Privacy Policy

Last updated: 9. 9. 2026

These terms describe what data the Vaelorn game (available at vaelorn-official.com) collects, what it's used for, and what rights you have as a player. The operator is a developer going by the name Foro (see the About page for contact).

What data we collect

Account: username and password (the password is stored only as an irreversible hash, never in readable form).
Email (optional): if you voluntarily add and verify an email address in Settings, we store it with your account. It's used exclusively to verify the address is yours, to recover a forgotten password, and to unlock the referral link (see below). Without an email the game works the same, just without those two features.
Referral (inviting a friend): if you register via another player's link, we store that connection (who invited whom) and whether the reward has already been paid out, so we can credit the one-time reward to both sides.
Game data: your progress, statistics, gear, character avatar, and other game progress tied to your account.
Support messages: if you send us a message via the Support form, we store its content along with your username so we can respond.
Registration IP address: for a newly created account, we store the IP address used at registration. We use it exclusively to detect abuse of the referral system (e.g. inviting "yourself" by creating a second account from the same device/network) - it isn't shown to anyone else and isn't used for any other purpose. IP addresses are additionally processed briefly by the server in general for abuse protection (see the Security section).

Cookies and local storage

The game uses one technical cookie for login (it contains only a signed token, no personal data readable by a third party). Settings like volume, language, or your in-progress run are stored locally in your browser (localStorage) and are never sent anywhere.

Sending emails

If you set and verify an email, or request a password reset, we send you an email (a verification link or a link to set a new password) via the third party Resend, which delivers the email only and doesn't use it for any other purpose. Links in the email are valid only for a limited time (24 hours for email verification, 1 hour for password reset) and stop working once used or expired.

Ads and third parties

The game may display ads via Google AdSense / the Google Ad Placement API. Google and its advertising partners may use their own cookies and similar technologies for this to show and personalize ads based on your prior visits to this or other sites - see the Google privacy policy for partner sites for details.

On your first visit you have the option to decline ad personalization via the consent prompt. You can adjust your Google personalized ad settings at any time directly in Google Ads Settings, or for other participating ad providers via aboutads.info.

To display its font, the page loads Google Fonts, which may technically allow Google to record that you visited the page.

How long we keep data

We keep account data (including email, referral link, and registration IP address) and game progress for as long as the account exists. You can permanently delete your account (and all data tied to it) at any time directly in-game under Settings.

Security

Data transfer between your browser and the server is encrypted (HTTPS). Passwords are stored exclusively as a hash (bcrypt), never in readable form. Email verification and password reset links are stored in the database only as an irreversible hash, not in their original form. Access to the server is restricted to the operator only.

Your rights

You have the right to access your data, correct it, and have it fully erased. You can erase your account yourself under Settings; for other requests (e.g. a data export) write to us via the Support form in-game.

Changes to this policy

We may update this policy from time to time, for example when adding a new feature that processes data differently. You'll find the last-updated date at the top of the page.