Eldvyr - Privacy Policy

1. What we collect

• Account data: your email address and a password (we store only a salted, one-way hash; we never see or keep your password).
• Game data: your characters, their progress, items, guild and party membership, and settings needed to play.
• Game transaction records: how items and gold coins move in the game (loot, shop, Market, trades, upgrades): which character, when, where in the game, and the other character involved. Used only to keep the in-game economy fair (fraud, exploits, lost items, support).
• Chat and reports: messages you send in game chat (public, party, guild and private messages), and reports you send or receive. When a player is reported we also keep the chat around it and a short replay of the game around the report (positions, actions and chat of the characters on that map for about 30 seconds before and 10 seconds after) so moderators can see what happened.
• Honor: the honor points players give each other (who gave it, to whom, when).
• Feedback and error reports: what you write in "Feedback & Bugs", and automatic error reports from the game, with the game version, device type, screen size and frame rate, and your character's position in the game.
• Technical data: your IP address and connection times, used only for security (rate limits, abuse prevention) and kept in short-lived server logs.
• Anti-cheat records: when the Game detects impossible movement or a game running faster than real time, we record the character, account, place and the measured values (kept up to 12 months, to review cheating and handle appeals).

We do not collect your name, phone number, contacts, location, photos or payment details. The game has no ads and no third-party tracking or analytics SDKs.

2. How we use it

Only to run the game: logging you in, saving your progress, delivering chat, keeping the game fair and safe (moderation, cheat and abuse prevention), and answering your support requests. If you use "Forgot password", we email you a one-time code.

3. Sharing

We do not sell or rent your data. We only share it with service providers that host the game servers or send our emails, under their confidentiality terms, or when required by law.

4. Security

Connections are encrypted (TLS). Passwords are hashed with scrypt and a per-account salt. "Remember me" uses a random token of which we store only a hash.

5. Retention and deletion

We keep your data while your account exists. You can delete your account and all its characters at any time inside the game (title screen → Delete Account) or by following the steps at /delete-account. Deleted accounts are removed from the live database immediately and from backups within 7 days. Chat lines attached to abuse reports may be kept up to 90 days. Chat messages are kept 30 days (the lines copied into a report, and report replays, up to 12 months); error reports 90 days. Game transaction records are kept up to 12 months; when you delete your account, your email address is removed from them (the in-game character names stay, because they are part of other players' trade and Market history).

6. Children

Eldvyr is intended for players aged 13 and older. We do not knowingly collect data from children under 13. If you believe a child under 13 created an account, contact us and we will delete it.

7. Your rights

You can ask us for a copy of your data, to correct it, or to delete it by writing to [email protected]. Depending on where you live (for example the EU/UK under the GDPR, or California under the CCPA) you may have additional rights, including complaining to your data protection authority.

8. Changes

If we change this policy we will update the date above and ask you to accept the new version in the game.