RKING_INDUSTRIES // LEGAL

RKing Industries Privacy Policy

Exactly what RKing Industries (rkingindustries.com) does with your data. No filler.

No ad trackers, ever. There are no Google, Meta, TikTok or other advertising or analytics scripts, pixels or tracking cookies on this site, so no ad company learns that you visited, what you looked at or what you bought here. When we advertise, the ad platforms only see what happens on their own sites (for example that someone clicked an ad), never what you do here.

Effective: 22 Oct 2026  ยท  Applies to online/offline darts, the circuit diagram tool, Minecraft hosting, NoteBoard, payments and quote requests on rkingindustries.com

01Data We Collect

Here's the literal table of what's stored against your account, straight from the schema. Nothing here is inferred or hidden behind vague language.

FieldWhat it isWhy we have it
usernameYour chosen handleLogin + public identity
emailYour email address, unique per accountLogin, verification, notices
password_hashArgon2 hash of your passwordAuth. Plaintext password is never stored.
is_verifiedWhether you completed email verificationGate access to login
suspendedAccount suspension flagModeration
verification_code6-char one-time codeExpires 15 min after signup, then wiped
friend_codeRandomly generated 20-char IDLets others add you without exposing email/username
created_atAccount creation timestampRecord-keeping

If you add an address (optional, e.g. for shipping), we also store: address line 1 & 2, town/city, region, postcode, country code, and whether it's your default. This is only collected if you explicitly submit it - there's no address field on signup.

Session data - created every time you log in or verify your account:

FieldWhat it is
tokenRandom session token (32-byte, URL-safe)
device_typeA coarse category - Desktop, Mobile, Tablet, Bot, or Unknown - parsed from your User-Agent header, not your actual device model or OS version
created_at / expires_at / last_activeSession lifecycle timestamps. last_active is updated at most every 5 minutes while you use the site

Online darts data - created when you play online darts while signed in:

DataWhat it isWhy we have it
player profileA player record linked to your account, using your username as the display nameLets you appear in games and stats
games / turnsStarting score, legs, status, date, who played, who won, final scores, and every score thrown, turn by turnGame history, review, averages, leaderboards
guest playersA name you type for someone without an account, plus a 6-character claim code. We keep the guest linked to you (the creator) so you can reselect them laterLets guests play, and later claim their stats onto their own account
friendshipsWho you've added, requests sent and received, and their status (pending / accepted)Friends list. You add people by friend code, so email and username aren't exposed
groupsGroup name, join code, optional password (Argon2 hash), owner, and a member list with roles and join datesDarts groups and group game history

Other players in your games can see your username and the scores in those games. Group members can see each other's usernames, roles and join dates, and games where at least two group members played each other. If you claim a guest code, the guest's games and throws move onto your account and the person who created that guest slot is added as your friend.

Minecraft server hosting - only if you create a server:

DataWhat it isWhy we have it
server recordServer name, software, version, plan and expiry date, assigned ports, and domain (free subdomain or your own custom domain)Provisioning, routing and your plan
server filesEverything in your server's data folder: worlds, configs, plugins, mods, logs, and any file you upload or editRunning your server. Only you can browse or edit them through the panel
backupsZips of your server you or the daily schedule made, plus whether daily backups are on and when the last one ranSo you can restore your server. Kept with your server and deleted with it
promo codesWhich codes you've used, when, and what they gave youApplying the code once per account
public pageOnly if you switch it on: your server's name, address, version, whether it's online and how many players, the description, categories and Discord invite you pick, and (for modded servers, unless you turn it off) the list of mods in its mods folderShown to anyone at rkingindustries.com/servers. Switch it off any time; it's deleted with the server
player listsThe whitelist, operators and bans you set, with each player's Minecraft name and ID (looked up from Mojang when the server is stopped)Kept in your server's own files, like any Minecraft server
server statsCPU, memory, players online and tick speed over the last hour (kept in memory, not saved)The live stats and charts in your panel
player historyHow many players were online, saved every 10 minutes (just the number, no names)The "players over the last week" graph on public pages. Kept for 30 days
votesWhen you vote for a server: your Minecraft name and ID, the time, and a scrambled (hashed) form of your IP address, never the address itselfOne vote per player and per home network a day, giving your reward, and the vote counts. The server's owner sees your Minecraft name and when you voted. Kept for 90 days
likesWhich public servers you've likedCounting likes. Only the total is shown; nobody can see who liked a server. Deleted with your account

Your server's domain, ports and our host's IP address are sent to our proxy service so players can reach your server. Commands you run from the panel are executed on your server and appear in its logs. To help you or keep the service safe, the site owner can open your server's panel and see what you see (console, files, settings); every change made that way is recorded in our security log. Players' usernames appear in your server's logs and player list, as in any Minecraft server.

