Privacy Policy

What Aletheia knows about you, why, who else sees it, and how to get it deleted. We collect as little as we can: we don't ask for your email, your real name or your age, and we have no ads or trackers.

Last updated November 2026

Who we are

Aletheia is run by Krawlic Games, a sole proprietorship in [[STATE]], United States. We're responsible for your information ("data controller"). Contact: [[CONTACT_EMAIL]].

What we collect

When you make an account

• Username and password. Your password is stored only as a scrambled hash, so nobody (including us) can read it.
• When you made the account and last logged in, and which version of these terms you agreed to, and when.

When you play

• Your character: name, look, skills, items, quests, friends list and everything else in your save.
• Trades: a record of who traded what with whom, to sort out scams and cheating.
• Chat: messages and whispers are passed on to the players they're for, as you send them. They aren't saved, except the last few minutes that go with a report or a bug report (below).
• Your network address (IP): used while you're connected, and to stop floods of requests. For catching banned players on new accounts, we keep only a scrambled code made from it (not the address itself), and delete it 90 days after you last used that network.
• Server logs: short records of who logged in and out, trades, reports and errors, which we use to keep the game running.

When you send us something

• Reports of other players, with recent public chat and any whispers between the two of you, so the staff can see what happened.
• Bug reports, with what you write, a screenshot if you choose, your recent chat, and your browser, screen size and local time, to help us find the bug.
• Ban appeals and the staff's replies.
• Wiki comments and votes.

When you buy something

Payments are handled by Stripe. We never see your full card number. Stripe tells us what you bought, the amount, your email address, your name, your country and the last four digits of your card, which we keep as a record of the sale and to answer refund requests.

What other players can see

Your character's name, look and levels; your place on the hiscores and your player page; your wiki comments; and your chat messages, to the players they're sent to. Your username (the one you log in with) is not shown to other players.

What's stored in your browser

The game keeps a few things in your browser's own storage: your login (so you stay logged in), your settings, your offline save if you play without an account, and your last username. They're needed for the game to work, aren't used to track you, and are never sent to anyone else. We don't use cookies for advertising or analytics. The website's fonts are served from our own site.

Why we use it

• To run the game you asked to play: your account, character, chat, friends and trades.
• To keep it fair and safe: reports, trade records, scrambled network codes, bans and appeals. This is our legitimate interest in protecting the game and its players.
• To fix problems: bug reports and server logs.
• To handle purchases: and to keep the records tax law requires.

We don't sell or rent your information, use it for advertising, or make automated decisions about you beyond pointing the staff at accounts to check.

Who else handles it

• Cloudflare, which hosts the website, and our server host, which runs the game server. They store and carry data for us and may see your network address, as any website host does.
• Stripe, for payments.
• Discord, only if you join our Discord server, under Discord's own privacy policy.
• The authorities, if the law requires it, or to protect someone from serious harm.

These services and the game server may be in the United States or other countries. Where the law requires it, data sent abroad is protected with the safeguards those services provide (such as standard contractual clauses).

How long we keep it

• Your account, character and posts: until you delete your account.
• Login sessions: 30 days. Scrambled network codes: 90 days after you last used that network.
• Moderation records (bans, reports about an account, the staff log and trade records): as long as they're needed to keep the game fair, even after an account is deleted, so that deleting an account can't be used to dodge a ban.
• Purchase records: as long as tax law requires (up to 7 years).
• Server logs: a few weeks.

Deleting your account and your other choices

Delete your account in the game: Settings, then Account, then Delete my account. This removes your account, character and save, friends, hiscores, scrambled network codes, wiki comments and votes, bug reports and appeals, straight away and for good. Your character name becomes free for someone else. Moderation records and purchase records are kept as above.

You can also ask us, at [[CONTACT_EMAIL]], for a copy of your information, to correct it, or to delete it. We'll need to check that the account is yours (for example, by asking you to send the request from the game). We'll answer within 30 days.

In the EU, EEA and UK you also have the right to object to how we use your information, to restrict it, and to complain to your data protection authority. In California and other US states with privacy laws: we don't sell or share personal information, and you can ask what we hold and have it deleted as above.

Children

Aletheia is not for children under 13 (under 16 in the EU, EEA and UK), and we don't knowingly collect information from them. If you're a parent and think your child has made an account, email [[CONTACT_EMAIL]] with the username and we'll delete it.

Keeping it safe

Passwords are hashed, the game and website use encrypted connections (HTTPS), and only the admin can see the database. Staff see only what they need to handle reports, appeals and bugs. No system is perfectly secure, so use a password you don't use anywhere else.

Changes to this policy

If we change what we collect or how we use it, we'll update this page and tell you in the game. If the change matters, we'll ask you to agree again before you keep playing.