No analytics, advertising or tracking scripts on the website or in the game.
PRIVACY POLICY
What we keep, and why.
Eldervale is a small game made by its developer. This page explains, in plain words, what the game, this website, the Discord bot and the Windows launcher store about you.
Last updated
At a glance
We do not sell or rent your data, and we do not share it for marketing.
Only a username and password are required to play.
Ask us to and we delete your account and the data tied to it.
1. Who is responsible
Eldervale (the game at rpg.eldervale.se, this website at www.eldervale.se, the Eldervale Discord bot and the Eldervale Windows launcher) is developed and run as a hobby project from Sweden. The developer is the data controller for everything described on this page.
Contact: christoffer@eldervale.se, or a direct message to the staff on our Discord server.
2. Your game account
When you create an account we store:
- Username. It is your public name in the world.
- Password, stored only as a salted one-way hash. Nobody, staff included, can read your password.
- Email address, only if you give one. It is used for account recovery (password reset and forgotten username), for verifying the address, and for the optional email security reward in game. We do not send newsletters or marketing.
- Account dates: when the account was created, your latest and previous login, and the last game version you have seen (so we can show you new patch notes).
- Account status: your role (player, moderator or administrator) and moderation flags such as a ban or chat mute.
Verification and password-reset codes are stored as hashes, expire after a short time and are removed once used.
3. Gameplay data
To run the game and save your progress, the server stores your character and what happens to it, for example:
- skills and experience, inventory, bank, equipment, coins, pets and appearance;
- quests, achievements, titles, collection log, contracts and clue trails;
- your position in the world, total play time and activity counters (such as monsters defeated or items crafted);
- a history of how and where your character died;
- your friends list, guild membership and guild invitations;
- in-game settings that follow your account, such as hotbar layout and Jukebox choices.
While you are online the server also knows which area you are in, so that other players near you can see your character.
4. Chat, messages and reports
- Public chat is sent live to players who are online. We do not save public chat messages in our database. The game server keeps each player's last few chat lines in its memory for up to 30 minutes, only so they can be attached to a player report (see below). They are lost when the server restarts.
- Private messages between players are stored, with sender, recipient, time and whether they have been read, so you can read them later.
- Guild chat is stored so guild members can scroll back through it: the sender, the message and the time. Only the latest 200 messages per guild are kept, and none older than 30 days. Disbanding the guild deletes its chat.
- Messages from the Eldervale Team (important announcements shown in the game) are stored together with which players have opened them, so the message waits for you until you have read it.
- In-game mail is stored with its subject, text, any attached coins or items, and when it was read or claimed.
- Reports and bug reports you send in game are stored with your username so staff can follow up.
- Player reports (Report player) are stored with your username, the reported player's username, the reason you chose and your description. To help staff check the report, the server also attaches what it saw itself: the reported player's recent chat lines that you could see (public chat, or party and guild chat you were part of), their private messages to you from the last 24 hours, and where you both were in the game. The reported player is not told who reported them.
Staff do not read private messages or mail as a routine. We may look at them when it is needed to investigate a report of abuse, cheating or a security problem.
5. What other people can see
Eldervale is a multiplayer game, so some information is public by design:
- In the world: your username, character appearance, equipment, title, guild tag, your Path (unless you hide it on the Path tab) and what you say in public chat.
- Player profiles and hiscores on this website and through the game's public API: username, whether you are online, combat level, total level, skill levels, quest points, play time, achievements, guild and selected title.
- Hall of Fame: notable records and firsts, with your username.
- Forum: threads and posts you write, with your username.
- Discord feeds: some world events, rare finds, achievements and milestones are announced in Discord servers that use the Eldervale bot, and may include your username.
Your email address, password, login times, private messages and Discord identity are never shown publicly.
6. The website and forum
Your account lives on the game server. When you sign in on this website, the game confirms who you are and the website keeps a small copy of your identity so that News, Forum and Hall of Fame can show your name: your player ID, username, role, ban status and when you were first and last seen on the website.
The website also stores what you create there: forum threads, posts and edits, reports you file about posts, and (for staff) news articles, Hall of Fame entries and wiki edits. Moderation actions and website sign-ins and sign-outs are recorded in an audit log, with the username of the person who acted.
The account page shows your own email, login dates and Discord link by reading them directly from the game server. It does not keep a second copy.
The quest checklist in the wiki is saved only in your own browser. We never receive it.
7. Discord
Linking Discord is optional. If you link your account from My account, Discord asks for your permission and gives us only basic identity data (the identify scope): your Discord user ID, username, display name and avatar reference. We store those, plus when you linked. We never see your Discord password, email, servers or messages.
You can unlink at any time from My account, and the stored Discord data is removed.
The Eldervale Discord bot stores server settings (which channels and roles to use, and which announcements are turned on). It does not store your messages. Discord itself is run by Discord Inc. under its own privacy policy.
8. The Windows launcher
The Eldervale launcher is a window around the same online game. It keeps the game's cookies and settings on your own computer so you stay signed in, and it contacts rpg.eldervale.se to check server status, read release notes and download verified updates. It contains no telemetry, analytics or crash reporting.
10. Server logs and security
Like almost every website, our web servers record technical request logs: IP address, time, the page requested and your browser's user-agent string. They are used to keep the services running, find faults and stop attacks. The game also uses your IP address for a short time, in memory only, to limit how often password and username recovery can be requested.
Everything is sent over HTTPS. Passwords and one-time codes are hashed, sign-in cookies cannot be read by page scripts, and staff tools require a verified staff role on the game server.
12. Legal bases
Under the EU General Data Protection Regulation (GDPR) we rely on:
- Providing the service you signed up for (contract): your account, character, progress, messages and mail.
- Legitimate interests: security, preventing cheating and abuse, moderation, public hiscores and Hall of Fame, and technical logs.
- Your choice (consent): adding an email address and linking Discord. You can remove either at any time.
- Legal obligation: when the law requires us to keep or hand over data.
13. How long we keep it
- Your account and character are kept while the account exists. When it is deleted, the account, character, inventory, progress, friends, messages, mail and Discord link are deleted with it.
- Guild chat is kept for at most 30 days (the latest 200 messages per guild). Your own guild chat messages are deleted with your account.
- Hall of Fame records are part of the game's history and stay after deletion. Ask us and we remove your name from them.
- Forum posts are kept on the website until you or a moderator remove them. Ask us when you delete your account and we remove or anonymise them.
- Recovery and verification codes expire within minutes and are removed after use.
- Website sign-ins end after at most 12 hours.
- Moderation records and audit logs are kept as long as they are needed to handle abuse and keep the community safe.
- Server request logs are kept for a limited period and then rotated away by the hosting software.
14. Your rights
You have the right to:
- get a copy of the personal data we hold about you;
- have incorrect data corrected (you can change your email and password yourself on My account);
- have your account and data deleted;
- object to, or ask us to limit, how we use your data;
- receive your data in a machine-readable format;
- withdraw consent, for example by removing your email or unlinking Discord.
To use any of these rights, contact us as described in section 1. We may ask you to prove that you own the account, usually by sending the request from the email address on the account or by signing in. We answer within one month.
If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY). We would appreciate the chance to fix it first.
15. Younger players
Eldervale does not ask for your age or real name, and we do not knowingly collect more than the account needs. If you are under 13, ask a parent or guardian before you add an email address or link Discord. A parent or guardian can contact us to have a child's account deleted.
16. Changes to this policy
When Eldervale changes in a way that affects your data, we update this page and the date at the top. Larger changes are also announced in the news and on Discord.