In short
- You log in with Discord. We receive your Discord user ID and name, and whether your Discord account uses two-factor authentication; nothing else from Discord.
- We store your account, your character, and its progress so you can play. Chat messages are delivered to other players but not stored, except when a player reports another: then the last few minutes of chat they could see go to our moderators with the report (see Reports and moderation).
- We use only the cookies needed to keep you logged in. No analytics, no tracking, no ads, and we never sell data.
- You can ask us at any time what we have about you, or to delete your account.
Who is responsible
Yonderlume is a free hobby project run by Wilvert, the Netherlands (the "controller" under the General Data Protection Regulation, GDPR). For anything about this policy or your data, email info@yonderlume.com.
This policy covers the website at https://yonderlume.com/ and the game at https://play.yonderlume.com/. We are not required to appoint a data protection officer.
The website
The website is a set of static pages hosted on GitHub Pages. It has no scripts, sets no cookies, and uses no analytics. As with any website, your browser sends GitHub your IP address and technical details of the request (such as the page and your browser type) so the page can be delivered; GitHub may keep these in its server logs for security purposes. See GitHub's privacy statement.
What we process in the game, and why
Your account (via Discord)
When you choose "Log in with Discord", Discord asks whether Yonderlume may see your basic profile
(Discord's identify permission). We then receive your Discord user ID,
your username, your display name, and whether your Discord account has
two-factor authentication turned on. We store the ID, the display name (or your username
if you have none), whether two-factor authentication is on (so the character screen can suggest it, and
to protect your items, see below), when the account was created, and when you last and the time before
last logged in (the character screen shows you your previous login, without any location). The
access token Discord gives us is used once to read your profile and is then revoked; we do not keep it.
We never receive your Discord password, email address, servers, friends, or messages.
Your character and game progress
An account has one character. For it: its name, appearance (skin tone, hair, eyes, face), level and experience, where it last was in the world, its gold, items and equipment, and quest progress. To keep the game fair and to be able to fix mistakes, the server also keeps a history of item and gold changes (for example loot picked up, items bought or sold in shops, items used) and of completed trades between players (who traded which items and how much gold, and when). When you delete your character in the game, its items, gold and progress are deleted at once; we keep a short record that it existed (its name, level, your account, and when it was created and deleted), which also keeps its name reserved for you for 72 hours. This record is kept for as long as your account exists.
Chat and other players
Chat messages (map, server, party, and whispers) are passed on to the players they are meant for in real time. They are not saved in the game's database or in its logs. So that a report can show what happened, the game server keeps the last 10 minutes (at most the last 50 messages) of each map's chat, server chat, each party's chat, and the whispers between each pair of players in its memory only; older messages are dropped, and everything is gone when the server restarts. Nothing of it is stored unless a player reports another (see Reports and moderation). Parties and pending invitations exist only while the server runs. Keep in mind that other players can see your character's name, appearance, level, whether you are away from the keyboard (after 15 minutes without input; after 60 minutes you are logged out), and your messages, and could take screenshots.
Reports and moderation
Players can report another player (right-click the player, or /report) for cheating,
harassment, scams, an offensive name or something else. A report stores: who reported whom (character
names and internal account and character numbers), the category and the reason given, and as evidence
the last chat messages of the last 10 minutes that the reporter could see and that involve either of the
two (at most 50, with the conversation around them; whispers only between the two of them), where both
characters were in the world, and the trades and dropped items that passed between the two in the last
7 days. Our moderators read reports, add notes, and close them.
When a moderator acts, the game records it: mutes (no chat, whispers, party invitations or trade requests until a given time), bans (no access to the game, until a given time or permanently) and warnings, each with its reason, who decided it and when. A sanction is tied to your Discord user ID, so it also applies to a new account made with the same Discord login. You are told the reason and the end date; if you think a decision is wrong, email info@yonderlume.com. Every action of our staff (moderators and administrators) is written to an audit log that cannot be changed: who did what to which character, why, and when. Operational alerts (for example that a ban was made, naming the character) go to a private channel of ours on Discord.
To protect against stolen accounts, a rare item given away in a trade within 10 minutes of logging in is handed over after a 30-second wait. This uses only the time of your login.
Cookies and browser storage
The game uses two cookies, both strictly necessary for logging in, so they do not need your consent:
| Cookie | What it does | How long |
|---|---|---|
__Host-game_session |
Keeps you logged in. A random value; we store only a fingerprint (hash) of it, with your account and its expiry date. | 30 days from logging in, or until you log out |
__Host-game_oauth |
Protects the Discord login against forgery while you are on Discord's page (a one-time code). | 10 minutes, deleted after login |
The game also remembers your interface settings in your browser's local storage (window positions, UI size, the minimap and quest tracker, the character you played last). These stay on your device and are never sent to us. You can clear them in your browser's settings.
