End User Licence Agreement — DRAFT

THIS IS A DRAFT FOR LEGAL REVIEW. IT IS NOT LEGAL ADVICE AND IT IS NOT IN FORCE.

It was written by reading the game's own source code so that a lawyer does not have to start from a blank page. It has not been reviewed by anyone qualified to review it. Do not treat it as in force until a lawyer has been through it.

Note the tension, deliberately left visible: this document is already rendered publicly at /terms, and registrants since 2026-08-07 have been asked to accept it under the version string 2026-08-07-draft. That was a considered choice — showing testers an honest draft beats showing them nothing — but it means every [STEFANO: ...] marker below is visible to visitors. Clear the markers before the alpha widens, and bump the version and re-prompt when the documents are finalised.

Every [STEFANO: ...] marker is a fact only Stefano can supply. They must all be filled in before this goes anywhere near a reviewer.

Draft date: 2026-08-07 Answers folded in: 2026-08-07 (entity, contact email, minimum age) Answers folded in: 2026-08-07 (legal name confirmed, country of residence: Malta, governing law)

1. Who this agreement is between

This agreement is between you (the person playing) and Stefano Mastini, an individual trading under his own name as Fantasy Kingdoms, established in Malta, referred to below as "we", "us" and "our".

No company. This is a sole trader / natural person, not a limited company, so there is no company number and no corporate veil: personal liability is not limited by an entity. That is a fact the reviewing lawyer should weigh against sections 10 and 11.

The game is Fantasy Kingdoms (previously named Demonia), a Windows PC multiplayer online game.

You agree to this by creating an account, installing the game, or playing it. If you do not agree, do not do those things.

`[STEFANO (updated 2026-08-07): the website registration form now has a required acceptance checkbox linking to /terms and /privacy, and the acceptance is recorded in fk_web.terms_acceptance with a timestamp and the policy version string ('2026-08-07-draft'), inside the same transaction as the account insert. So "you agree by creating an account" is now backed by evidence for anyone who registered on the site after that date.

STILL WEAK, and worth putting to the lawyer:

• the INSTALLER and the GAME CLIENT still have no click-through at all, so "installing it or playing it" is still unevidenced;
• accounts created before 2026-08-07, and any account created by an admin directly rather than through the website, have no acceptance record and were deliberately not backfilled;
• what those players accepted was this DRAFT. When you finalise these documents, bump POLICY_VERSION in website/src/lib/legal.ts and re-prompt everyone.]`

2. This is unfinished software

Fantasy Kingdoms is currently in a closed, invite-only alpha test. That means:

• The game is incomplete. Things are missing, broken, or obviously placeholder.
• The server will go down without notice, for restarts, fixes and mistakes.
• Your characters, items, progress and currency may be deleted at any time, including a full wipe of all accounts and characters before launch. This is expected, not exceptional. Play for the fun of playing, not to keep anything.
• Levelling is capped at level 10 for this test. There is no content above it.
• Account recovery is limited. There is no automated password reset; if you are locked out, a human has to reset it by hand.

You are taking part in a test, not buying a finished product.

3. Your licence to play

We give you a personal, non-exclusive, non-transferable, revocable licence to install and play the game for your own private, non-commercial entertainment, for as long as this agreement is in force.

That is all you get. You do not buy or own the game, the client software, the artwork, the music, the code, the world, or anything inside it. We (and our asset licensors) keep all of it.

[STEFANO: the game is built on the Atavism MMO engine and uses third-party art packs (Synty, ErbGameArt and others — see docs/THIRD_PARTY_ASSETS.md). Those licences constrain what you can grant to players and what you must say about redistribution. Give docs/THIRD_PARTY_ASSETS.md to the lawyer alongside this draft — it is the document that decides how section 3 and section 4 must read.]

