This page explains what DiamondMorrow stores when you read, create an account or play. For privacy questions, email main@diamondmorrow.com.
Casino data
The server stores your username, password hash, recovery-code hash, session records, virtual balance, wallet ledger, rounds, saved and recent games, rewards and care settings. Passwords and recovery codes are not stored in readable form or in the wallet ledger. We do not ask for your email or telephone number.
Security and retention
Sessions expire after eight hours of inactivity or seven days from creation. Guest records are removed after seven days without use. Expired-session and guest cleanup runs on casino requests. Login-rate-limit buckets contain a one-way hash of the network address and entered username; expired buckets are removed after 24 hours. They are used to resist guessing attacks.
Member records remain until account deletion. Deleting an account removes its identity, sessions, game and wallet records from the active database. Essential device pause records remain until their 400-day expiry after the last casino request, to retain an active pause after sign-out or deletion. The application does not create scheduled backups. Any hosting backups are managed separately from the active database.
Sharing and tracking
No analytics, advertising trackers or marketing integrations are included. Fonts and casino artwork are hosted locally. The server may keep ordinary security/error access logs under the host’s configuration; this application logs generic error categories, not passwords or recovery codes.
Your choices
You can inspect your latest wallet entries, change your password and delete your account in Settings. For questions about your data or to make a privacy request, email main@diamondmorrow.com. Never send your password or recovery code.
Browser-game reviews
The editorial section does not initialise or read casino sessions. It has its own privacy explanation. External official games operate independently.