Privacy Policy

Who we are

Perverted World is run by two independent developers, Pervert World and ExTx, distributing their own games. There is no company behind it and no third party we sell anything to.

What we store

Your account and what you write live in a database on our server. That is what lets other people read your comments, and what lets your account follow you from one device to another.

• Account details — your username, your email address, and your password as a hash and never as you typed it (see below), plus the optional profile fields: bio, avatar and banner.
• What you write — comments, replies, likes, ratings, profile posts, the games you follow, reports you send, suggestions you write, and the notifications addressed to you.
• Sessions — when you sign in we store a hash of your session token, the moment it was created, and the identification string your browser sends with every request. The cookie is set so that scripts running on the page cannot read it.
• Supporter access — which games your account can download, at which level, and where that access came from.
• Patreon — if you connect a Patreon account, we store its identifier and the tokens needed to check your pledges again later without asking you to authorise every time. We only ever read your identity and your memberships: never your payment details, never your address, and never anybody else's pledges. Disconnecting deletes all of it.
• Downloads — which build was taken, for which game and platform, and your account if you were signed in. This is how the download counts on the site are produced.
• Age confirmation — a single flag, kept in your own browser and not on our server. Your date of birth is checked and discarded in the same moment; it is never sent to us and never stored.

Passwords

Your password is never stored as you typed it, and cannot be recovered from what we hold. What the database contains is a PBKDF2-SHA256 hash that costs 600,000 iterations to compute — deliberately slow, so that guessing passwords against a stolen copy of the database is impractical rather than quick.

This means we cannot tell you your password if you forget it. We can only send you a link to set a new one.

What we do not collect

No analytics, no advertising, no tracking pixels, no third-party cookies, no fingerprinting, and no selling of anything to anyone. The only cookie this site sets is the one that keeps you signed in. We do not track which pages you read.

We do not store your IP address. It is used at the moment a request arrives — to cap how fast anyone can guess passwords or write to the site — and it is not written down anywhere. Cloudflare, who host the site and carry the traffic, keep their own operational logs, as the servers behind any website do.

We send email for two things only: confirming your address and resetting your password. There is no mailing list and nothing else is ever sent to you.

Fonts and icons

The site loads its typefaces from Google Fonts and its icons from jsDelivr. Requesting a file from those services exposes your IP address to them, as any request to any server does. We pass them nothing else about you. If that matters to you, both can be self-hosted, and we are open to doing so.

Payments

Where a paid unlock is offered, payment is handled entirely by a third-party payment provider. Your card details go to them, never to us — we only ever learn that a payment succeeded and for which game.

Pledges made on Patreon or SubscribeStar are governed by those platforms' privacy policies.

Your data, your control

• You can delete your account yourself. The option is on your profile page; it asks for your password and then removes the account and what is attached to it. You do not have to ask us, and you do not have to wait for us to answer.
• The same page lets you edit or remove anything you have posted, and change your email address or password.
• Changing your password ends every session on every device — including one that is not yours, which is the reason to change it.
• Signing out ends that session on our server, not only in your browser: the cookie stops working even if a copy of it is kept.

If you want something that the buttons on your profile do not cover, write to us and we will do it by hand.

Children

This site is for adults only and is not directed at anyone under 18. We do not knowingly hold data from minors. If you believe a minor has created an account, contact us.

Contact

Questions about privacy go to our contact page.