Datenschutz

Diese Seite wird auf Englisch angezeigt, bis der endgültige Text und seine Übersetzungen freigegeben sind.

Wer verantwortlich ist

Name and contact address of the operator — to be filled in by the owner.

Was gespeichert wird (aktuelle Umsetzung)

• Game account: account name, password (stored only as a one-way hash), email address, character deletion code, account status and creation date.
• Game data: characters, items, guilds and in-game logs on the game server.
• Web server logs: IP address, requested page, time and result, used for security and abuse prevention.
• Client download: when you download the game installer, the website records your account number and the time in its log, to limit downloads per account and to spot shared accounts or abuse. The entry does not contain your IP address; the web server log of the request does (see Web server logs). These entries are kept as long as the other web server logs.
• Pictures you upload to the forum are stored on our web server with your forum account and the upload time, and shown to everyone who can read the post they are in. Before a picture is stored we remove its metadata (for example the camera, the time and the GPS position) and give it a random file name. You find your pictures in the forum under "My media" and can delete them there; they are also deleted when you ask the forum to erase your data. Pictures are included in our backups for up to 14 days after deletion.
• If you use the forum, it can show game information next to your forum name: the class, level and kingdom of your main character and its guild. The website's public Rankings already show the same details. By default this is your highest-level character; you can choose another one on your account page or on your forum Progress page, and the website stores that choice. The character's name is shown only if you switch it on. Your other characters are shown only to you. The forum also uses this information for achievements (for example reaching level 75 or 99, finishing the biologist quests, your guild winning a war, the top 10 of the Rankings). The forum receives this from the website and keeps a copy, refreshed about every 15 minutes while you are active. Your account name, e-mail address, IP address, play time and last time played are never shown. You can switch game data off on your forum Progress page at any time: the forum's copy is deleted at once and nothing more is fetched. The forum also keeps a record of the forum points (EXP) your posts, likes received, daily visits and achievements earned, to show your forum level, your recent EXP (to you and the moderators) and the forum leaderboard.
• A session cookie while you are logged in, and a security cookie on pages with forms (see Cookies).
• Cloudflare Turnstile checks the sign-up and password-reset forms for bots and processes technical data about your browser for that purpose.
• Password-reset emails are sent through Resend, an email delivery service, which receives the email address and the message for that purpose. The reset link is not stored on the website.
• Invitations: when registration is by invitation, the invited email address, the date, the inviting staff account and an optional note are stored on the web server. Invitation emails are sent through Resend.
• Forum login: you choose a forum name, which is public on the forum; the website stores it with your account number (and your previous forum name until your next change). When you log in to the forum with your game account, the website sends the forum your account number, forum name, email address and language, never your account name. When you are signed in, the website's header shows your forum notifications and, if you moderate the forum, the flagged posts. The website reads them from the forum when you open the menu and does not keep them; marking them as read on either site marks them read on both.
• Forum. The forum runs on our web server (Flarum). When you sign in with your game account it stores your forum name, the email address and language the website sends, your account number, when you joined and were last active, and what you post, like or send there. It does not store your IP address. Forum emails are sent through Resend. In the forum settings you can download your forum data or ask for it to be deleted.
• Player reports: when you report another player in the game (from the target window or a whisper window), the game server stores your account number, your character number and name, the reported character's number, name and account number, the reason you chose, the text you wrote (at most 200 characters), where you were (map, position, channel) and the time. Your IP address is not stored with the report. Only the server team sees reports, on the admin page, to check for rule violations; they add a status, a note and their admin name. The reported player is not told who reported them. Reports are deleted automatically 12 months after they were sent.
