These policies describe how Forever Lineage collects, uses, and protects your data. By using our Services you agree to the practices described here.
1. What We Collect
We collect only what is necessary to operate the website and game server:
- Account data: Email address, display name, and authentication tokens (managed by Clerk).
- Game account data: Game login credentials (username and hashed password), character data, and game progress — stored in our database.
- Payment data: Donation and subscription records (amount, date, status). Card details are processed and stored by Stripe — we never see or store your full card number.
- Usage data: Feedback tickets you submit, pages you visit (basic server logs), and IP addresses for security and rate limiting.
- Cookies: Essential cookies for authentication (set by Clerk) and a cookie consent preference stored in your browser's local storage.
2. How We Use Your Data
- Run the Services: Authenticate you, link your website and game accounts, process donations, display server status, and deliver game content.
- Communicate: Respond to feedback tickets and display admin announcements on the website.
- Security: Rate limiting, abuse prevention, and protecting the integrity of the game server.
- Improve: Aggregated, non-personal statistics (e.g. total players online, popular features) to guide development.
We do not use your data for advertising, profiling, or automated decision-making.
3. Third-Party Services
We use the following third-party services that may process your data under their own privacy policies:
- Clerk — Website authentication (sign-up, sign-in, SSO). Privacy policy
- Stripe — Payment processing (donations, subscriptions). Privacy policy
- Cloudflare R2 — File storage (game client downloads). Privacy policy
We do not share your data with any other third parties.
4. Data Storage and Security
- Your data is stored on servers we operate (VPS with encrypted connections, firewall, and access controls).
- Game account passwords are hashed with bcrypt before storage.
- Website passwords are managed by Clerk and never touch our servers.
- We use HTTPS for all web traffic and restrict database access to localhost.
We take reasonable measures to protect your data, but no system is 100% secure. If you believe your account has been compromised, change your password and contact us immediately.
5. Data Retention
- Account data: Kept as long as your account is active. If you delete your account, we remove your master account record and unlink game accounts.
- Game data: Character and progress data is kept as long as the game server operates. Deleted on request.
- Payment records: Kept for accounting and legal purposes (typically up to 7 years as required by law).
- Server logs and IP addresses: Retained for up to 90 days for security purposes, then deleted.
- Feedback tickets: Kept until resolved and for up to 1 year after for reference.
6. Your Rights
Under applicable data protection laws (including GDPR if you are in the EU/EEA), you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and associated data (subject to legal retention requirements).
- Object to processing of your data for specific purposes.
- Export your data in a portable format.
To exercise any of these rights, use the Feedback form or contact us directly. We will respond within 30 days.
7. Children
Our Services are not directed at children under 13 (or the minimum age in your country). We do not knowingly collect data from children. If you believe a child has provided us data, please contact us and we will delete it.
8. Changes to This Policy
We may update this policy from time to time. We will post the new version on this page and update the effective date. Continued use of the Services after changes means you accept the updated policy.
9. Contact
For privacy questions or data requests, use the Feedback form on the website. You can also reach the server administrator through the same form.