Scope and responsibility

This Privacy Policy applies to the Valtheryn website, browser-based game, player accounts, authentication and registration systems, community and multiplayer features, moderation systems, support systems, security and incident-response systems, virtual-content and entitlement systems, and related payment functionality available through valtherynlive.com (collectively, the “Service”).

The operator responsible for determining how personal information under Valtheryn’s control is used is referred to in this Policy as “Valtheryn,” “we,” “us,” or “our.” Privacy and security inquiries may be directed to support@valtherynlive.com.

This Policy intentionally does not publish a private individual’s residential address, telephone number, or state of residence or operation. If a law that applies to Valtheryn requires additional controller identity, representative, mailing-address, data-protection-officer, or jurisdiction-specific information, that information will be provided as required.

For privacy laws that use terms such as “controller” or “business,” Valtheryn determines the purposes and means of processing personal information under its control, except where a third-party provider independently determines how it processes information.

This Policy does not govern independent third-party websites or services. Their own privacy notices apply to information they independently collect or control.

Plain-language summary

Information we collect

Some privacy laws classify account credentials, authentication data, precise identifiers, or certain security information as “sensitive” personal information. Valtheryn uses account and security credentials for authentication, fraud prevention, account protection and related operational purposes—not to infer protected characteristics or target advertising.

Valtheryn does not intentionally request Social Security numbers, government identification, complete payment-card information, health information, biometric identifiers, precise real-world GPS location, or similarly unnecessary sensitive information for ordinary gameplay.

Do not place your real-world address, telephone number, payment-card information, government identification, passwords, banking information, or other sensitive information in Warden names, settlement names, alliance names, Realm Chat, messages, reports or support tickets.

How information is collected

• Directly from you: when you register, verify your email, accept applicable legal terms, choose account or game preferences, play, communicate, contact support, submit a report, request recovery, exercise a privacy right, appeal moderation, or use payment functionality.
• Automatically through the Service: when WordPress, Valtheryn’s game/account systems, Warden Verification, Sentinel, server logs, security controls, browser storage or game services process sessions, commands and requests.
• From service providers: such as payment or dispute information from Stripe, email-delivery status, hosting/infrastructure information, backup systems and security-related provider information.
• From other players: when another player interacts with you, reports conduct, chats with or mentions you, joins a rally, reinforces you, attacks, scouts, participates in alliance activity, or otherwise creates a multiplayer record involving your account.
• Generated or inferred by Valtheryn: such as settlement power, rankings, event scores, cooldowns, eligibility states, authoritative battle results, duplicate-detection signals, abuse/risk indicators, moderation states and public map projections calculated from Service activity.

How we use information

• Create, verify, authenticate, recover, secure and maintain player accounts.
• Run persistent gameplay and preserve authoritative settlements, resources, buildings, troops, Guardians, alliances, marches, combat outcomes, Oathenreach activity, events, rewards, Gem history, rankings and progression.
• Operate Warden Verification, rate limiting, server-side command validation, audit systems, Sentinel protections and other anti-bot, anti-cheat, anti-fraud and incident-response controls.
• Detect, investigate and respond to suspicious authentication, account compromise, cheating, exploits, automation, command replay, duplicate rewards, fraudulent activity, ban evasion, harassment and other violations of the Terms.
• Issue, administer, expire, review and document warnings, temporary bans, permanent bans and other account or realm-access restrictions.
• Operate email verification, password-reset, account-recovery, service notices, support and privacy-request functions.
• Process or test payment integration and, when enabled, verify and fulfill purchases, prevent duplicate fulfillment, reconcile entitlements, handle refunds/disputes and satisfy accounting or tax obligations.
• Display information necessary for maps, alliances, rallies, battles, scouting, reports, events, Oathenreach, leaderboards, chat and other shared gameplay features.
• Debug software, investigate incidents, audit transactions and gameplay, monitor reliability, repair game state or indexes, create backups, prevent data corruption and improve features and performance.
• Comply with applicable law, lawful legal process, valid governmental requests, recordkeeping obligations and legitimate efforts to protect rights, safety, property and game integrity.

Valtheryn does not currently use personal information for cross-context behavioral advertising or to determine eligibility for employment, credit, housing, insurance or other similarly consequential real-world services.

