Privacidade

Esta página é mostrada em inglês até o texto final e as respetivas traduções serem aprovados.

Quem é o responsável

Name and contact address of the operator — to be filled in by the owner.

O que é guardado (implementação atual)

• Game account: account name, password (stored only as a one-way hash), email address, character deletion code, account status and creation date.
• Game data: characters, items, guilds and in-game logs on the game server.
• Web server logs: IP address, requested page, time and result, used for security and abuse prevention.
• Client download: when you download the game installer, the website records your account number and the time in its log, to limit downloads per account and to spot shared accounts or abuse. The entry does not contain your IP address; the web server log of the request does (see Web server logs). These entries are kept as long as the other web server logs.
• Pictures you upload to the forum are stored on our web server with your forum account and the upload time, and shown to everyone who can read the post they are in. Before a picture is stored we remove its metadata (for example the camera, the time and the GPS position) and give it a random file name. You find your pictures in the forum under "My media" and can delete them there; they are also deleted when you ask the forum to erase your data. Pictures are included in our backups for up to 14 days after deletion.
• If you use the forum, it can show game information next to your forum name: the class, level and kingdom of your main character and its guild. The website's public Rankings already show the same details. By default this is your highest-level character; you can choose another one on your account page or on your forum Progress page, and the website stores that choice. The character's name is shown only if you switch it on. Your other characters are shown only to you. The forum also uses this information for achievements (for example reaching level 75 or 99, finishing the biologist quests, your guild winning a war, the top 10 of the Rankings). The forum receives this from the website and keeps a copy, refreshed about every 15 minutes while you are active. Your account name, e-mail address, IP address, play time and last time played are never shown. You can switch game data off on your forum Progress page at any time: the forum's copy is deleted at once and nothing more is fetched. The forum also keeps a record of the forum points (EXP) your posts, likes received, daily visits and achievements earned, to show your forum level, your recent EXP (to you and the moderators) and the forum leaderboard.
• A session cookie while you are logged in, and a security cookie on pages with forms (see Cookies).
• Cloudflare Turnstile checks the sign-up and password-reset forms for bots and processes technical data about your browser for that purpose.
• Password-reset emails are sent through Resend, an email delivery service, which receives the email address and the message for that purpose. The reset link is not stored on the website.
• Invitations: when registration is by invitation, the invited email address, the date, the inviting staff account and an optional note are stored on the web server. Invitation emails are sent through Resend.
• Forum login: you choose a forum name, which is public on the forum; the website stores it with your account number (and your previous forum name until your next change). When you log in to the forum with your game account, the website sends the forum your account number, forum name, email address and language, never your account name. When you are signed in, the website's header shows your forum notifications and, if you moderate the forum, the flagged posts. The website reads them from the forum when you open the menu and does not keep them; marking them as read on either site marks them read on both.
• Forum. The forum runs on our web server (Flarum). When you sign in with your game account it stores your forum name, the email address and language the website sends, your account number, when you joined and were last active, and what you post, like or send there. It does not store your IP address. Forum emails are sent through Resend. In the forum settings you can download your forum data or ask for it to be deleted.
• Player reports: when you report another player in the game (from the target window or a whisper window), the game server stores your account number, your character number and name, the reported character's number, name and account number, the reason you chose, the text you wrote (at most 200 characters), where you were (map, position, channel) and the time. Your IP address is not stored with the report. Only the server team sees reports, on the admin page, to check for rule violations; they add a status, a note and their admin name. The reported player is not told who reported them. Reports are deleted automatically 12 months after they were sent.
• Screenshots with a report: when you report a player you can attach up to 4 screenshots of your game window. You either take them in the report window ("+ Screenshot" or Print Screen while the report window is open), or pick them yourself from the screenshots the game saved earlier in its screenshot folder ("+ From folder", the last 3 days). The game only lists that folder to show you your recent screenshots; it never sends a file you did not pick, and your original files stay on your computer unchanged (the game sends a re-encoded copy). You can remove each one before sending. A screenshot shows what was on your screen at that moment, which can include other players' character names, chat and whisper messages and guild names. After the report was stored, the game client uploads the screenshots to our web server, where they are kept with the report number, not under a public address, with metadata such as EXIF removed. Your IP address is not stored with them. Only the server team sees them, on the admin page, to check the report. They are deleted automatically 12 months after they were sent, together with the report, and the team can delete them earlier. The game client keeps its own copy only until the upload has finished (at most one day if the game was closed during the upload).
• Impressão digital de hardware (anti-batota): sempre que inicias sessão no jogo, o cliente do jogo calcula uma impressão digital do teu computador a partir de até cinco componentes: o identificador da instalação do Windows (MachineGuid), o número de série da unidade do sistema, os identificadores da placa-mãe (UUID do sistema SMBIOS e número de série da placa) e o modelo do processador. Antes de ser enviado, cada componente é transformado no teu computador num hash unidirecional com salt, pelo que os próprios identificadores nunca nos são enviados. O servidor de início de sessão guarda estes hashes juntamente com o número da tua conta, as datas em que foram vistos pela primeira e pela última vez e o número de inícios de sessão em que foram usados. São usados apenas para o sistema anti-batota e para fazer cumprir os banimentos: a equipa pode banir o hardware de uma conta que tenha feito batota ou violado as regras; os inícios de sessão a partir de hardware correspondente passam então a ser recusados (também com outras contas), e a equipa pode ver que contas partilham um componente. As decisões de banimento da equipa ficam registadas. Fundamento jurídico: o nosso interesse legítimo num jogo justo e em banimentos eficazes (art. 6.º, n.º 1, alínea f), do RGPD). Conservação: uma impressão digital é apagada 12 meses depois da última vez que foi vista; um banimento de hardware é guardado enquanto se aplicar e apagado 12 meses depois de terminar ou de ser levantado. Durante um período de transição, os clientes antigos do jogo que não enviam impressão digital ainda podem iniciar sessão.
• Language: the language you choose on the website is kept in a cookie and, when you are logged in, stored with your account number on the web server, so the website, its emails and the forum use that language.
• Donations with PayPal (only when PayPal is offered on the donation page; it is off by default): you pay on paypal.com, where PayPal (Europe) S.à r.l. et Cie, S.C.A. is an independent controller for the payment. The website receives and stores the PayPal order id, capture id, amount, currency and status.
• Donations with Bitcoin: the payment runs through our own BTCPay Server (pay.aethernal.eu, on our own server), which processes the invoice (amount and status) and sees your IP address when you open its checkout page. When you donate in the game, the website asks BTCPay Server for the invoice's Bitcoin address and amount and shows them in the game window with a QR code made on our own server; no other service sees them. Bitcoin addresses and transaction ids are public on the blockchain.
• Donations: your account number and name, the donation option, the amount, the thank-you coins, the payment provider references, your two consents at checkout (acceptance of the Donation Terms with their version, and the request for immediate delivery with the acknowledgement that you lose your right of withdrawal) and the times, kept for 7 years (Dutch fiscal record keeping). The thank-you e-mail confirming your donation is sent through Resend. When a payment needs a check, the donation number and the provider ids are e-mailed to the operator.
• The website is served through Cloudflare, which processes connection data (such as IP addresses) to deliver and protect it.

Porquê (base jurídica)

To be written by the owner.

Durante quanto tempo

To be written by the owner.

Os teus direitos

To be written by the owner.

Contacto

To be written by the owner.