Privacy Policy

1. Who is responsible for your data

Ameroth Studios (Sweden) is the data controller for personal data processed through Ameroth (“the Game”). For any privacy question or to exercise your rights, contact us at support@ameroth.com.

2. What we collect

• Account data — the email address you sign up with, a password (stored only as a secure hash by our authentication provider), and the account number assigned to you.
• Game data — your characters, progress, inventory, stats, guild membership, and related save data.
• Communications — messages you send in realm chat, guild chat, whispers, and any reports you submit.
• Technical & security data — your IP address, browser and device information, and log data. We log the IP used at signup to prevent abuse and spam.
• Local storage — we store session and game-state data in your browser so the Game works and remembers you between visits.

3. Why we use it & our legal basis

• To provide the Game — create and run your account, save progress, enable multiplayer features (GDPR Art. 6(1)(b), performance of a contract).
• Security, anti-cheat & moderation — protect the Game and players, prevent abuse, and enforce our Game Rules (Art. 6(1)(f), legitimate interests).
• Communication — send account-related emails such as confirmation and password reset (contract / legitimate interests).
• Consent — where we rely on your consent (e.g. optional marketing, if offered), you can withdraw it at any time.

4. Who we share it with

We do not sell your personal data. We share it only with service providers (processors) that help us run the Game, under contracts that protect your data:

• Supabase — database and authentication (account, game data, password hashing).
• Cloudflare — hosting, content delivery, and bot protection (Turnstile).
• Resend — sending account emails.

We aim to keep data within the EU/EEA. Where a provider processes data outside the EEA, that transfer is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

5. How long we keep it

We keep your account and game data for as long as your account exists. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must keep certain records (for example, security logs and moderation records) for a limited time to protect the Game and meet legal obligations.

6. Your rights

Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, receive a portable copy, and withdraw consent where processing is based on consent. To exercise any of these, email support@ameroth.com. You also have the right to lodge a complaint with your data-protection authority — in Sweden, that is the Swedish Authority for Privacy Protection (IMY, imy.se).

7. Children

Ameroth is not directed to children under 13. We do not knowingly collect personal data from anyone under that age. If you believe a child has given us personal data, contact us and we will delete it.

8. Security

We use technical and organizational measures to protect your data, including encrypted connections and hashed passwords. No system is perfectly secure, but we work to keep your data safe and will act on any breach as the law requires.

9. Cookies & local storage

We use essential cookies and browser local storage to keep you signed in and to store your game state and preferences. These are necessary for the Game to function. We do not use third-party advertising cookies.

10. Changes to this policy

We may update this Privacy Policy as the Game develops. We will revise the version and date at the top of this page and, for material changes, notify you in-game or by email.

11. Contact

For any privacy question or request, email support@ameroth.com.