Kheldra Privacy Policy

This page explains what information Kheldra stores for your account, why it is stored, and how it is handled.

What we store

• Account id and password hash. Passwords are stored only as salted hashes.
• Email address, optional, used only for verification and password reset if you choose to give one.
• Game data: characters, inventory, progress.
• Chat logs, kept as moderation evidence.
• IP hashes (not raw IPs) used to detect abuse and ban evasion.
• Anonymous aggregated analytics (counts and timings, not tied to your identity).

What we do not do

We do not sell personal data or show third-party ads. We use Google Analytics to measure page visits and usage. Google Analytics may set cookies and process usage data.

Data retention

• Chat logs: 90 days, longer if tied to an open report.
• IP hashes: 30 days.
• Account and game data: until you request deletion or the account is inactive for 24 months.

Your rights

You may request access to or deletion of your account data through the in-game feedback option. Some records may need to be retained for security, dispute resolution or legal obligations.

Children

Players who are not old enough to consent to data processing under applicable law should not create an account without any required parent or guardian authorization. If we learn we hold a child's data without required consent, we take steps to delete it.

Security

Access to data is restricted and passwords are hashed. No system is perfectly secure; we will notify affected users of serious breaches as required by law.

Changes

We will post updates here with the date.