Privacy notice

Operator and contact

Vaelgate is the game and service name. The responsible operator and postal contact are identified on this page. For privacy questions, access, correction, export or deletion requests, use the support email.

Accounts, progress and social features

We process your account email, a salted password hash, account and session identifiers, character names and appearance, progress, inventory, equipment, game currencies and transaction history to authenticate you, save progress and provide the game.

Social features involve friendships, blocks, chat and direct messages. Reports and support requests contain the information you choose to provide and records needed to handle them. Other players can see information you make available through gameplay, profiles, chat and rankings.

Technical information

Technical reports contain platform and game version, a short error or disconnect code, session length and an hour-level timestamp. The technical reporting store does not contain an account, installation or device ID, or an IP address. Error reports use codes rather than the text of your private messages.

Network services receive a connection address to handle requests. Hosting, security and email systems may process connection metadata and service logs separately from the anonymous game reports.

Cookies and device storage

The website remembers your language with the er_lang cookie. Signing in uses secure, http-only session cookies. The iOS app uses the system Keychain for saved session secrets. Language and graphics preferences may also be stored locally.

The current website and native project do not include a third-party advertising or analytics service. Changes that introduce a new data use require an updated notice and any consent required before that use begins.

Why we process data

We use account and gameplay information to provide the online service you request. Security checks, abuse investigation and service diagnostics support our legitimate interests in protecting players and operating a reliable, fair game. Where a law requires processing, we rely on that legal obligation. Optional processing that requires consent must only begin after that consent is given.

An account email and authentication information are necessary for sign-in; gameplay records are necessary to save progress. You choose whether to use social features or send a support request.

Who receives information

The current production website, game API, game servers and PostgreSQL database are hosted on Hetzner infrastructure in Germany. Authorized support and moderation staff can access records needed for their work. Messages sent to the published Gmail address are delivered through Google’s email service. Apple and Google separately handle their store and beta-distribution information under their own privacy policies.

Email and platform providers may process information outside the EEA. Contact us for information about a particular provider, processing region or applicable transfer safeguards. EU game-server hosting does not mean that all email and platform processing happens only in the EU.

How long information is kept

Account and gameplay records support the active account and its progress. Account deletion revokes access and removes or replaces the identifying fields described on the account-deletion page. Some economic, audit and open-report records remain for game integrity, dispute handling, abuse investigation or applicable legal obligations. Contact support to request review or erasure of retained personal information.

Local chat and anonymous technical reports have a 30-day cleanup threshold. Cleanup runs in limited batches when new information arrives, so it does not guarantee removal exactly at the 30-day boundary. This threshold is not a retention period for every data category.

The host’s service journal is configured with a 14-day retention limit and a size cap. Scheduled nightly database backups keep the latest 14 copies. Separate maintenance snapshots can be kept while needed for recovery or an investigation. Deleting a live account does not instantly remove an existing backup. Access to recovery copies must remain restricted; contact support about a specific retained record or request.

Your choices and rights

Depending on the applicable law and processing basis, you may request access, correction, erasure, restriction, portability or object to processing. You can withdraw consent for processing based on consent. We may verify account ownership and explain any applicable limits when handling a request.

You can complain to the data-protection authority for your country. In Romania this is ANSPDCP. Contacting us first does not remove your right to complain.

Young players and updates

The App Store content rating is 13+. A content rating does not replace applicable age or parental-authorization requirements. Contact support if you believe a child has supplied personal information without the required authorization.

We update this notice when services or information handling change. The date on this page identifies the current text. Material new uses need an updated notice and any required consent before they begin.