Privacy Policy

Last updated: November 8, 2026

This policy covers Raijo, the browser game at raijo.io and the Raijo Activity inside Discord ("Raijo", "we", "us").

What we collect

• Your account. Your username and, if you sign up with email, your email address and password. We never store your password itself, only a one-way hash of it (argon2id).
• If you sign in with Discord. Your Discord user ID, username, avatar and email address. Inside the Discord Activity, Discord also lets us show what you're playing on your Discord profile and open Discord's invite dialog. Discord asks you before sharing any of this with us.
• Your progress. Level, XP, credits, the items and cases you own, your loadout, equipped skins and game settings.
• Social features. Your friends list, friend requests, parties and whether you're online, in a match or in a lobby.
• Purchases. If you buy credits: the pack, its price, when you bought it and whether the payment went through, was refunded or charged back, plus the order and payment IDs PayPal gives us and your PayPal payer ID. PayPal handles the payment itself: we never see your card, bank details or PayPal password.
• Matches. The matches you played and your stats in them: kills, deaths, assists, headshots, score, placement and wins.
• Sign-in sessions. When you sign in, your browser keeps a sign-in token. We store only a hash of it, and it expires after 30 days.
• IP address. Used briefly to stop abuse, for example to limit how many accounts or password resets one address can request. It is kept for minutes in memory, not saved with your account.

How we use it

• To run the game: sign you in, save your progress, match you with other players, connect you to a game server and show your friends and party.
• To send you account emails you asked for: confirming your email address and resetting your password. We don't send marketing emails.
• To keep the game fair and safe: stopping cheating, spam and abuse.

What other players see

Your username, avatar, level, equipped skins and your stats in matches are shown to other players, including on the leaderboards. Your email address is never shown to other players.

Who we share it with

We don't sell or rent your data, and we don't share it for advertising. It only reaches:

• Our hosting providers, who run the servers and databases the game lives on, in Europe and Israel.
• Our email provider, to deliver the account emails above.
• Discord, if you use Discord sign-in or the Activity. Discord's own privacy policy covers what Discord does.
• PayPal, if you buy credits: it processes the payment. PayPal's own privacy statement covers what PayPal does.
• Authorities, if the law requires it.

Cookies and browser storage

Raijo doesn't use cookies or tracking pixels. Your browser's local storage keeps your sign-in token and some preferences (like settings and the last tab you had open) so you stay signed in. Signing out removes the token.

How long we keep it

• Account, progress and match history: while your account exists. Deleting your account removes them right away.
• Sign-in sessions: 30 days, or until you sign out.
• Purchase records: as long as the law requires us to keep sales records, even after you delete your account. Deleting your account removes the link between them and you; the record keeps only what PayPal knows the buyer by.
• Email confirmation and password reset links: they expire within a day and are deleted.
• Server logs: kept only as long as needed to run and fix the game.

Your choices and rights

You can get and delete your data yourself, in the game: open the menu under your name (top right) and pick Account (Settings > Account).

• Download my data saves a file (JSON) with everything we store about you: your account and settings, your level, XP and credits with every change to them, your items and cases, your purchases, your friends and friend requests, your match history and stats, and your leaderboard totals. It never contains your password hash or sign-in tokens, and other players appear in it only by username.
• Delete account asks you to type your username, then deletes your account and everything tied to it for good: progress, credits, items, cases, friends (you disappear from their lists too), match history, stats and sign-in sessions. You leave any party, lobby or search, and you're signed out on every device. The link to your Discord account goes with it; to remove Raijo from Discord as well, use Authorized Apps in Discord's settings. Matches you played stay in the other players' history, without you in them.

You can also email us to see, correct, export or delete your data. Write from the address on your account (or tell us your Discord username) and we'll handle it within 30 days. Depending on where you live, you may also have the right to complain to your local data protection authority.

Children

Raijo isn't meant for children under 13 (or the minimum age for online services where you live). If you believe a child under that age made an account, email us and we'll delete it.

Security

Passwords and sign-in tokens are stored only as hashes, and all traffic to raijo.io is encrypted. No system is perfectly secure, so use a password you don't use anywhere else.

Changes

If we change this policy, we'll update the date at the top. If a change is significant, we'll also tell you in the game.

Contact

Email [email protected] with any question about your data.