Ferravum
Who is responsible
The operator of Ferravum is the controller of your personal data under the General Data Protection Regulation (GDPR). For anything in this policy, write to [email protected].
What we store
We keep only what the game needs to work.
- Your account: your email address, a hash of your password (never the password itself), whether the address is verified, your language and your display preferences, and the roles your account holds.
- Your play: your characters and everything about them — level, stats, gold, items, guild, fight logs, purchases of in-game currency, messages the game sends you — on each server you play.
- Technical records: the IP address and browser a request comes from, kept in security logs so we can spot abuse, and short-lived session identifiers that keep you signed in.
- Purchases: the record of what you bought, when and for how much. Payment details are handled by the payment provider; we never see or store card numbers.
- Support: the emails you send us, for as long as the conversation needs them.
Why we store it
To run the game you asked for — your account, your characters, your purchases — the basis is our contract with you. To keep the service secure, to find and stop cheating and abuse, and to fix bugs, the basis is our legitimate interest in running a fair, working game, which we have weighed against your interest in privacy. To keep records of purchases, the basis is the law that requires us to.
We do not use your data for advertising, we do not build profiles of you, and we do not make automated decisions about you with legal effect. A ban is a person’s decision.
Where it lives and who sees it
Accounts and game data are hosted on Microsoft Azure in the European Union (West Europe). Requests reach us through Cloudflare, which protects the service from attacks and sees the IP addresses and the traffic that passes through it. Emails — verification, password resets — are sent through Azure Communication Services.
These providers process data on our behalf under contracts that bind them to this purpose. We do not sell, rent or share your data with anyone else, except where the law requires us to or where it is needed to protect the service or other players.
How long we keep it
Account and game data stay as long as your account exists. When you ask us to delete it, we remove the account and every character within 30 days; purchase records are kept for as long as tax law requires, and nothing else is. Security logs are kept for a short, fixed period and then discarded. Backups roll over on their own schedule and are never restored to bring a deleted account back.
Your rights
Under the GDPR you may ask us, at any time and for free:
- to tell you what data we hold about you and to give you a copy of it;
- to correct data that is wrong;
- to delete your data — your account and everything on it;
- to give you your data in a form you can take elsewhere;
- to stop, or limit, a use of your data that rests on our legitimate interest.
Complaints
Write to us first and we will answer within a month. You also have the right to complain to the data protection authority of the country you live in.
Children
Ferravum is not meant for children under 16. We do not knowingly collect data from them; if we learn that we have, we delete it. If you are a parent and believe your child has an account, write to us.
Changes to this policy
The date at the top says when this policy last changed. We will tell you in the game or by email about a change that affects what we do with your data.
Questions? Write to us: [email protected]