Settings

What we store

Your handle. A scrypt hash of your password — never the password itself. The flags you hoist, including their name, description, link, artwork and mast. Every bid you place and every raid you fire, with its amount and time. The views your flags collect. A session token in a cookie so you stay signed in.

We do not ask for or store an email address, a real name, a postal address, or a date of birth.

What is public

Your handle, your flags, their descriptions and links, the bids on them, their rank and bounty of views, the crew who funded them, and the raids you have fired and taken. All of that is visible to anyone, because the whole point of the site is that everyone can see how high everyone else is flying.

Your password hash, your session token and your purchase records are not public.

Cookies

One cookie, holding a session token, so you stay signed in. It is httpOnly, same-site, and set for ninety days. There are no advertising, analytics or third-party tracking cookies on this site.

Your sound preferences are kept in your browser's local storage, not on our servers.

Who else sees it

Your data is not sold, rented, or shared with advertisers, data brokers or analytics providers.

Payments are taken by Dodo Payments, who are the merchant of record. They receive the amount, the item, and whatever their checkout needs to charge the card and send a receipt. They do not receive your password. We do not store the card, and their name is the one on your statement.

We may disclose data if a valid legal order requires it.

How long we keep it

Account and flag data is kept while your account exists. If we take a flag down under the Community Rules, the flag, its bounty history and its attack log go with it. Closing your account deletes your handle and your flags.

Aggregate totals — how much has been bid, how many raids have been fired — do not identify anyone and may remain.

Your rights

You can see everything we hold about you on your account page and in your flags' public logs. You can change a flag's details at any time, and you can delete a flag or your whole account yourself.

Depending on where you live you may have further rights over your data — to a copy of it, to have it corrected, or to have it erased. Since we hold no email address and cannot otherwise tell who you are, write to support@jollyroger.wtf from wherever you like but say which handle you are, and expect to be asked to prove it by doing something only that account can do.

Children

This site is not intended for children, and accounts should not be created by anyone under the age at which they can spend money online without permission where they live.