Legal bases where required

Where applicable law requires a legal basis for processing, Valtheryn may rely on one or more of the following:

• Performance of a contract: to create and maintain your account, provide requested gameplay and account features, fulfill authorized transactions, and provide requested support.
• Legitimate interests: to secure and improve Valtheryn, prevent cheating, fraud and abuse, maintain fair gameplay, preserve records, moderate conduct, diagnose problems and protect users and the Service, balanced against applicable privacy rights.
• Legal obligations: when processing or retention is needed for tax, accounting, consumer-protection, privacy, security-incident, legal-process or other legal requirements.
• Consent: when applicable law requires consent for a particular optional activity such as certain cookies, marketing, analytics, or another optional feature.
• Protection of rights, safety and security: when reasonably necessary to prevent fraud, investigate abuse, respond to security threats, preserve evidence or protect users and the Service.

Where processing is based on consent, consent may be withdrawn for future processing, subject to processing already lawfully completed and any other lawful basis that continues to apply.

Information visible to other players

Valtheryn is a persistent shared multiplayer world. Depending on the feature, other players may see your Warden or settlement name, settlement level, map position, alliance name/tag, public settlement power or rank, event score, Oathenreach status, Crown Holder status, rally or battle participation, public titles, Realm Chat messages and other information intentionally presented as public or shared gameplay information.

Private account information—such as your password, password hash, account-recovery details, private contact information, private moderation notes and payment credentials—is not intentionally displayed as public profile information.

Certain normally nonpublic military or gameplay information may become available to another player through authorized game mechanics such as scouting, battle reports, alliance permissions or competition systems.

Fog-of-war, Realm Navigator restrictions, blocking, alliance permissions and similar mechanics may limit how information can be discovered but do not make all gameplay activity private.

Do not use your real-world name, address, email address, telephone number or other sensitive personal information as a Warden, settlement, Guardian or alliance name.

Security, anti-cheat and automated abuse prevention

Valtheryn uses first-party security and anti-abuse systems to protect accounts and preserve fair gameplay. These systems may process account, network, request and gameplay information to detect patterns associated with brute-force attempts, bots, credential abuse, replayed or malformed commands, exploit attempts, suspicious reward or transaction behavior, ban evasion, malware, unauthorized file changes and other security risks.

Controls may include Warden Verification, honeypots, atomic rate limiting, authentication and request validation, server-authoritative gameplay checks, duplicate/replay protection, audit ledgers, IP or request blocking, security-event correlation, file-integrity checks, malware heuristics, administrative review and other proportionate safeguards.

Automated security systems may temporarily throttle, reject or block requests, require additional verification, flag an event for review, or protect the Service before a human review occurs. These controls are intended to protect security and game integrity. Valtheryn does not currently use solely automated processing to make decisions that produce legal or similarly significant real-world effects as those concepts are defined by applicable privacy law.

Player moderation decisions such as a temporary or permanent realm ban may use security and gameplay evidence. Valtheryn may retain enough enforcement history to review appeals, identify repeat violations, prevent restriction evasion and protect other players. Sensitive details about detection methods or another person’s information may be withheld when necessary to preserve security or privacy.

Security data is not used to advertise to players or infer sensitive personal characteristics unrelated to operating and protecting Valtheryn.

When information may be disclosed

Valtheryn may disclose relevant information in the following circumstances:

• To other players: where information is part of shared gameplay, rankings, alliances, maps, reports, chat, events, Oathenreach, moderation notices, battles, rallies or other multiplayer features.
• To service providers: such as hosting/infrastructure providers, WordPress-related systems, database or backup providers, email-delivery providers, Stripe when applicable, security providers and other vendors that help operate or protect the Service.
• For security, legal or safety reasons: when reasonably necessary to investigate fraud, cheating, abuse, security incidents or threats; enforce agreements; protect users or the Service; establish, exercise or defend legal claims; comply with applicable law; or respond to valid legal process.
• As part of a legitimate business transaction: if Valtheryn or substantially all of the Service is reorganized, incorporated, financed, acquired, sold or transferred, subject to applicable privacy obligations.
• At your direction: when you specifically request or authorize a disclosure.

Current position: Valtheryn does not sell personal information for money, does not share personal information for cross-context behavioral advertising, and does not currently use targeted advertising.

