Fresh start · --d --h · 11 Sept

Privacy Policy

How we collect, use, and protect your data

Last updated: 7 October 2026

In brief

  • We collect what we need to run the website and game server, keep the game fair, and measure our ads.
  • Website authentication is handled by Clerk - we do not store your website password.
  • We do not sell or rent your personal data. We share it only with the services listed in section 3.
  • Payments are processed by Stripe - we do not store your card details.
  • IP addresses and anti-cheat records are deleted automatically after 90 days.
  • You can request a copy or deletion of your data by contacting us.

These policies describe how Forever Lineage collects, uses, and protects your data. By using our Services you agree to the practices described here.

1. What We Collect

  • Account data: Email address, display name, and authentication tokens (managed by Clerk).
  • Game account data: Game login name, hashed password, characters, items, and game progress.
  • Payment data: Donation and subscription records (amount, date, status). Card details are processed and stored by Stripe - we never see or store your full card number.
  • Sign-up data: When you accept the Terms we record the page you first landed on, the referring site, ad campaign tags and ad click IDs, your optional "Where did you hear about us?" answer, and the IP address and browser that accepted the Terms.
  • IP addresses: Website requests (for rate limiting), every IP address your game account logs in from (with first and last login time and a login count), the IP address of your latest login, and the IP address used when you vote for the server.
  • Anti-cheat data: Results of captcha checks (time, answer time, character position), per-character play statistics such as how quickly targets are selected after they appear and how often items are picked up, and a per-5-minute activity log (hunting by hand, auto-farm or idle, character position, login IP address) kept for 7 days. Moderation records such as flags, jails, chat bans, and bans.
  • Item transfers: Items passed between players (trades, private stores, picking up another player's drop, clan warehouse), with both character names, the item, and the time.
  • Support data: Feedback tickets and the messages exchanged in them, in-game reports included.
  • Cookies and analytics: Essential cookies for authentication (set by Clerk), and a cookie consent preference in your browser's local storage. If you accept cookies, also Google Analytics (pages visited, device, approximate location) and the Meta Pixel (page views).

2. How We Use Your Data

  • Run the Services (contract): Authenticate you, link your website and game accounts, process donations, deliver game content, and answer feedback tickets.
  • Security and fair play (legitimate interest): Rate limiting, protecting accounts, and detecting bots, real-money trading, and multi-account abuse. This includes:
    • Linking game accounts that log in from the same IP address. IP addresses are checked against public lists of VPN and hosting ranges stored on our server; your IP address is not sent anywhere for this.
    • Automated play statistics that rate how likely a character is to be run by third-party software. A high rating only marks the character for a staff member to review.
    • Captcha checks. A missed or wrong answer disconnects the character, and its next login starts in town until the code is typed. Jails and bans are always decided by a staff member.
    • Item transfer records, used to investigate real-money trading reports.
  • Advertising measurement (legitimate interest; cookies only with your consent): Google Analytics measures visits if you accept cookies. When you sign up or download the game client, our server tells Meta about it so we can measure our ads; this sends a hashed (scrambled) email address and account ID on sign-up, and your IP address and browser on download. We do not use your data to show you personalised ads ourselves.
  • Improve: Aggregated statistics (players online, popular features, where players heard about us) to guide development.

3. Third-Party Services

These services process your data under their own privacy policies:

  • Clerk - Website authentication (sign-up, sign-in, SSO). Privacy policy
  • Stripe - Payment processing (donations, subscriptions). Privacy policy
  • Cloudflare R2 - File storage (game client downloads). Privacy policy
  • Google Analytics - Website visit statistics. Privacy policy
  • Meta - Pixel and server-side ad measurement described in section 2. Privacy policy
  • Vote sites (L2Servers, HopZone, L2Network, L2Votes) - When you vote, we ask the site whether your vote went through. For HopZone and L2Votes this request includes your IP address.

We do not share your data with any other third parties.

4. Data Storage and Security

  • Your data is stored on servers we operate (VPS with encrypted connections, firewall, and access controls).
  • Game account passwords are hashed with bcrypt before storage.
  • Website passwords are managed by Clerk and never touch our servers.
  • We use HTTPS for all web traffic and restrict database access to localhost.
  • Only server staff can see IP addresses, anti-cheat data, and item transfer records.

We take reasonable measures to protect your data, but no system is 100% secure. If you believe your account has been compromised, change your password and contact us immediately.

5. Data Retention

Deletion runs automatically every day.

  • Account data: Kept as long as your account is active. If you delete your account, we remove your website account record and unlink your game logins.
  • Game data: Character and progress data is kept as long as the game server operates. Deleted on request.
  • Payment records: Kept for accounting and legal purposes (typically up to 7 years as required by law).
  • Login IP history and vote IP addresses: Deleted 90 days after the last login or vote from that address.
  • Latest login IP: Kept with your game account and replaced at your next login.
  • Sign-up IP address and browser: Deleted 90 days after sign-up. The rest of the sign-up data stays with your account.
  • Server logs: Up to 90 days.
  • Captcha check history and play statistics: 90 days. Statistics are deleted after 90 days without play. The per-5-minute activity log: 7 days.
  • Item transfer records: 90 days.
  • Moderation records (flags, jails, bans, captcha pass and fail totals): Kept as long as the account exists.
  • Feedback tickets: Deleted 1 year after the ticket is closed.
  • Backups: Daily database backups are kept for 30 days, so deleted data can remain in a backup for up to 30 more days.

6. Your Rights

Under applicable data protection laws (including GDPR if you are in the EU/EEA), you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your account and associated data (subject to legal retention requirements).
  • Object to processing based on legitimate interest, including the anti-cheat statistics and ad measurement.
  • Withdraw consent to analytics and advertising cookies at any time.
  • Export your data in a portable format.
  • Complain to your local data protection authority.

To exercise any of these rights, use the Feedback form or contact us directly. We will respond within 30 days.

7. Children

Our Services are not directed at children under 13 (or the minimum age in your country). We do not knowingly collect data from children. If you believe a child has provided us data, please contact us and we will delete it.

8. Changes to This Policy

We may update this policy from time to time. We will post the new version on this page and update the effective date. Continued use of the Services after changes means you accept the updated policy.

9. Contact

For privacy questions or data requests, use the Feedback form on the website. You can also reach the server administrator through the same form.

Back to homeQuestions? Send feedback