What we keep, and why
Privacy Policy
Draft. This policy is a working draft for launch preparation. The controller identity and contact below are final; the Operator should still have the wording and lawful bases reviewed before publishing.
1. Controller
The data controller for Realms of Elynia is Palvelureppu Oy (business ID 3603977-5), Ainontie 10 A 3, 01630 Vantaa, Finland. For any privacy question or request, contact support@realmsofelynia.com.
2. What we collect and why
| Data | Purpose | Lawful basis (GDPR) |
|---|---|---|
| Nickname & password hash | Create and secure your account | Performance of contract |
| Email address (optional) | Account recovery only, if you provide it | Consent / legitimate interest |
| Gameplay data (character, progress, chat, market activity) | Run the game and its features | Performance of contract |
| Purchase records (package, amount, Stripe identifiers) | Fulfil and account for Aurei purchases; fraud/dispute handling | Contract & legal obligation |
| Technical logs (IP, timestamps, error logs) | Security, abuse prevention, debugging | Legitimate interest |
We do not sell your personal data or use it for third-party advertising.
3. Payments
Card payments are processed by Stripe, acting as an independent processor. We do not receive or store your full card number. Stripe processes your payment data under its own privacy policy. We keep a record of your purchases (package, amount, and Stripe reference identifiers) for accounting, fraud prevention, and to fulfil your Aurei.
4. Cookies
We use a single strictly-necessary session cookie to keep you signed in and a CSRF token to protect requests. We do not use advertising or third-party tracking cookies.
5. Sharing
We share data only with service providers who help us run the Game (currently our hosting and infrastructure provider Cloudflare, and our payment processor Stripe) and where required by law. Your nickname and public profile (level, ladder standing) are visible to other players by design; your email is never shown to other players.
6. Retention
We keep account and gameplay data while your account is active. Purchase and accounting records are kept as long as required by tax and accounting law. If you delete your account, we remove or anonymise personal data that we are not legally required to keep.
7. Your rights
Subject to applicable law, you may request access to, correction of, deletion of, or a copy of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact support@realmsofelynia.com. You also have the right to lodge a complaint with your local data-protection authority (in Finland, the Office of the Data Protection Ombudsman).
8. Children
The Game is not intended for children under the digital-consent age in their country. We do not knowingly collect data from children below that age without appropriate consent.
9. Changes
We may update this policy; material changes will be signalled in the Game. The "last updated" date above reflects the current version.