Privacy Policy
This policy explains what Illicit collects, why it is used, how it is stored, and what happens when account data is removed. The short version is that Omerta Chat, Resupply Locker, and Illicit API need account, economy, inventory, chat, social, session, and integration data to keep persistent profiles, Steam emotes, Arcade games, trades, leaderboards, and connected game servers working.
Account data may include your internal account ID, permanent UID, username, avatar, profile settings, privacy choices, linked-provider identities, session records, recovery email where provided, password hash for local login, OAuth connection state, and display preferences. Economy and Arcade data may include coins, B1 counts, item ownership, loadouts, repair state, scratchers, utility items, trades, market listings, lottery records, tips, transfers, promo redemptions, daily spins, game results, achievements, quests, active effects, and audit reasons for balance or inventory changes.
Chat and social data may include public channel messages, direct messages, trade messages, reactions, edits, deleted-message state, emote metadata, GIF metadata, moderation state, bans, blocked-term matches, friends, friend requests, followers, following, hidden trade candidates, and trade notifications. Connected integrations may include Steam profile data, Steam backpack and emote cache, current Steam game, selected or currently playing music and radio station metadata, Google profile or email data where linked, Spotify or SoundCloud identity and encrypted OAuth tokens where linked, external API usernames, encrypted personal API credentials, normalized activity statistics, Discord or other provider IDs where configured, and restricted profile links only when a user explicitly enables verified 18+ access.
Illicit uses this data to sign users in, keep sessions persistent, sync eligible emotes, run the economy, protect balances and item ownership, prevent spam or exploits, moderate harmful content, and let Resupply Locker mirror selected coins, ranks, stats, or profile data inside third-party games. Passwords are hashed, sensitive connection tokens are encrypted when storage is required, and public data may be cached briefly.
Public profile data may show your username, avatar, linked public accounts, bio, style choices, leaderboard position, public stats, public inventory, loadout, and chat name styling depending on your settings. Public chat is visible to users who can access that channel. Direct messages and trade DMs are intended for the participants, site operators, and moderation tools needed to enforce rules and debug abuse. Restricted channels, links, and dependencies are omitted unless 18+ mode is enabled and allowed by the current session.
Account, economy, inventory, chat, and social records are kept while the account exists because they are required for persistent gameplay, ownership, and audit trails. Sessions expire after their configured lifetime and can be cleared from Danger Zone. External provider data may remain cached until replaced, disconnected, deleted, or expired by maintenance. Backups, hosting logs, provider logs, CDN logs, screenshots, exported data, and copies retained by third-party services may remain for the retention periods controlled by those providers.
Deletion does not erase transferred mints. UID values are permanent and only scale upward, so your UID remains reserved after account deletion. A deleted-account disclaimer appears anywhere that UID link is opened. Coins and items still inside your own wallet/backpack at deletion are permanently burned from the economy. Coins or items already transferred to another user's wallet or inventory are not deleted, because they now belong to that user.
Delete Connections removes linked OAuth/API connections, OAuth token rows, restricted integration profile links, and related locked-launch connection state while keeping the account intact. Delete Socials removes friend rows, friend requests, trade follows, follower/following rows, and hidden trade candidates involving the account. Clear Sessions removes active web sessions and signs browsers out.
Delete Account requires the confirmation phrase DELETE ACCOUNT. It tombstones the UID, burns the remaining wallet balance and backpack inventory, removes active account access, and attempts to remove account-owned live records across sessions, settings, inventory, loadout, daily spins, retired arcade stats, pool sessions, activity logs, trade offers, market listings, buy orders, transactions, promo redemptions, pachinko scores, emotes, sent chat messages, active effects, friends, quests, achievements, lottery rows, leaderboard rows, and locked-launch records. Records created by other users may remain with the deleted account reference removed or nulled where another user's history, moderation trail, market audit, or message context would otherwise break.
You can change profile visibility, inventory visibility, game stat visibility, linked account display, and public profile settings inside Settings. You can edit or delete your own chat messages where chat tools allow it. You can disconnect providers, clear sessions, delete socials, or delete the full account from Danger Zone. Do not place passwords, private keys, payment data, home addresses, or sensitive personal details into public profiles, chat, trade notes, usernames, or bios.
This is a practical project privacy notice for the current service. If the open-source version or provider stack changes, this policy should be reviewed with the code and database schema.
