Privacy Policy
Who is responsible
Eldervale is run by Karsten Dalgas, Denmark, who is the data controller. Contact: contact@playeldervale.com.
What we store
- Account: your email address, your username and a securely hashed password.
- Game saves: your current save and a history of earlier saved versions so you can restore them.
- Feedback: messages you send through the in-game feedback form.
- Error reports: anonymous technical reports when the game crashes (no email or username attached).
- IP address: held briefly in memory for rate limiting (to stop abuse such as password guessing), not written to permanent storage.
Why, and on what legal basis
We use this data to run the game you signed up for: logging you in, keeping your progress, sending account emails (verification and password reset) and fixing bugs. The legal basis is performance of our agreement with you (GDPR art. 6(1)(b)) and, for rate limiting and error reports, our legitimate interest in keeping the service secure and working (art. 6(1)(f)).
How long we keep it
Account data and saves are kept while your account exists. When you delete your account, your account, saves and save history are deleted. Rate-limit data disappears within minutes. Feedback and error reports are kept only as long as they are useful for improving the game.
Who processes data for us
- Webdock (Denmark) – the server that stores accounts and saves.
- Cloudflare – hosting, content delivery and cookie-free visitor statistics.
- Brevo – sending account emails.
We do not sell your data and do not use it for advertising.
Local storage and cookies
The game stores your login session and settings in your browser's local storage so it works. There are no tracking or advertising cookies. Visitor statistics (Cloudflare Web Analytics) are counted without cookies.
Your rights
You can access and download your data (Settings → Account → Download my data) and delete your account (Settings → Account → Delete account) at any time. You can also ask us to correct data or restrict or object to processing by writing to the contact address above.
You can complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).
Changes
We may update this policy. The date at the top shows the latest version.