Privacy policy

Last updated: 24 October 2026

This privacy policy describes how Heraldmoor Online ("the Game", "we", "us") collects, uses, and protects your personal information when you use our game service.

1. Information We Collect

Account Information:

• Username (chosen by you when you start playing)
• Password, if you set one (stored as a one-way cryptographic hash — we cannot see your actual password)
• Guest players without a password get a random sign-in token. A hash of it is kept on our server, and the token itself is kept in your browser's local storage so the same device can sign you back in. Clearing your browser data removes it.

Technical Information:

• IP address (logged when you connect to the server, and used to limit how many new characters one connection can create)
• Connection timestamps (when you log in and disconnect) and total time played
• Progress milestones (for example, the first time you finish the starter task), used to improve the first-time experience

Gameplay Data:

• In-game inventory, equipment, skill levels, and progression
• Chat messages (public, private, and group messages sent through the game)
• Trade and transaction history (maintained in an internal audit ledger)
• Housing and shop data

2. How We Use Your Information

We use the information we collect to:

• Authenticate your account and prevent unauthorized access
• Provide and maintain the game service
• Detect and prevent cheating, abuse, and unauthorized access
• Enforce our terms of service and game rules
• Investigate reports of misconduct

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage and Security

• Passwords are hashed using the scrypt key derivation function with unique random salts. We cannot recover or view your password.
• Game data is stored in a local database on our server infrastructure.
• We implement rate limiting and other security measures to protect against unauthorized access.
• While we take reasonable measures to protect your data, no method of electronic storage is 100% secure.

4. Data Retention

• Account data is retained for as long as your account exists.
• Server logs (including IP addresses) are retained for up to 90 days for security and debugging purposes.
• Economy audit ledger entries are retained indefinitely for game integrity purposes.
• Chat messages are not permanently stored and exist only during your active session.

5. Your Rights

You have the right to:

• Access your personal data — contact us to request a copy of the data we hold about you.
• Delete your account — contact us to request permanent deletion of your account and associated data.
• Correct inaccurate data — contact us if any information we hold is incorrect.

If you are in the UK, you have rights under the UK GDPR, including the right to complain to the Information Commissioner's Office (https://ico.org.uk). If you are in the European Economic Area (EEA), you may also have rights under the GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA).

6. Children's Privacy

Heraldmoor Online is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

7. Third-Party Services

The game screen loads the "Inter" typeface from Google Fonts (served by Google), so Google receives your IP address when the game loads. Google's privacy policy applies to this service: https://policies.google.com/privacy

The public website pages use typefaces hosted on our own server and make no requests to other companies. We do not use advertising or tracking cookies.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of material changes through an in-game announcement or by updating the "Last Updated" date above.

9. Contact

For privacy-related questions, data access requests, or account deletion requests, contact:

Type ::bug in the game followed by your request, and we will reply in the game.