If those practices materially change, this Policy will be updated and any legally required notice, consent, opt-out, “Do Not Sell or Share” mechanism, or recognized preference-signal support will be implemented before the new practice begins where required.

Stripe, Treasury and payment information

Valtheryn may use Stripe-hosted Checkout or related Stripe services for payment functionality. Availability of real-money purchases may vary by feature, realm, account or deployment status.

When Stripe-hosted Checkout is used, payment-card and related payment credentials entered into the Stripe interface are submitted to Stripe rather than entered into Valtheryn’s support or gameplay systems.

Stripe may collect payment-card or bank details, billing/contact information, device information, transaction information and fraud-prevention signals under Stripe’s own privacy practices.

Valtheryn’s Treasury system may receive and store transaction and entitlement information needed to create, verify, reconcile, fulfill or investigate an order, including payment status, amount, currency, account/order reference, email where provided, Stripe Checkout Session identifier, PaymentIntent or charge identifier, refund/dispute status, timestamps and virtual-content fulfillment records.

Valtheryn does not receive or store the complete card number or card security code through Stripe-hosted Checkout.

Stripe may act as a processor/service provider for some activities and independently determine certain processing for other activities. Review Stripe’s Privacy Policy for Stripe’s own practices.

Never send complete payment-card information, payment-account credentials or banking passwords to Valtheryn support.

Cookies, browser storage and similar technologies

Valtheryn and the WordPress infrastructure supporting it use cookies or similar browser technologies for functions that may include login sessions, authentication, email verification, password reset, CSRF/request validation, Warden Verification, account security, player preferences, interface state and checkout continuity.

Local browser storage may also be used for interface or gameplay preferences that do not need to be sent to the server on every request.

Disabling required cookies or browser storage may prevent registration, login, account recovery, gameplay, administrative features, security checks or checkout from working correctly.

Valtheryn’s custom game, account, Treasury, Support and Sentinel systems are not currently intended to use advertising cookies or cross-site behavioral advertising technologies.

Hosting infrastructure, WordPress, themes or installed service components may use additional cookies required for their operation. Cookie behavior should be reviewed when providers or production plugins materially change.

If Valtheryn later introduces nonessential analytics, advertising, session replay, social-media tracking or another technology requiring consent or an opt-out, appropriate notice and controls will be added before that technology is used where required by law.

Because Valtheryn does not currently sell personal information or conduct targeted advertising, there is currently no sale or targeted-advertising activity for a Global Privacy Control or similar opt-out signal to disable. If covered activity is introduced and applicable law requires recognition of such a signal, Valtheryn will implement that requirement.

Data retention and deletion

Valtheryn retains personal information only for as long as reasonably necessary for the purpose for which it is used, subject to security, fraud-prevention, moderation, backup, legal, payment and recordkeeping requirements.

When information is no longer reasonably necessary, Valtheryn may delete, anonymize, aggregate or otherwise securely dispose of it.

Deletion from active systems may not immediately remove limited copies from backup or disaster-recovery systems. Data restored from a backup remains subject to this Policy and applicable retention requirements.

Security safeguards and incident response

Valtheryn uses administrative, technical and organizational safeguards designed for the nature of the Service and information involved.

Safeguards may include password hashing, email verification, authenticated sessions, Warden Verification, authorization checks, request nonces, CSRF protections, atomic rate limiting, server-side gameplay validation, replay/duplicate protections, transaction controls, encryption of appropriate secrets or credentials, restricted administrative access, audit records, security monitoring, file-integrity and malware checks, backups, payment tokenization through Stripe and investigation of suspicious activity.

Security controls are continuously subject to maintenance and improvement. No website, network transmission, database, hosting platform or storage system can be guaranteed completely secure, and Valtheryn cannot guarantee that unauthorized access, alteration, loss or misuse will never occur.

Players are responsible for protecting their passwords, email accounts, devices and authentication sessions and should promptly report suspected compromise.

If a security incident involving personal information occurs, Valtheryn will investigate and provide notice to affected individuals, service providers, regulators or other authorities when required by applicable law.

If you believe your Valtheryn account or information may have been compromised, contact support@valtherynlive.com with the subject “Security Report.”

Your privacy choices and rights

Depending on where you live, the information involved and whether a particular privacy law applies to Valtheryn, you may have rights concerning your personal information.

