FÓLKVANGR

This privacy policy describes how Fólkvangr / Splashgame (“we”, “us”) collects, uses, and protects the personal information of visitors and players of the Fólkvangr World of Warcraft private realm and its associated web portal at vanilla.splashgame.org.

1. Information We Collect

• Account registration: username, email address, chosen faction, and a bcrypt-hashed password.
• Game data: character names, levels, classes, races, played time, gold, professions, and activity logs generated naturally by playing.
• Portal activity: login times, IP addresses (stored in session only, not permanently logged), page actions (lottery, slot machine, etc.).
• Communication: any messages you send to us through Discord, the forum, or email support channels.

2. How We Use Your Information

• To operate your game account and portal session.
• To send password reset and 2FA emails when you request them.
• To enforce server rules and investigate abuse reports.
• To display aggregated, anonymised statistics on the Statistics page and front-page counters.
• We do not sell or share your personal data with third parties for marketing purposes.

3. Cookies & Sessions

We use a single session cookie to keep you logged in to the portal. No advertising or tracking cookies are placed. The session cookie expires when you close your browser or after the configured session lifetime.

4. Data Retention

Account and character data is retained for as long as your account is active. If you request account deletion, your portal account, personal data, and characters will be removed within 30 days. Game logs may be retained for up to 90 days for abuse investigation purposes.

5. Security

Passwords are stored using bcrypt hashing and are never stored in plain text. Communication between your browser and our server is encrypted via HTTPS/TLS. We implement reasonable technical safeguards; however, no system is 100% secure and we cannot guarantee absolute security.

6. Third-Party Services

• Discord — our community and support platform (discord.com privacy policy applies).
• Splashgame BBS — community forum at splashgame.org (forum privacy policy applies).
• SMTP email delivery is used only for transactional emails (2FA codes, password resets).

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to: access, correct, or delete your personal data; restrict or object to processing; and data portability. To exercise any of these rights, contact us through Discord or the community forum and we will respond within 30 days.

8. Children

The portal is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a minor has registered, please contact us so we can remove the account.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the portal after changes constitutes acceptance of the revised policy.

10. Contact

For privacy questions or data requests, contact us on the community forum or via Discord.