Privacy Policy — Empyrea

1. Who this covers

This policy explains what personal data Empyrea collects, why, who sees it and what you can do about it. It applies to the Empyrea website (including the player dashboard, the forum and support), to the game accounts and characters you create, and to the sign-in and payment features connected to them. "We" means the people who run Empyrea.

2. What we collect

Account data you give us

Your email address, a username, and a password. We never store your password itself: we store a one-way scrambled form (a hash) of it.
Your game account names. Your game passwords are handled by the game server (see section 11).
Your forum profile choices, such as your avatar and your email notification settings.
Messages you send us, such as support tickets, and what you post on the forum.

Data from the game

Which characters are on your game accounts and their basic details (name, class, level, fame, guild), and, to show your armory, their equipment and inventory. This is read from the game and displayed to you. Rankings (name, faction, class, level, fame, guild) are public.

Purchases and Cash Points

Your Cash Point balance and history, your orders (what you bought, amounts, dates, status and the reference numbers from the payment provider), your Shop purchases, Wheel spins and the deliveries to your characters.
Your card or PayPal details are entered on the payment provider's own page. They never reach our servers.

Technical data

Your IP address, browser type and the time of requests, kept in security and activity logs (for example sign-ins, password changes, purchases and staff actions). We use them to run, protect and troubleshoot the Service.
A record of the emails we send you (the address, subject, type and whether it was delivered), but not the text of the message.

3. Signing in with Discord or Google

If you choose to sign in with Discord or Google, that service gives us your account identifier and, depending on the service, your name or username and your email address. We use them to create or find your Empyrea account. We do not receive your password for that service and we do not read your messages, servers, contacts or files. You can stop using that sign-in by contacting us.

4. How we use your data

To create and run your accounts, characters, Cash Points, Shop, Wheel, forum and support.
To process payments, deliver what you bought and correct problems with orders.
To send you emails that are part of the Service: account confirmation, password reset and, if you keep them switched on, replies to your tickets and payment notices. Forum emails are off unless you turn them on.
To keep the Service safe: detecting cheating, fraud, abuse and attacks, limiting repeated attempts, and enforcing our Terms.
To meet legal, tax and accounting duties and to handle legal claims.

We do not sell your personal data and we do not use it for advertising.

5. Cookies

We use a small number of cookies, mainly to keep you signed in. They are listed in our Cookie Policy.

6. Who we share data with

Service providers who help us run Empyrea and only for that purpose: our hosting provider, a network and security provider (it delivers the site, protects it and provides the bot check on sign-up and login), an email delivery provider, and payment providers (they process your payments under their own policies).
Sign-in providers if you use them, as described above.
Our staff, who can see only what they need to help you. Staff actions are recorded in an activity log.
Authorities or other parties where the law requires it, or to protect people, the Service or our rights.
Other players see only what you choose to make public: your forum posts and username, your avatar and your characters' names, class, level, fame and guild in the rankings.

7. International transfers

Our providers may process data in countries other than yours. Where the law requires safeguards for such transfers, we rely on the protections our providers offer, such as standard contractual clauses.

8. How long we keep it

Account and profile data: until you ask us to delete your account.
Support tickets: up to 2 years after the ticket is closed.
Security and activity logs and email logs: up to 12 months, longer only where needed to investigate abuse.
Payment and order records: as long as tax, accounting or dispute rules require, usually up to 7 years.
Forum posts: until you ask for removal. If you ask us to delete your account, we remove your name from your posts or delete them, as described on the data deletion page.

9. Deleting your data

You can ask us to delete your account and personal data at any time. How to do it, how long it takes and what we must keep are explained on the Data deletion page.

10. Your other rights

Depending on where you live (for example under the GDPR or similar laws) you may have the right to access the personal data we hold about you, to correct it, to restrict or object to some uses, to receive a copy in a common format, and to withdraw consent where we rely on it. You may also complain to your local data protection authority. To use these rights, open a support ticket or email [email protected] from the address on your account. We may need to confirm that you are the account owner first.

11. Security

We protect your data with measures such as one-way hashing of website passwords, encrypted storage of payment keys, limits on repeated login attempts, short-lived confirmation links and an activity log of staff actions. Staff accounts need a second sign-in step. No system is perfectly secure.

One limit you should know: the game server stores game passwords in a simple form that we cannot change. Use a game password you do not use anywhere else, and never reuse your email or website password for the game. The website never shows your game password and only lets you set a new one after you confirm your website password.

12. Children

Empyrea is not for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, tell us and we will delete it. In some countries the minimum age is higher, and the rules in our Terms apply.

13. Changes to this policy

We may update this policy. The date at the top of the page shows the latest version, and we will tell you about important changes on the website or by email.

14. Contact

For privacy questions or requests, open a ticket from your dashboard (Support) or email [email protected].