1. Who we are & scope
ZOAK PTY LTD operates Castle Raid. In this policy, “we”, “us”, and “our” refer to ZOAK PTY LTD. Contact us at contact@zoak.au about your information or this policy.
This policy covers castle-raidr.com and Castle Raid player portal and game services that link to it, including our Microsoft sign-in application.
Current service: the public website is a static game overview. It does not offer account creation or public gameplay. The player portal and public play are in development; the account and gameplay sections below apply when you use those features, including during an authorised test.
2. Information we handle
When you visit the public website
Your browser sends technical information needed to deliver the site, such as your IP address, requested URL, browser or user-agent information, and any referring page your browser provides. Web servers and infrastructure may record that information, request times, response codes, and errors in operational and security logs.
The website does not include advertising trackers or third-party analytics. Its fonts, images, styles, and scripts are served with the site. The castle previews and equipment examples run in your browser and do not submit your selections to us.
When you sign in with Microsoft
Where the player portal is enabled, Microsoft authenticates you and sends us a verified account identifier and basic profile information, such as your display name. We associate Microsoft's identifier with an internal Castle Raid account and record account creation and sign-in or verification times.
The current sign-in integration requests basic identity and profile permissions (openid and profile). It does not request access to your mailbox, contacts, files, or Xbox friends list, or request ongoing access through the offline_access permission. We do not receive your Microsoft password. Sign-in codes and tokens are processed to verify the login.
When you use player or game features
Available features may store your character names, character progression, inventory, equipment and loadouts, party membership and invitations, raid participation and results, and reward records. Where game identity linking is enabled, we also use a separately verified Xbox identifier (XUID) and gamertag to associate the correct player with a game session. Basic Microsoft sign-in alone does not supply that verified game link.
When you contact us
We receive the contact details and information you choose to send, such as your email address, message, and relevant support details. Please send only what is needed to explain your request and never send passwords, sign-in codes, or access tokens.
3. Cookies & browser storage
The public overview does not set application cookies. If you choose Play or Pause motion, it saves that preference in your browser's local storage under castle-motion. This contains your animation choice, is not a tracking identifier, and is not sent to our servers. It remains until you change it or clear the site's browser data.
The player portal, when used, relies on cookies for sign-in, maintaining your session, and protecting requests against forgery. Sign-in also uses short-lived security information to connect a login attempt to the browser that started it. These serve account and security functions.
You can clear or block cookies and site storage through your browser. The public overview remains readable, but motion preferences may not be remembered and account features may not work. Microsoft may set its own cookies when you visit its sign-in pages; those are covered by Microsoft's privacy information.
4. How we use information
We use information to:
- Deliver the website and remember the preferences you choose.
- Authenticate accounts, verify game access, and provide available character, party, raid, and reward features.
- Protect accounts and players, prevent abuse, diagnose faults, and maintain the Service.
- Respond to support enquiries and privacy requests, resolve disputes, and meet applicable legal obligations.
Where applicable law requires a legal basis, we rely on providing the service you request, our legitimate interests in operating and securing it, compliance with legal obligations, or consent where required. If we rely on consent for an optional activity, you may withdraw it.
6. Retention & security
We retain information for as long as reasonably needed for the purpose it was collected, including providing active accounts and progression, resolving support enquiries, securing the Service, and meeting legal obligations. The period depends on the record and its purpose. Account records and progress may remain after you sign out or revoke Microsoft's app permissions.
When information is no longer needed, we delete or de-identify it, subject to applicable legal requirements and backup cycles. Some records may need to be retained to investigate abuse, resolve a dispute, or comply with law. If you request deletion, we will explain any relevant retention limits.
We use safeguards appropriate to the Service, including encrypted public web connections, access controls, and verification of Microsoft sign-in responses. No storage or transmission system can be guaranteed completely secure.
7. Your choices & requests
You can browse the public overview without a Castle Raid account, clear saved browser preferences, sign out of the portal, and manage the permissions you have given the app through your Microsoft account. Revoking permission limits future authorised access; it does not automatically delete an existing Castle Raid account.
Contact contact@zoak.au to request access to or correction of personal information, account closure, or deletion. Depending on the law that applies, you may also have rights to portability, restriction, objection, or withdrawal of consent. We will handle requests in accordance with applicable law and explain any limitation or refusal.
We may ask for proportionate information to verify that a request relates to you before disclosing or changing account data. Do not send your password. Some information is necessary to provide account or multiplayer features, so deleting it or declining to provide it may prevent use of those features.
8. Children & young players
Young players must meet the eligibility and parental consent requirements in our Terms of Service and those of their Microsoft, Xbox, and Minecraft accounts. Parents and guardians can contact us about a child's information or request its removal. If you believe information has been provided without required parental consent, let us know so we can investigate and take appropriate action.
9. Policy changes
We will update this page and its date when our practices change. Before introducing materially different data collection or uses, we will provide an appropriate notice through the Service and obtain consent where required. Information about planned features does not mean those features are currently available.
10. Contact & complaints
Send privacy questions, requests, or complaints to ZOAK PTY LTD at contact@zoak.au. Describe your concern and the outcome you would like. We will review your request, seek any information needed to investigate it, and respond using the contact details you provide.
If you are dissatisfied with our response, you may be able to raise a complaint with the Office of the Australian Information Commissioner or the privacy authority in your jurisdiction.