Terms & Conditions
By using illicit.page, Omerta Chat, Resupply Locker, Illicit API, or the connected Arcade economy, you agree that the service is experimental, early access, and provided as-is. Features may change, break, be reset, be restricted, or be removed while the project is developed. No uninterrupted access, permanent feature availability, market value, cash value, or future compatibility is promised.
Coins, items, tickets, cosmetics, ranks, stats, emotes, and other account features are digital service records for this ecosystem. They are not legal tender, securities, stored-value accounts, or promises of real-world payout. You may not exploit bugs, duplicate items, automate abuse, evade moderation, harass users, use slurs, spam links, launder compromised assets, or interfere with the economy. Illicit may reverse abusive activity, moderate messages, limit accounts, remove access, or burn illegitimate assets when needed to protect the service.
Account deletion follows the Privacy Policy. Your UID is retained as a deleted-account tombstone, remaining coins and items in your own wallet/backpack are permanently burned, and mints already transferred to other users remain with their current owners. Market, trade, chat, moderation, and audit records may preserve enough context to keep other users' histories and the economy consistent.
Restricted features require verified 18+ access. Users are responsible for what they connect, display, trade, say, upload, or send through the service.
External brands, trademarks, game names, screenshots, emotes, profile images, logos, and cultural references remain the property of their respective owners. They are used for identification, interoperability, commentary, fair use, or user-driven profile/integration behavior unless another relationship is clearly stated. Illicit is independent and is not endorsed by, sponsored by, or officially affiliated with third-party platforms, providers, or games listed on the site.
Physical goods, if offered, are final sale. Claims for damaged goods must be made within thirty days of delivery. No refund is owed for buyer's remorse, cosmetic preference, incompatibility with future services, or changes to the Arcade economy. If open-source versions are published later, they may differ from the live illicit.page server and may not include private branding, partner content, secrets, production assets, or server-specific data.
Credits, Thanks, & Licenses
Thanks to the players, testers, artists, modders, partners, open-source maintainers, platform communities, and server operators who make this project possible. illicit.page is the primary Omerta Chat front-end for Arcade games, profiles, inventory, market, shop, wiki, donations, legal notices, and community chat. crab.quest is reserved for CrabCoin and Arcade ecosystem use. resupply.locker is used for Resupply Locker integration identity and third-party game server examples. vandambash.com and vandamebash.com are active linked project domains in the Illicit navigation network.
Klaus Veen's Treason is represented through treason.eu as an active game and partner reference. snksrv.com is an active partner and server-community reference. rampagecoffee.com is an active partner and referral destination. edan.gg is retained as a former partner and referral destination. xplay.gg, overwolf.com, excorp.gg, cs.money, and scope.gg are former partner or resource references kept for historical navigation context.
Kinguin is credited as a game-server host provider for Resupply Locker. Hover, GitHub, MMM.page, Railway, and Supabase help the project stay online and continue development.
Steam is used for OpenID login, profile data, inventory/backpack checks, emote ownership, and game/store references. wiki.gg is used as a WEBFISHING reference source for item names, icons, and wiki attribution while the Resupply Locker WEBFISHING bridge is developed. guns.lol is used as an optional public profile target and as the hosted source for the B1 icon asset shown in profile/navigation UI. Gravatar can be used as an optional avatar source when users choose that option. Imgur can be used for external media references. Discord, Google, Reddit, Xbox, Epic Games, PlayStation, Roblox, GOG, X, Facebook, Twitch, and Kick may appear as optional or planned account/profile link targets where the current build supports or displays them. Cloudflare and CDNJS are used for favicon display and hosted script loading where configured.
Restricted integrations are omitted from the default experience and returned only during a verified 18+ session. Google Fonts powers site typography and Name Font Change cosmetics. GIPHY or Tenor may be used for optional GIF search. SteamDB and Steam store assets may be used for game references and Arcade artwork. Open-source dependencies retain their original licenses; the complete dependency and implementation notes live in the GitHub README.
Game names, logos, screenshots, emotes, profile images, partner logos, trademarks, and hosted brand assets remain the property of their respective owners. Their presence is for identification, interoperability, credit, navigation, user profile display, or integration behavior and does not imply endorsement unless a relationship is explicitly stated.
⚡ OMERTA