Privacy Policy

What we keep

• Your account: name, email address and how you sign in (email and password, Apple, Google or X). Apple may give us a private relay address instead of your real one.
• If you choose Play now: a guest account with no name or email from you. It holds a random id, a placeholder address that receives no mail, and the same session details as any sign-in. Saving the kingdom to Apple or email moves the kingdom to that account and removes the guest account.
• Guest recovery in the iPhone app: a random key in this device's Keychain and its hash on our server. It lets the app recover your guest kingdom when its sign-in session expires. The key is not synced to other devices.
• Your kingdom: its name and motto, buildings, stores, armies, marches, deeds, settings and purchase history.
• Sign-in sessions: the IP address and device user agent of each session, so you can stay signed in and we can stop abuse.
• A short record of game actions (audit log) and a first-party onboarding count: which first steps a kingdom has reached and when. It holds the kingdom's id, the step and a time, nothing else. One step records whether the kingdom was founded in the iPhone app or on the website, read from the app's user agent. Each visit also leaves a row with a random visit id, its start time, its length in seconds and the name of the tab that was open when you left it (for example the City or the Road), and a first purchase is marked the same way as a step. Daily totals of the steps are kept without any kingdom id. No third-party analytics or advertising SDK is used, and nothing is used to track you across other apps or websites.
• Server logs, which may contain your account id when something goes wrong.

Who handles it for us

• Vercel hosts the game and its database connection, and keeps request logs (including IP addresses) for its log retention period.
• Neon stores the account and game records. Cloudflare provides the domain's DNS and forwards messages sent to our support address to us.
• Apple processes App Store purchases and Sign in with Apple. We receive a signed receipt and the product you bought, never your card or Apple ID password.
• When password reset is available and you request it, Resend delivers the reset email. It receives your email address and that email's content, never your password.
• The Grok sign-in service (auth.grok.me) relays Google and X sign-in on the website. It passes us your name, email and account id from that provider. The iOS app does not offer Google or X.
• Stripe processes card payments on the website only, when they are switched on. Stripe receives your card and email details under its own privacy policy; we receive the payment result. The iOS app never takes card payments.

Fonts are served from our own site. We do not sell your data, share it for advertising, or use it to train AI models.

Other players

Your kingdom's name and motto are a public part of the game and can be shown to other players where the game lists kingdoms. Do not put personal information in them.

Any player can report a kingdom's name or block a player from that kingdom's card. We keep which account reported which name, and who blocked whom, so a name reported by several players can be hidden and reviewed. Both are deleted with your account.

So that one person cannot hide a name with several accounts, each report also keeps two keyed hashes: one of your network (the first part of your IP address) and one of your IP address with your device's user agent. We never store the IP address or the user agent themselves, and a hash cannot be turned back into them. The hashes are only compared with other reports of the same name, and are deleted 30 days after the report, or with your account. If your kingdom's name is hidden, you can ask for a review once from Profile and settings.

How long we keep it

We keep your data while you have an account. When you delete the account, the kingdom, purchase records, guest recovery record and sign-in are removed at once and we revoke any Sign in with Apple tokens. Apple and Stripe keep their own records of payments. Guest accounts without purchases or device recovery are deleted, with their kingdoms, after 30 days without play. Guests with purchases or device recovery are kept until you delete them or save the kingdom to an account. Server logs expire with the hosting provider's retention. App Store notifications we already received keep only Apple's transaction ids, with no link to you.

Deleting your account

Tap your avatar at the top to open Profile and settings, choose About, and tap Delete account. This works the same for a guest account: the kingdom and the guest sign-in are removed at once. Deleting does not cancel a March Pass subscription: Apple bills it. Cancel it first in your Apple ID settings, or use Manage subscription in the Shop under Your purchases.

Children

Vaelora is not directed at children under 13 and we do not knowingly collect their data.

Contact

Questions, data requests or a report about another player's kingdom name: support@playvaelora.cc.