4. What you must not do

You must not:

• Copy, sell, rent, sub-licence or redistribute the game or the installer.
• Reverse engineer, decompile or modify the client, except where the law expressly permits it despite this clause.
• Extract, rip or reuse the game's art, models, sounds, music or data.
• Use cheats, bots, macros, memory editors, packet manipulation, modified clients, or any other tool that gives you an advantage the game does not intend.
• Exploit bugs. If you find something broken that benefits you, report it instead of farming it. Reporting it will never get you punished; hiding it and using it might.
• Attack, overload, probe or interfere with our servers, the website, or other players' connections.
• Run more accounts than we allow, or share, sell, buy or transfer accounts.
• Sell in-game items, currency or characters for real money, or buy them.
• Access anyone else's account.
• Automate account creation, or use invite codes you were not given.

5. Conduct towards other players

The game has shared chat and shared spaces. In them, do not:

• Harass, threaten, stalk or bully anyone.
• Post hate speech, or abuse anyone based on who they are.
• Post sexual content involving minors, or any other illegal content. This gets reported, not just banned.
• Impersonate our staff or other players. Some usernames are reserved for this reason and cannot be registered.
• Spam, advertise, or post links to malware or scams.
• Share other people's personal information.

Use your judgement. This is a small test with a small number of people in it, and being unpleasant to the others spoils something that only works because everyone is being reasonable.

6. Your account

• You are responsible for keeping your password secret, and for everything done through your account.
• There is currently no automated password reset. Choose a password you will remember, and tell us as soon as possible if you think someone else has it.
• One account covers both the website and the game — the same username and password.
• Registration requires a valid invite code.

Minimum age

You must be at least 13 years old to create an account or play. Registration asks for your date of birth and refuses accounts below that age. If we find out an account belongs to someone under 13, we will close it and delete the data on it.

For the reviewing lawyer — the age threshold. Malta, where the controller is established, has itself set its GDPR Art. 8 digital-consent age at 13 (Subsidiary Legislation 586.11 under the Data Protection Act 2018, Cap. 586). The chosen minimum of 13 therefore matches the controller's own jurisdiction rather than sitting in tension with it.

The open point is other member states. Art. 8 permits any threshold from 13 to 16, and several states set 16 — including Germany, where the servers are hosted. The applicable threshold generally follows where the child is, not where the controller or the server is, so a player aged 13–15 resident in a higher-threshold state may still require parental consent, and this service has no mechanism to obtain or verify it. That needs confirming against the markets Stefano intends to operate in. The same threshold is written up in more detail in section 10 of the privacy policy.

7. Virtual items have no real-world value

The game contains gold, items, characters and other virtual things.

• They are not your property. They are a feature of a licence we can revoke.
• They have no monetary value, and cannot be exchanged for money, goods or anything else outside the game.
• We can change, remove, reset or delete any of it at any time, for any reason, including balance changes and the pre-launch wipe described in section 2.
• If your account ends, everything on it ends with it, and you are owed nothing.

The alpha is free. There is no purchase, no subscription, and no way to spend real money. [STEFANO: the database carries "coin" columns inherited from the Atavism engine, and there is a dormant purchases table. Nothing charges money today. If you ever switch any of that on, this section and the privacy policy both need rewriting — real payments bring consumer-protection and refund law with them.]

8. Feedback and bug reports

If you send us bug reports, suggestions, screenshots or ideas, we can use them in the game without paying you or crediting you. You keep the right to your own words; you are just letting us act on them. Do not send us anything you consider confidential or that belongs to someone else.

9. Suspending or closing your account

We can suspend or permanently close your account, with or without warning, if:

• you break this agreement,
• your account is being used to harm other players or the service, or
• we need to protect the server, the test, or ourselves.

For anything short of an emergency we will try to tell you why, and you can reply to us at support@playfantasykingdoms.com if you think we got it wrong. This is an appeal to a human, not a formal process, and there is no committee behind it.

You may stop playing at any time and ask us to close your account — see the privacy policy for what happens to your data when you do.

[STEFANO: today, account suspension is done by setting the account status column to 0 or below, which blocks login. There is no in-product "close my account" button. Whatever the lawyer lets you promise here has to match what you can actually do by hand.]

10. No warranty

The game is provided "as is" and "as available", with no warranties of any kind, express or implied, to the fullest extent the law allows. We do not promise that:

• it will work, be available, or be uninterrupted,
• it will be free of bugs, or that bugs will be fixed,
• your progress, characters or items will survive, or
• it is fit for any particular purpose.

