Privacy Policy
Updated October 30, 2026
Scope and contact
This policy describes information handled through Runewend’s website, game accounts, membership, and support. For privacy requests, contact the Runewend team at [email protected]. The project’s final legal-operator details are being confirmed; no overseas registration or anonymous ownership is claimed.
Account and gameplay information
We handle player identifiers, protected password credentials, character progression, inventory, account settings, and activity needed to authenticate players, save progress, and operate the service. Public features such as HiScores may show player names and gameplay statistics. World-status pages show aggregate player counts.
Optional email linking
Email linking is optional. An address entered privately in game is saved as pending and requires verification. We retain linked or pending addresses, verification state, consent choices and dates, recent account activity, and launch reward records. Verification links expire after 30 minutes. Contact addresses are not displayed on HiScores or in public world counts.
Transactional and promotional messages
Resend delivers verification emails. Marketing is off by default for in-game email entry and requires a separate opt-in. Manage preferences in My Account or use an unsubscribe link. Withdrawing marketing consent does not revoke an earned membership reward.
New-player notifications
The operator receives an internal email when a newly created account first signs in to Free. It contains the player name and account creation time, not the player’s contact email or payment credentials. Delivery status is retained to suppress repeat alerts.
Payments
Stripe processes payments and receives the account reference needed to associate purchases with membership. Runewend retains payment references, amounts, status, subscription information, and entitlements for billing, support, and bookkeeping. Complete payment-card details are not stored on the game server. Removing an email does not cancel a subscription or erase billing records.
Technical information and browser storage
Hosting and network providers may process IP addresses, request and connection metadata, and browser/device information to deliver and protect the service. The client may store session information, preferences, or downloaded game resources in your browser. Clearing browser storage may sign you out or require downloads again.
Service providers and international processing
OVHcloud supplies hosting, Cloudflare supplies network delivery/security and DNS, Resend delivers email, Stripe handles payments, and our mailbox provider processes support correspondence. Information relevant to those functions may be processed outside your country. Discord operates separately under its own policies when you use our community. No hosting location is presented as preventing lawful access.
Purposes and disclosures
We use information to provide accounts and gameplay, send requested messages, manage membership, record consent, prevent abuse and duplicate rewards, and answer support requests. Depending on applicable law and purpose, processing may be based on providing the service, legitimate operational and security interests, consent, or legal obligations. Information may also be disclosed when required by applicable law or valid legal process.
Retention and deletion
Manage linked addresses and preferences in My Account. Removing a linked address removes the current contact-table address; consent evidence and hashed reward records remain to honor preferences and prevent duplicate rewards. Daily player/world backups retain 14 days. This does not mean every provider log, billing record, support message, or historical record expires after 14 days. Other records are retained as needed for service operation, security, billing, disputes, and applicable obligations; contact support for account deletion or retention questions.
Your rights
Depending on applicable law, you may be entitled to access, correct, delete, restrict, object to processing, or obtain a copy of information. Email [email protected]; we may need to verify your account before acting. Some records may need to be retained for legal, security, billing, or dispute purposes. Where applicable, you may complain to your local data-protection authority.
Children and security
If you are not legally eligible to provide personal information or consent independently, involve your parent or guardian before linking an email or purchasing. Contact support if you believe a child has provided information without required permission. Access controls and credential protections reduce risk, but no service can promise absolute security. Never post passwords, verification links, or payment details in public chat or Discord.
Policy changes
Material changes will be dated and communicated appropriately. Where required, we will seek consent before using information for a new purpose that requires it.