Tweet
Your data
As we get closer to coming out of beta, we are looking harder at security — around the game, server, and around your data.
We have signed up with the ICO (Information Commissioner’s Office) — the people who enforce UK GDPR, and our policies are on the website.
Yes, it is boring.
Buy any UK outfit that handles personal data is required by law to register with the ICO.
We are a small private server, but we still want you to know: if something goes wrong with your data — if we try to sell it, if we get hacked — we can be held accountable.
Game Client checks.
The game server keeps a copy of the current MVCBeta.exe (and will do the same for the public client when we open).
When we update the client, and run the auto patch admin software, it uploads the new .exe to server as well as the auto patcher server, so the server and auto patch server should never be out of sync, EG we cannot forget to put the latest .exe on the server, as the auto patch admin dose it for us.
When you connect, it checks that your client matches what the server expects.
If you open the Auto Patcher (MVP), wait until it is up to date, then Launch — you will have no problem. That is the normal path. Almost everyone is already doing this.
If you bypass the patcher and run an old or modified exe, you will not be able to get into the server.
If you do manage to get to the login screen there is addition security at this point.
This project is built on open-source Mir code. That is a strength for development — and it also means some people will try to build cheats, bots, packet tools, or modified clients to get an edge. We are not naive about this and will monitor and block any attempts. If you do have mir "cheats" we would love you to share them with us so we can test and protect against them.
Modified / mismatched clients — blocked at login by the version check.
Cheating, botting, exploiting for unfair advantage — against the rules.
Accounts will be warned, suspended, or banned.
Trying to break into accounts, the website, or the server — treated as a security incident, not “testing.”
Report real bugs on the forums; do not “prove a point” by attacking live systems.
Do not share accounts - Your account has your personal information stored, and also shows you all the IP address that has logged into your account. So by sharing your account you are sharing your personal data with that person.
Gamemasters
Although we have not picked any GM's yet, all GM's will have 3 letter names, never more or less, always 3. This should help you identify a GM in game. Character names must be at least 4 characters long.
/Ven
As we get closer to coming out of beta, we are looking harder at security — around the game, server, and around your data.
We have signed up with the ICO (Information Commissioner’s Office) — the people who enforce UK GDPR, and our policies are on the website.
Yes, it is boring.
Buy any UK outfit that handles personal data is required by law to register with the ICO.
We are a small private server, but we still want you to know: if something goes wrong with your data — if we try to sell it, if we get hacked — we can be held accountable.
Game Client checks.
The game server keeps a copy of the current MVCBeta.exe (and will do the same for the public client when we open).
When we update the client, and run the auto patch admin software, it uploads the new .exe to server as well as the auto patcher server, so the server and auto patch server should never be out of sync, EG we cannot forget to put the latest .exe on the server, as the auto patch admin dose it for us.
When you connect, it checks that your client matches what the server expects.
If you open the Auto Patcher (MVP), wait until it is up to date, then Launch — you will have no problem. That is the normal path. Almost everyone is already doing this.
If you bypass the patcher and run an old or modified exe, you will not be able to get into the server.
If you do manage to get to the login screen there is addition security at this point.
How secure is this, really?
Quick scorecard. If old-school MySpace is a 1/10 and your banking app is a 10/10, here is roughly where we sit on each bit:
Overall for a private Mir server: roughly a 7–8/10. Comfortably past the old “download this dodgy client and hope” days — not claiming bank-app perfection, and we will keep nudging it up as we leave beta.
Quick scorecard. If old-school MySpace is a 1/10 and your banking app is a 10/10, here is roughly where we sit on each bit:
- Passwords — yours is never stored as plain text (hashed + salted) We cannot see or decrypt . Us: 8/10
- Password strength — weak stuff like short / all-lowercase gets rejected. Us: 7/10
- Failed logins — too many wrong attempts and the account locks for a while (same idea as a card PIN lock). Us: 7/10
- Email / Google / Discord signup — you prove the account is yours; we never see your Google or Discord password. Us: 8/10
- Website + patcher — HTTPS / padlock, same idea as any modern site. Us: 9/10
- Updates — patch files are signed; a tampered download gets refused. Us: 8/10
- Client check — only the current official build gets in; old or edited exes do not. Us: 8/10
- “Remember password” on the launcher — locked to your Windows login, not left in a text file on the desktop. Us: 7/10
Overall for a private Mir server: roughly a 7–8/10. Comfortably past the old “download this dodgy client and hope” days — not claiming bank-app perfection, and we will keep nudging it up as we leave beta.
Modified / mismatched clients — blocked at login by the version check.
Cheating, botting, exploiting for unfair advantage — against the rules.
Accounts will be warned, suspended, or banned.
Trying to break into accounts, the website, or the server — treated as a security incident, not “testing.”
Report real bugs on the forums; do not “prove a point” by attacking live systems.
Do not share accounts - Your account has your personal information stored, and also shows you all the IP address that has logged into your account. So by sharing your account you are sharing your personal data with that person.
Gamemasters
Although we have not picked any GM's yet, all GM's will have 3 letter names, never more or less, always 3. This should help you identify a GM in game. Character names must be at least 4 characters long.
/Ven