Privacy

Privacy

Deep Vein is run by Klimatræ ApS (CVR 43666320), Denmark — the data controller. Questions, or to use a right below, write to dynastyidlegame@gmail.com. This is the plain version; it is accurate, not a lawyer's.

What we keep, and why.

Your account — a username, your password (stored only as a one-way hash, never in the clear), and an email only if you add one, used just to reset a lost password. Needed to run your account.

Your character — skills, inventory, position, everything the game is. Needed to play.

Chat you send — kept so the room has a history, and so it can be moderated.

Direct messages — kept so a conversation follows you from one device to another, and shown to nobody but the two of you.

Your latest IP address — kept for security and to enforce the one-character rule and bans (a legitimate interest). Only the most recent one.

Purchases — what pack, how much, and when. Card details never reach us: payment is handled by Xsolla on its own page (purchases before October 2026, by Stripe).

A little onboarding record — which first-time steps a new player reaches, so the start can be improved. No profiling, no ads.

Cookies. One cookie, sid, keeps you signed in. It is strictly necessary, so it needs no consent banner. There is no advertising, no analytics, and no third-party tracking of any kind.

Who else touches it. Hosting is Hetzner (servers in the EU). Password-reset email goes through Resend. Payments go through Xsolla, which runs the payment page and sells the gems as merchant of record; it is told your account number, so the gems reach the right character (earlier purchases went through Stripe). A bug report you send includes your character name and where you were standing, and is delivered to the team over Discord (a transfer outside the EU). That is the whole list.

How long. Chat is kept about 90 days, direct messages 14 days (and only the last 50 lines with each person), the onboarding record about 180 days, and backups roll off after 3 days. Payment records are kept longer where the law requires it for accounting, with your account link removed if you delete your account.

Your rights. Under Account → Your data & privacy you can download everything we hold on you and delete your account for good. You can change your email and password there too. For anything else — to object, or to complain — write to the address above; you can also complain to your data-protection authority (in Denmark, Datatilsynet).

One limit worth naming: chat is stored by character name, so lines said under an earlier guest name may not be tied to your account in an export or a deletion.