Those rights may include the ability to request:

• Confirmation of whether Valtheryn processes personal information about you.
• Access to or a copy of qualifying personal information associated with you.
• Correction of inaccurate personal information.
• Deletion of qualifying personal information, subject to lawful exceptions.
• A portable copy of certain information where applicable.
• Withdrawal of consent for future processing that depends on consent.
• Opt-out of covered sale, sharing for targeted advertising, or qualifying profiling if Valtheryn ever conducts an activity to which such a right applies.
• Restriction or limitation of certain sensitive-personal-information uses where applicable law provides such a right.
• An appeal or reconsideration where applicable law provides an appeal right.
• Exercise of legally protected privacy rights without unlawful discrimination or retaliation.

Valtheryn does not currently sell personal information or use personal information for targeted advertising.

To submit a privacy request, email support@valtherynlive.com with the subject “Privacy Request.” Include the account email address or Warden name involved and clearly describe the request. Do not send your password, authentication token or payment-card information.

An authorized representative may submit a request where applicable law permits. Valtheryn may require information reasonably necessary to verify the requester, confirm the representative’s authority and protect the account from unauthorized disclosure or deletion.

A request may be denied or limited where permitted by applicable law—for example, when identity cannot reasonably be verified, another person’s privacy would be harmed, the request is fraudulent or abusive, or information must be retained for account security, fraud prevention, moderation, payment reconciliation, tax obligations, legal claims, recordkeeping, exercise of legal rights, or compliance.

If a request is denied and applicable law provides an appeal right, email support@valtherynlive.com with the subject “Privacy Appeal” and identify the prior request.

Account deletion may permanently end access to your settlement, progression and Virtual Content. Deleting an account does not necessarily require deletion of transaction, security, fraud-prevention, moderation, abuse-prevention or other information that Valtheryn is lawfully permitted or required to retain.

Children’s privacy

Valtheryn is a general-audience Service, is not directed to children under 13, and a person under 13 may not create or use a Valtheryn account.

Valtheryn does not knowingly seek to collect personal information from children under 13. Users under 13 should not register, play, submit a support ticket or otherwise provide personal information through the Service.

If Valtheryn learns that an account belongs to a child under 13 or that personal information was knowingly collected from a child under 13 without legally sufficient authorization, Valtheryn may suspend the account and delete or otherwise handle the information as required by applicable law.

If you are a parent or legal guardian and believe a child under 13 has provided personal information to Valtheryn, contact support@valtherynlive.com with the subject “Child Privacy Request.”

Users who are at least 13 but have not reached the age of legal majority where they live must have any parent or guardian permission required by the Terms of Use and applicable law. A minor may not use another person’s payment method without authorization from the person responsible for that payment method.

United States and international processing

Valtheryn and its service providers may process or store information in the United States and in other locations where infrastructure or service providers operate.

Privacy and data-protection laws may differ between countries. Where an applicable law requires a recognized safeguard for an international transfer, Valtheryn will use or rely on an appropriate transfer mechanism or other legally permitted basis where required.

If Valtheryn begins actively targeting or materially expanding into a jurisdiction that requires additional controller identity, representative information, local privacy notices, data-transfer disclosures, consent mechanisms or other jurisdiction-specific requirements, this Policy and related procedures will be updated as appropriate.

Changes to this Privacy Policy

Valtheryn may update this Policy when the Service, game features, account systems, moderation tools, providers, payment functionality, laws, security practices or information practices materially change.

The revised Policy will be posted with an updated effective or revision date. Additional notice may be provided for material changes when reasonably appropriate or required by applicable law.

If applicable law requires consent before a new data practice begins, Valtheryn will request that consent before relying on that practice.

Historical versions may be retained as reasonably necessary to document which notice applied at a particular time.

Contact Valtheryn about privacy

Service: Valtheryn
Privacy, security, account and support contact: support@valtherynlive.com
Website: https://valtherynlive.com

For a privacy request, use the subject “Privacy Request.”

For an appeal or request to reconsider a privacy decision, use the subject “Privacy Appeal.”

For a security concern, use the subject “Security Report.”

For a child privacy concern, use the subject “Child Privacy Request.”

Do not send passwords, authentication tokens, Social Security numbers, complete payment-card numbers, card security codes, banking credentials, government identification or other unnecessary sensitive information by email or through a support ticket.