Privacy

This server is run by Melefo, who decides what is held about you and answers for it. Write to viktor@melefo.xyz about anything on this page.

What is held

An account here is the name you chose, the four digits after it, and a password. Nothing asks you for an email address, a real name, a telephone number or a payment, and none of those is stored.

• The name and digits you chose, and the date the account was made.
• Your password, kept only as a hash. Nobody here can read it, including the operator.
• An identity this server draws for itself, which the game needs to have something to call you. It is not an account on any other service.
• When you last signed in.
• Which of the screens the game insists are agreed to have been agreed to.
• Your characters: class, race, gender, how you made them look, and when each was made.
• Your sign-ins: the name the launcher gives for the machine, when the sign-in was issued, when it expires, and when the game last used it.
• Which parts of the game you have marked yourself as owning.

What the servers see while you play

Playing means sending traffic to these servers, so they see the network address it comes from, for as long as it takes to answer. Addresses appear in operational logs, which exist so the operator can see that the service is working and find out why when it is not.

The service bus can be told to record the traffic of a session to disk for diagnosis. That recording is of what the game sends, not of you, but it is traffic from your machine, so it is named here rather than left unsaid. It is off unless the operator has turned it on.

Why it is held

All of it is what it takes to give you the thing you asked for: an account you can sign in to and characters you can play. That is a contract between you and Melefo in the sense the law means, and it is the basis on which the above is held. Operational logs are kept on the separate basis that whoever runs a server has a legitimate interest in it working and in not being abused.

Cookies

Three, and each of them is needed for the site to work at all:

• One that remembers you are signed in.
• One that proves a form you sent came from a page this site gave you.
• One that remembers which language you chose.

There is no analytics, no advertising, no tracking of any kind, and nothing here is shared with anybody for those purposes. That is why you are not asked to agree to cookies: none of them is the sort that needs asking about.

Nothing is decided about you automatically

No automated decision is taken about your account, and nothing here profiles you. No artificial-intelligence system is used to run this service or to decide anything about you. If that ever changes, this page changes first.

Who else sees it

Nobody is sold anything and nothing is passed on for anybody else's purposes. The machines this runs on belong to a hosting provider, who is therefore able to reach what is stored on them and is bound to handle it only as Melefo instructs.

How long it is kept

Your account and characters are kept until you delete them. A sign-in stops working when it expires or when you revoke it, and is cleared out after that. Operational logs are short-lived and turn over on their own.

What you can do

Two of these are buttons on your own account page and take effect at once:

• Get a copy. The account page writes out everything listed above as a file. It does not include your password hash, which is not information about you, or the tokens your sign-ins use, which are keys rather than facts.
• Delete everything. The account page erases the account, its characters, its sign-ins and what it is marked as owning. It is immediate and it cannot be undone.

You may also ask for anything held about you to be corrected, ask that it be held but not used, object to it being held, or ask for it in a form you can take elsewhere. Write to viktor@melefo.xyz.

If you think this is being done wrongly, you are entitled to complain to the data protection authority of the country you live in, and doing so costs you nothing.

Children

This is not a service for children. The game it serves is rated for adults in most of the places it is sold, and accounts are not knowingly made for anyone under sixteen.

Changes

When this page changes, the change is the notice. There is no mailing list to tell you on, because no email address is held.