
Gameplay data
- Character state, level, statistics, inventory, quest progress, and skill advancement.
- In-game actions and interactions (e.g. combat events, room movement, item use) needed to run the simulation.
In-game communications
- Chat messages sent via in-game channels (say, yell, tell, shout, etc.) are transmitted to the server to be delivered to other players. These may be stored temporarily in server logs to assist with moderation of conduct-policy violations.
Connection & technical data
- Your IP address and connection timestamps — collected automatically when you connect to the game server. Used solely for security, abuse prevention, and diagnosing connectivity issues.
- Basic device or browser information transmitted as part of your network connection (e.g. TCP metadata). We do not use fingerprinting or tracking SDKs.
3. How We Use Your Information
We use the data we collect only to:
- Create and maintain your game account.
- Operate, deliver, and save the game experience (character persistence, world state).
- Communicate with you about your account (e.g. password reset) if you have provided an email address.
- Detect and prevent cheating, harassment, or abuse that violates our community standards.
- Diagnose server problems and maintain the security and stability of the game service.
We do not use your data for advertising, profiling, or any purpose beyond operating Drust.
4. Information Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may disclose information only in the following limited circumstances:
- Legal obligation — if required by applicable law, court order, or government authority.
- Protection of rights — to investigate or prevent fraud, security breaches, or violations of our terms.
- Service providers — we may use hosting or infrastructure providers who process data solely on our behalf and under our instructions. These providers are not permitted to use your data for their own purposes.
Your username is visible to other players as part of normal gameplay (e.g. in chat, combat, and the who-list). No other account information is shared with other players.
5. Data Retention
- Account & character data — retained while your account is active and for a reasonable period after inactivity, so you can return to the game. You can request deletion at any time (see Section 7).
- Server & connection logs — typically retained for up to 90 days, then deleted automatically, unless retained longer to investigate a specific incident.
- In-game chat logs — retained for up to 30 days for moderation purposes, then deleted.
6. Security
We take reasonable technical measures to protect your information, including hashed password storage and encrypted connections (TLS) where supported. No internet transmission is 100% secure; we cannot guarantee absolute security, but we will notify you if a breach materially affects your personal data.
7. Your Rights & Choices
You have the right to:
- Access — request a copy of the personal data we hold about your account.
- Correction — ask us to correct inaccurate information (e.g. update your email address).
- Deletion — request that your account and associated personal data be permanently deleted. In-game character data associated with your account will also be deleted. Use our account deletion page to submit a request.
- Withdraw consent — if you provided an email address voluntarily, you can ask us to remove it at any time without affecting your ability to play.
To exercise any of these rights, contact us at privacy@mlmc.nz. We will respond within 30 days.
8. Children's Privacy
Drust contains mature themes, including moral ambiguity, political conspiracy, and combat violence. The game is intended for players aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us at privacy@mlmc.nz and we will delete the account promptly.
9. Advertising
Drust contains no advertising. We do not use third-party advertising SDKs, display banner ads, or collect data for ad-targeting purposes.
10. Third-Party Links
The Drust website and Android app may contain links to third-party services (e.g. our Discord community server). We are not responsible for the privacy practices of those services. Please review their policies independently.
11. Changes to This Policy
We may update this privacy policy from time to time. The "Effective date" at the top of this page will always show the date of the most recent revision. Continued use of Drust after a policy update constitutes acceptance of the revised policy. For significant changes, we will post a notice in the game or on the website.
12. Contact
For any privacy questions, data requests, or concerns, please contact us:
- Email: privacy@mlmc.nz
- Discord: discord.gg/9pmfp3KVxP