Data security

Security approach

We take reasonable technical and organizational measures to protect Heroes of Legends, player accounts, and related data against unauthorized access, loss, misuse, alteration, and disruption.

Transport security

We use encrypted connections where appropriate to protect data transmitted between your browser and our systems.

Account security

Players are responsible for keeping their login credentials secure and for not sharing account access with others. We may suspend or restrict accounts where we detect compromise, abuse, fraud, or activity that threatens the service.

Minimal data principle

We aim to collect and retain only the data reasonably necessary to operate the game, maintain security, process transactions, enforce rules, and comply with legal obligations.

Responsible disclosure

If you believe you have found a vulnerability, please report it to: Contact us through the in-game support channel or our website contact form.

Please include enough detail for us to reproduce and investigate the issue. Do not access, modify, delete, exfiltrate, or disclose data that does not belong to you.

No bug bounty promise

Unless explicitly stated otherwise in writing, we do not operate a public bug bounty program and do not promise financial rewards for vulnerability reports.