Payments - only if you buy a plan:

DataWhat it isWhy we have it
orderWhat you bought, the price, any promo code, Stripe's checkout and subscription references, and when it was paid and set upSetting up what you paid for, refunds, and our accounts. Kept for 6 years, as UK company records require, and unlinked from you if you delete your account
paymentEach card payment Stripe takes (first payments and renewals): amount, date, what it was for, and your Stripe customer referenceOur accounts and revenue figures. Kept for 6 years like orders, and unlinked from you if you delete your account
referralYour referral code, who signed up with it, whether they've paid, and the credit you earnedGiving referral rewards. The person who referred you sees a shortened version of your username and whether you've bought a plan, never anything else. Deleted with either account
how you heard about usOptional at sign-up, and it starts on "nu uh dont wanna tell" (not saying). If you pick an answer, we add one to the total for that option. Your answer is not saved with your account, so nobody (including us) can see what you pickedKnowing which places are worth advertising in, without tracking anyone
rk_ref cookieThe referral code from a link you openedCrediting whoever sent you, if you sign up. Kept in your browser for 30 days

Your card details are entered on Stripe's payment page and go straight to Stripe. We never see or store your full card number. Stripe keeps a customer record for you with your saved card and receipts, so subscriptions can renew; you can see and change these from "Cards & receipts" on your account page. Stripe tells us whether each payment succeeded.

Quote requests - if you use the form on the contact page:

DataWhat it isWhy we have it
quoteYour name, email, the service you picked, your description, budget and deadline if you gave them, your IP address, and your account if you were signed inReplying to you and quoting for the job. Deleted when it's no longer needed, or sooner if you ask

NoteBoard - sheets you save:

DataWhat it isWhy we have it
notesTitle, the full sheet content (including any images you add), a lightweight preview copy, and created/updated timestampsStoring and displaying your boards
guest demo sheetOne sheet per anonymous visitor, tied to a random token in a cookie, with no account requiredLets you try NoteBoard. Deleted automatically 1 day after its last edit

IP addresses - used only to keep the site and your account safe:

What we do not collect: we don't fingerprint your browser beyond the coarse device-type check above, we don't use analytics or advertising tools (no Google Analytics, no ad pixels, no conversion tags), we don't sell or share your data for advertising, and we don't track you across other sites.

02Cookies & Sessions

CookiePurposeLifetimeFlags
session_tokenKeeps you logged in30 days, or 365 if "stay logged in" is checkedhttponly, secure, samesite=lax
verify_tokenTies your browser to a pending email verification15 minuteshttponly, secure, samesite=lax
nb_guestLinks an anonymous NoteBoard demo sheet to your browser (only set if you save a sheet without an account)1 day, refreshed on each savehttponly, samesite=lax

All of these cookies are httponly, meaning client-side JavaScript can't read them, and the login cookies are only ever sent over HTTPS. We don't set any advertising, analytics, or cross-site tracking cookies. Stripe sets its own cookies on its payment page, under Stripe's policy. The panel also remembers a few preferences (like your last-opened server and your basket) in your browser's local storage; these never leave your device.

03Third Parties

Have I Been Pwned (password check)
When you set a password, we take a SHA-1 hash of it and send only the first 5 characters of that hash to the HaveIBeenPwned API to check it against known breach data. Your actual password, and the rest of the hash, never leave our server. This is the standard "k-anonymity" method - HIBP has no way to reconstruct your password from what we send.
Google Gemini API (circuit diagram tool)
If you use the /circuit tool, whatever you type is forwarded directly to Google's Gemini API to generate a response. That means your prompts and any content you paste into that specific tool are sent to Google and processed under Google's own terms - this doesn't apply to darts, your account, or anything else on the site, only the circuit diagram feature.
Stripe (payments)
If you buy a plan, you pay on Stripe's checkout page. Stripe receives your email address, what you're buying and the price, plus the card details you enter, and processes them under Stripe's privacy policy. We receive whether the payment succeeded and a reference to it, never your card number.
Zoho Mail (account emails)
Verification, welcome and security alert emails are sent through Zoho's SMTP service, so your email address and the email's contents pass through Zoho.
Minecraft hosting services
Creating a server contacts our proxy host with your server's domain and ports, downloads the Geyser, Floodgate and ViaVersion plugins (Paper/Spigot servers), and pulls the server software image. The panel reads public version lists from Mojang, PaperMC and Fabric. The plugin and mod browser sends your search terms, your server's software and version, and fingerprints (hashes) of the plugin files on your server to Modrinth to find matches and updates. None of these requests include your personal account data.

We don't sell, rent, or otherwise share your account data (username, email, password hash, address) with anyone else.

04Security

05Your Rights

06Changes to This Policy

If what we collect or how we use it changes materially, we'll update this page and adjust the effective date at the top. Continued use after that point means you accept the update.