1. Our Commitment to Your Privacy
RetroVerse ("we", "our", or "the platform") operates a browser-based retro multiplayer gaming service at retroversegaming.site. We are committed to transparency, minimal data collection, and strict compliance with the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR).
2. Voice Audio, Microphone Access & WebRTC Streaming
Zero Voice Recording Policy
Microphone access is requested strictly when you choose to activate in-game voice chat. Voice and video streams are transmitted peer-to-peer directly between room participants via encrypted WebRTC (DTLS-SRTP). Voice data is ephemeral; it is NEVER recorded, stored, transcribed, or monitored on our servers.
Our strict HTTP Permissions-Policy (microphone=(self)) ensures that voice capture can only ever execute from the legitimate RetroVerse origin.
3. Information We Collect
- Account Information: Username, email address, display name, and membership tier. Passwords are never stored in plaintext; they are hashed using the memory-hard Argon2id cryptographic algorithm.
- Multi-Factor Authentication (MFA): If enabled, TOTP secrets are stored encrypted. One-time recovery codes are stored as irreversible SHA-256 hashes.
- Security & Audit Logs: Timestamped records of logins, password resets, and room creations, including IP addresses, retained temporarily to prevent brute-force attacks and abuse.
4. Cookies & Local Storage
We do not use third-party advertising cookies or cross-site behavioral tracking scripts. We utilize strictly necessary HTTP-only, secure, SameSite cookies (retroverse_session) solely to maintain your authenticated login session across page navigations.
5. Your Rights: Data Export & Erasure
Under GDPR, you have the right to access, download, and completely delete your account data. You can download an automated JSON export of all your stored profile and membership history directly from your Account Profile, or permanently delete and anonymize your account at any time.