Privacy Policy

Information the game records

When you create and use an account, the game may store your username, email address, password hash, profile information, account dates, gameplay records and support or moderation history. Passwords are stored as one-way hashes rather than readable passwords.

For security and abuse prevention, the game also records available connection information such as IP addresses, browser user-agent strings, login history and a random first-party browser security identifier. That identifier is stored as a hash. A normal website cannot retrieve your remote device's MAC address, and The Thug Life does not rely on MAC-address collection.

Why this information is used

Information is used to provide login sessions, preserve game progress, enforce the account limit, investigate abuse, apply bans or suspensions, operate support tickets, diagnose problems, protect accounts and maintain the persistent game economy.

Cookies and local identifiers

Required cookies support sessions, CSRF protection, remember-me login, security identity and other core features. Optional cookie categories can be controlled through the cookie notice where available. Removing browser cookies may sign you out or remove convenience/security identifiers from that browser.

Retention

Gameplay, economy, moderation and audit records may be retained as part of the persistent game history. Temporary authentication records such as expired remember-me tokens, old password-reset tokens and old failed-login attempts may be automatically cleaned up. Security login history can be retained longer so account owners and staff can investigate suspicious access.

Account security

You are responsible for keeping your account credentials private. Use a unique password and review the recent login information available from My Account. The Log Out Everywhere control can invalidate existing sessions if you believe another person has access.

Questions or requests

Logged-in players can use the Support Ticket system for account or privacy questions. Requests may require account verification before account-specific information is changed or disclosed.