Nothing in this agreement removes rights you have as a consumer that cannot be removed by contract. [STEFANO: this reservation matters a great deal in the EU and the UK. Consumer law limits how much of section 10 and section 11 actually binds a consumer, and the wording differs by country. This is a lawyer question, not a drafting one.]

11. Limitation of liability

To the fullest extent the law allows, we are not liable for lost progress, lost characters, lost items, lost data, lost time, or any indirect or consequential loss arising from playing the game or from the service being unavailable.

We do not exclude liability for death or personal injury caused by our negligence, for fraud, or for anything else that cannot lawfully be excluded.

[STEFANO: a liability cap normally goes here — usually the amount the player paid, which for a free alpha is zero. The lawyer should decide the wording and whether a nominal figure is safer than zero.]

12. Changes to this agreement

We may change these terms as the game changes. If we make a significant change we will say so on the website and in the community channels. Continuing to play after a change means you accept the new version.

13. Ending this agreement

This agreement ends if you stop playing and close your account, or if we close your account. Sections 3 (ownership), 7 (no real-world value), 8 (feedback), 10 (no warranty), 11 (liability) and 14 (law) survive it.

14. Governing law

This agreement is governed by the law of Malta, and the courts of Malta have jurisdiction over any dispute arising from it.

For the reviewing lawyer — this clause does not settle the question for consumers. Malta is where the trader is established (section 1) and Malta is an EU member state, so EU law applies alongside Maltese law.

Consumer-protection carve-outs under Maltese and EU law may override both the choice of law and the choice of venue above. An EU consumer generally keeps the protection of the mandatory rules of their own country of habitual residence regardless of what a contract term says, and there are corresponding limits on which court a consumer can be required to litigate in. This is flagged, not resolved — the lawyer should decide how the clause should actually read, and whether a consumer carve-out should be written into it expressly.

Also relevant: contractual capacity in Malta is 18, while the minimum age to play is 13 (section 6). Whether a 13–17 year old can bind themselves to this agreement, and whether a parent or guardian must, is a separate question from the data-protection consent age and is not answered here.

Other facts the lawyer will want alongside this:

• the trader is an individual, not a company (section 1);
• the servers and the database are on hardware rented from Hetzner Online GmbH in Germany, which brings German processing-location questions into play alongside Maltese establishment (privacy policy section 5);
• the service is offered from the domain playfantasykingdoms.com;
• players are expected in the EU and the UK.

15. Contact

Stefano Mastini, trading as Fantasy Kingdoms, established in Malta.

Email: support@playfantasykingdoms.com — for legal notices, account matters and anything else in this agreement.

[STEFANO: postal address — some jurisdictions require a real address in consumer-facing terms. As a sole trader with no registered office this would be your home address unless you use a service address. Ask the lawyer about the options before this goes live.]

Notes for the reviewing lawyer

Written from the codebase on 2026-08-07. Facts that shaped this draft:

1. The alpha is free, invite-code gated, Windows-only, and capped at level 10.
2. A pre-launch character wipe is already promised to testers in docs/ALPHA_TESTER_WELCOME.md; section 2 is deliberately consistent with it.
3. There is no acceptance mechanism anywhere in the product today — no checkbox at registration, no click-through in the launcher or client.
4. ~~There is no age gate of any kind at registration.~~ CHANGED 2026-08-07. Website registration now asks for a date of birth, rejects anyone under 13, and stores the date in master.account.birthdate (a column that already existed and was unused). 13 is the threshold Malta — the controller's own jurisdiction — has itself set under GDPR Art. 8, so the choice is aligned with the place of establishment; the open question is member states that set 16, including Germany where the servers are. See the boxed note in section 6 and section 10 of the privacy policy. The launcher and the game client still have no age check, so an admin-created account bypasses it entirely.
5. The game is built on the licensed Atavism MMO engine and third-party art packs; see docs/THIRD_PARTY_ASSETS.md.
6. No payments exist. Dormant currency and purchase tables are inherited from the engine and are unused.