Privacy Policy

Last updated: August 27, 2026

This Privacy Policy explains how the independent MadnessMU administration ("MadnessMU", "we", "us") collects, uses, stores, and shares personal information when you use the website, game servers, account services, support channels, and payment features.

1. Information we collect

• Account information: username, email address, password hash, registration and verification status, and account-security information. We do not need to know or store your plain-text password.
• Game information: characters, inventory, guild, progression, rankings, sanctions, trade and marketplace activity, and other server records associated with your account.
• Technical and security information: IP address, timestamps, session identifiers, browser or device information supplied with requests, login attempts, error logs, and anti-abuse signals.
• Payment information: transaction ID, account identifier, amount, currency, payment status, payer email or identifier, and virtual benefits credited. Payments are completed by PayPal; we do not receive your PayPal password or full payment-card details.
• Communications: messages and email addresses supplied through support, account recovery, reports, appeals, or community moderation.

2. Why we use information

We use information to create and authenticate accounts, operate gameplay and rankings, deliver requested virtual benefits, process and reconcile payments, provide support, prevent cheating and fraud, secure the Service, enforce rules, diagnose errors, comply with law, and establish or defend legal claims. Depending on where you live, our legal bases may include performing our agreement with you, our legitimate interests in operating and protecting the Service, compliance with legal obligations, and consent where required.

3. Cookies and external services

The website uses essential session cookies to keep you signed in and protect account functions. Optional features may contact third parties, including PayPal for payments, Google reCAPTCHA for bot prevention, and content-delivery providers for website assets. Those providers receive technical data such as your IP address and process information under their own privacy terms. We do not sell personal information or use it for third-party targeted advertising.

4. When information is shared

Information may be shared only as needed with hosting, infrastructure, email, security, and payment providers; with authorized administrators who need it to operate the Service; when required by law or a valid legal request; or to investigate fraud, threats, abuse, chargebacks, or security incidents. Providers are expected to use the information only for the service they supply. Data may be processed in countries different from yours, subject to safeguards required by applicable law.

5. Retention

We keep information only for as long as reasonably needed for the purposes above. Session cookies normally expire when the session ends. Security and access logs are generally kept for up to 12 months; support records for up to 24 months; and closed account and gameplay records for up to 24 months. Transaction, fraud-prevention, tax, and accounting records may be retained for up to 7 years or for the period required by law. Records connected with an active dispute, sanction evasion, or legal claim may be kept longer where necessary.

6. Security

We use reasonable technical and organizational measures to protect information, including access controls, hashed passwords, logging, and limited administrator access. No online service can guarantee absolute security. You should use a unique password and contact support promptly if you suspect unauthorized access.

7. Your choices and rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, portability, or objection; withdraw consent where processing relies on consent; and complain to your local data-protection authority. Some requests may be limited where information must be retained for security, fraud prevention, legal obligations, or legal claims. We may verify your identity before acting on a request.

8. Children

The Service is not directed to children who cannot legally consent to the processing of their information. A parent or guardian should contact us if they believe a child supplied personal information without required permission.

9. Independence and changes

MadnessMU is an unofficial community server and is not connected with or endorsed by Webzen Inc. This Privacy Policy may be updated to reflect changes to the Service or legal requirements. Material changes will be announced on the website or an appropriate community channel.

10. Contact

To ask a privacy question or exercise a privacy right, use the contact page and identify the request as a privacy request. We will respond within the period required by applicable law.