Technical data and logs
To connect you to the game, our server necessarily processes your IP address. The web server in front of the game keeps no access logs. The game server writes an operational log: logins (with your Discord user ID), when a character connects and disconnects (with internal account and character numbers and the character name), and errors. Your IP address appears in it only when a connection attempt is rejected as invalid. Short-lived technical data, such as one-time connection codes (valid 30 seconds) and rate limits against spam, exists only in memory.
When you email us
We use your email address and message only to answer you and to handle your request.
Purposes and legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Providing the game: your account, login, characters, progress, chat delivery, trades | Discord ID and name, session cookie, game data, chat messages in transit | Performance of the agreement with you, the Terms of Service (Art. 6(1)(b)) |
| Fair play and security: preventing cheating, scams and abuse, enforcing the Terms, finding and fixing bugs, restoring lost items | Item, gold and trade history; logs; IP address | Our legitimate interest in a safe, fair and working game (Art. 6(1)(f)) |
| Moderation: handling reports, mutes, bans and warnings, and keeping a record of what our staff did | Reports with their chat evidence, positions, trades and drops; sanctions and their reasons; the staff audit log | Our legitimate interest in a safe community, and our duties as a hosting service under the EU Digital Services Act (Art. 6(1)(f), 6(1)(c)) |
| Backups, so a failure does not wipe everyone's progress | The whole game database | Legitimate interest (Art. 6(1)(f)) |
| Answering your questions and requests | Your email and what you send us | Legitimate interest (Art. 6(1)(f)); for requests about your rights, our legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, you may object (see your rights). We do not use your data for advertising or profiling, and no decisions with legal or similarly significant effects are made about you by automated means. (The server does automatically limit how fast inputs and chat messages can be sent, to stop speed hacks and spam.)
How long we keep it
- Account and game data: as long as your account exists. Accounts without a login for 24 months may be deleted, after a notice to the account where possible.
- Login sessions: 30 days at most; expired sessions are deleted from the database automatically, and logging out deletes yours at once.
- Item, gold and trade history: as long as the game runs. These records refer to characters only by internal numbers; once your account and characters are deleted, they no longer link to you.
- Server logs: kept for at most 6 months, then deleted automatically.
- Recent chat in the server's memory: 10 minutes at most, never written to disk unless it becomes evidence in a report.
- Reports, with their evidence and notes: 180 days after they were made, then deleted automatically.
- Mutes, bans and warnings, and the staff audit log: 2 years after the sanction ended (a permanent ban is kept while it lasts), then deleted automatically.
- Backups: a backup of the database is made daily and before each update of the game, and kept for 14 days. Backups stay on the same machine; they are not copied elsewhere. Data you had us delete disappears from backups when they expire.
- Emails: as long as needed to handle your request, and at most 12 months after that.
Who else receives data
We do not sell, rent or share your data for marketing. We use these services:
- Discord (Discord Inc., USA) for logging in. Discord handles your Discord account under its own privacy policy and knows that you use Yonderlume. You can remove Yonderlume under Authorized Apps in your Discord settings.
- GitHub (GitHub, Inc., USA) hosts the website (see above).
- Game server hosting: the game server and its database run on a computer we operate ourselves in the Netherlands; no hosting provider has access to them.
- Other players see what the game shows them (see Chat and other players).
- Authorities, only if the law requires us to.
Discord and GitHub are based in the United States. Transfers to them are covered by the EU–U.S. Data Privacy Framework and/or the European Commission's standard contractual clauses, as described in their privacy policies.
Security
Everything is sent over HTTPS. There are no passwords to leak: Discord handles the login. Session cookies cannot be read by scripts and are stored on the server only as a hash. The database is not reachable from the internet, and access to the server and the backups is restricted to the operator.
Your rights
Under the GDPR you have the right to:
- access the data we have about you and get a copy;
- have incorrect data corrected;
- have your data deleted, including your whole account;
- restrict processing, or object to processing based on legitimate interests;
- receive your data in a machine-readable format (portability).
How: email info@yonderlume.com with your Discord username and one of your character names. To make sure the request really comes from you, we may ask you to confirm it, for example by sending us a message through Discord. We answer within one month.
Deleting your account: you can delete your character in the game (on the character screen, Delete character), but the game has no button for the whole account yet. Email us and we will delete your account, character, items and sessions within one month; the history records described above then no longer link to you, and backups expire within 14 days.
You also have the right to lodge a complaint with a data protection authority: in the Netherlands the Autoriteit Persoonsgegevens, or the authority where you live. We would appreciate the chance to sort it out with you first.
Children
You need a Discord account to play, so you must meet Discord's minimum age, and our Terms of Service set a minimum age of 13, or higher where Discord requires it (16 in the Netherlands). If you believe a child has given us data without permission, contact us and we will delete it.
Changes to this policy
When the game changes, this policy changes with it. We will update the date at the top, and announce important changes on the website or in the game before they take effect.