• Screenshots with a report: when you report a player you can attach up to 4 screenshots of your game window. You either take them in the report window ("+ Screenshot" or Print Screen while the report window is open), or pick them yourself from the screenshots the game saved earlier in its screenshot folder ("+ From folder", the last 3 days). The game only lists that folder to show you your recent screenshots; it never sends a file you did not pick, and your original files stay on your computer unchanged (the game sends a re-encoded copy). You can remove each one before sending. A screenshot shows what was on your screen at that moment, which can include other players' character names, chat and whisper messages and guild names. After the report was stored, the game client uploads the screenshots to our web server, where they are kept with the report number, not under a public address, with metadata such as EXIF removed. Your IP address is not stored with them. Only the server team sees them, on the admin page, to check the report. They are deleted automatically 12 months after they were sent, together with the report, and the team can delete them earlier. The game client keeps its own copy only until the upload has finished (at most one day if the game was closed during the upload).
• Hardware-Fingerabdruck (Anti-Cheat): Bei jeder Anmeldung im Spiel berechnet der Spielclient einen Fingerabdruck deines Computers aus bis zu fünf Bestandteilen: der Kennung der Windows-Installation (MachineGuid), der Seriennummer des Systemlaufwerks, den Kennungen des Mainboards (SMBIOS-System-UUID und Seriennummer des Mainboards) und dem Prozessormodell. Jeder Bestandteil wird vor dem Senden auf deinem Computer in einen gesalzenen Einweg-Hash umgewandelt; die Kennungen selbst werden uns also nie gesendet. Der Anmeldeserver speichert diese Hashes zusammen mit deiner Kontonummer, dem Zeitpunkt, zu dem sie zum ersten und zum letzten Mal gesehen wurden, und der Zahl der Anmeldungen, bei denen sie verwendet wurden. Sie werden ausschließlich zum Schutz vor Cheats und zur Durchsetzung von Sperren verwendet: Das Team kann die Hardware eines Kontos sperren, das geschummelt oder gegen die Regeln verstoßen hat; Anmeldungen von passender Hardware werden dann abgelehnt (auch mit anderen Konten), und das Team kann sehen, welche Konten einen Bestandteil gemeinsam haben. Die Sperrentscheidungen des Teams werden protokolliert. Rechtsgrundlage: unser berechtigtes Interesse an einem fairen Spiel und an wirksamen Sperren (Art. 6 Abs. 1 lit. f DSGVO). Speicherdauer: Ein Fingerabdruck wird 12 Monate nach seinem letzten Auftreten gelöscht; eine Hardware-Sperre wird gespeichert, solange sie gilt, und 12 Monate nach ihrem Ablauf oder ihrer Aufhebung gelöscht. Während einer Übergangszeit können sich ältere Spielclients, die keinen Fingerabdruck senden, weiterhin anmelden.
• Language: the language you choose on the website is kept in a cookie and, when you are logged in, stored with your account number on the web server, so the website, its emails and the forum use that language.
• Donations with PayPal (only when PayPal is offered on the donation page; it is off by default): you pay on paypal.com, where PayPal (Europe) S.à r.l. et Cie, S.C.A. is an independent controller for the payment. The website receives and stores the PayPal order id, capture id, amount, currency and status.
• Donations with Bitcoin: the payment runs through our own BTCPay Server (pay.aethernal.eu, on our own server), which processes the invoice (amount and status) and sees your IP address when you open its checkout page. When you donate in the game, the website asks BTCPay Server for the invoice's Bitcoin address and amount and shows them in the game window with a QR code made on our own server; no other service sees them. Bitcoin addresses and transaction ids are public on the blockchain.
• Donations: your account number and name, the donation option, the amount, the thank-you coins, the payment provider references, your two consents at checkout (acceptance of the Donation Terms with their version, and the request for immediate delivery with the acknowledgement that you lose your right of withdrawal) and the times, kept for 7 years (Dutch fiscal record keeping). The thank-you e-mail confirming your donation is sent through Resend. When a payment needs a check, the donation number and the provider ids are e-mailed to the operator.
• The website is served through Cloudflare, which processes connection data (such as IP addresses) to deliver and protect it.

Warum (Rechtsgrundlage)

To be written by the owner.

Wie lange

To be written by the owner.

Deine Rechte

To be written by the owner.

Kontakt

To be written by the owner.