Privacy Policy

Vaelrik Studios is the data controller for the personal data described in this policy. References to "we", "us", and "our" mean Vaelrik Studios.

If you have any questions about your data, open an Account Help ticket on this portal — a support agent will route it to our privacy team.

Account data: email address, hashed password, account preferences, ban state, and the date you joined.

Gameplay data: characters on your account, in-game session times, zones visited, items held, and game events relevant to fair-play monitoring.

Support data: the tickets you open through this portal — their category, subject, body, status, attachments, and the conversation with our team.

Technical data: IP address, browser user-agent, viewport size, and locale at the time of each request. We use this to protect the service and to debug issues.

To deliver the game and the support portal — without your account data you cannot sign in, and without your support data we cannot reply.

To keep the service fair and safe — for moderation, fraud and cheat detection, and to investigate bans and reports.

To communicate with you — service announcements, ticket replies, and (only with your consent) marketing messages.

To improve Vaelrik — aggregate analytics, balance changes informed by gameplay data, and bug fixes informed by support tickets.

Under the EU/UK GDPR and equivalent laws, we rely on: performance of the contract between us (for account and support data), our legitimate interests in keeping the service secure (for technical and fraud-detection data), and your consent (for optional marketing communications, which you can withdraw at any time).

Active account data is kept for as long as your account exists. If you delete your account, we delete or anonymise your personal data within 90 days, except where we are required by law to keep it longer (for example, financial records).

Support tickets are kept for up to 365 days after they close, then anonymised. Ban evidence may be kept longer to defend against repeat offences.

We do not sell your personal data.

We share data only with: our service providers (hosting, email delivery, payments) under contract; law-enforcement or regulators when legally required; and, on a permanent account transfer (a sale of all or part of our business), the new owner under the same terms.

We never share the identity of a player who reported another player.

We use a small number of strictly-necessary cookies to keep you signed in and to remember your locale. We do not use third-party advertising cookies on this portal.

You can clear cookies at any time from your browser. Doing so will sign you out.

Passwords are stored as bcrypt hashes — we cannot see them and we cannot send them back to you. We transport every request over HTTPS, rate-limit sign-in attempts, and verify uploaded image attachments by their magic bytes to keep payloads safe.

No system is perfectly secure. If we detect a breach affecting your data we will tell you, and the relevant authorities, as soon as the law requires.

Depending on where you live, you have the right to: access the personal data we hold about you; correct inaccurate data; delete your account and the data tied to it; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time where we relied on it.

To exercise any of these rights, open an Account Help ticket. We respond within 30 days.

Vaelrik is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected such data, open an Account Help ticket and we will delete it.

Open a ticket on this portal for the fastest response, or write to Vaelrik Studios, attn: Privacy, at the address published on vaelrik.com.

If there is a conflict between a translated version of this policy and the English version, the English version prevails.