Privacy Policy

This explains what we know about you, why, who else sees it, how long we keep it, and what you can ask us to do with it.

1. What we collect

• Your account: your character name, your email address, your password (stored scrambled — we can’t read it), the bio you write, and when you agreed to the Players United Agreement and Terms.
• How you play: what your character does and owns — quests, fights, trades, games, gold and items — and what you write in the Hearth, in letters and on your profile.
• Technical details: the IP address you signed up from and last connected from, when you were last active, and ordinary server logs (IP address, the pages requested, your browser type).
• The waitlist: if you join it, your email address, your IP address and who referred you.
• Discord, if you link it: your Discord user ID and username, and whether you want direct messages from the game’s bot.
• When you contact us: whatever you choose to tell us.

2. Cookies and your browser

We use a small number of cookies that the game needs to work: one that keeps you logged in (and remembers you, if you ask it to) and one that protects your forms from being forged. The chat also remembers your preferences, such as which channel you had open, in your own browser. That’s all: no advertising cookies, no analytics, no third-party trackers.

3. What we use it for

• To run the game and your account — you can’t play without it.
• To keep accounts safe and play fair: IP addresses and activity help us spot stolen accounts, cheating, bots and extra accounts used to gain an advantage.
• To moderate and enforce the Players United Agreement.
• To contact you about your account, your invitations and important changes to the game or these policies.
• To understand how the game is played, in aggregate, so we can make it better.

We don’t use your information for advertising, and we don’t sell it or share it for anyone else’s marketing. If you play from the UK or the EU: we rely on our agreement with you (to run your account), our legitimate interest in keeping the game safe and fair, your consent (for linking Discord), and our legal obligations.

4. Who can see it

• Other players see your character: its name, level, face, profile and bio, and what you do in public — chat in the Hearth, rankings, the news. They never see your email or IP address.
• Realm staff can see account details, including email and IP address, to run and moderate the game, and may read chat and letters when looking into a report or abuse.
• Services we rely on, only as far as they need to: Cloudflare, which delivers the site and protects it from attacks (it sees your IP address and the pages you request); Discord, if you link your account or when realm chat is mirrored to our Discord server (Discord’s own privacy policy applies there); and an email provider, when we send you email. The game takes no payments, so no payment processor ever sees you.
• When the law requires it, or to protect someone’s safety, we may share information with the authorities.
• If Avaloth changes hands, your information would go with the game, and we’d tell you first.

5. How long we keep it

We keep your account information for as long as you have an account. If you ask us to delete it, we delete or anonymise your personal information — your email, IP addresses and Discord link — though some of the game’s history, such as old chat lines or news of a famous duel, may remain without those details attached. We keep a record of bans and of purchases where we need it to prevent abuse or the law requires it. Server logs and backups are kept for a limited time and then overwritten.

6. Keeping it safe

The site only runs over an encrypted (HTTPS) connection, passwords are stored scrambled, and only realm staff can see personal details. No system is perfect; if something ever goes wrong that affects your information, we’ll tell you.

7. Children

Avaloth is for players aged 13 and over. We don’t knowingly collect information from anyone younger; if you believe a child under 13 has an account, open a support ticket and we’ll delete it. Parents and guardians of younger teens can ask us what we hold about their child the same way.

8. Your choices and rights

• See what we hold about you, and get a copy of it.
• Correct it — or change your email and bio yourself in Settings.
• Delete your account and personal information.
• Unlink Discord, or turn off the bot’s direct messages, at any time in Settings.
• Depending on where you live — for example California, the UK or the EU — you may have further rights, and we’ll honour them. We won’t treat you differently for using them.

To do any of this, open a support ticket.

9. Where it’s kept

Avaloth is run from the United States, so if you play from somewhere else your information is processed there.

10. Changes

If we change this policy we’ll update the version and date at the top, and tell you in the game if the change matters.

11. Talk to us

Questions about your privacy? Open a support ticket.