Emberhallow Privacy Policy
Effective date: 2026-10-24
This Privacy Policy explains how we collect, use, store, and protect information when you visit our website, create an account, or play Emberhallow Online. In this policy, "we," "us," and "our" refer to the operator of Emberhallow Online.
Who can use Emberhallow
Emberhallow is intended for people aged 13 or older. When registering, we ask players to confirm they are at least 13. Anyone under 13 should not create an account. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will take appropriate steps to remove it and close the account, unless legally required to keep particular records. Parents or guardians can contact us using the address below.
What we collect and why
- Email address: to support sign-in, account administration, and necessary account communications.
- Username: to identify you in the game and to other players.
- Password credentials: passwords are stored as salted hashes rather than plain text.
- Game data: inventory, equipment, progress, titles, and changes you make to worlds, so the game can save and restore play.
- Chat and private messages: messages and relevant history so communication features work and we can investigate reports of misconduct.
- Activity records: We keep records of account activity, gameplay interactions, player communications, and administrative actions. These records help us maintain game security, investigate reports, prevent cheating and abuse, and resolve gameplay issues. Access to non-public activity records is restricted to authorized game staff.
- Sign-in and agreement records: a session cookie to keep you signed in, plus a record of when and which version of the Terms you accepted.
- IP/network address: the game uses network information for connections and protection against repeated sign-in attempts. Our hosting, reverse proxy, or web server may also process or keep network records for security or operations.
What other players can see
Other players may see your username, public chat, and actions or creations in shared worlds. Private messages are intended for their participants, but messages may also be included in reports or reviewed by authorized staff for safety and moderation. Other players may capture screenshots or copies of content they can access; we cannot fully control copies made outside Emberhallow.
Service providers and other disclosures
We do not show third-party advertising or sell players' personal information. We do not provide player data to other companies for their independent marketing.
We use third-party service providers to help operate and maintain Emberhallow Online. These may include web hosting, email delivery, data storage, backup, and security services. These providers may process information only as necessary to provide their services, subject to their applicable agreements and privacy practices. We do not sell player information or share it with third parties for their own advertising purposes. We may also disclose information when required by law, in response to valid legal requests, or when reasonably necessary to protect players, investigate abuse, enforce our Terms of Service, or maintain the security of the game.
Reports and investigations
When you submit an in-game report, we keep what you wrote, the reported player's username, any image you attach, and relevant copies of chat, private messages sent or received, and activity in the world you were in during your visit. Reports about buildings, missing items, or griefing may include a copy of that world. Only authorized game staff can access reports.
Under the current retention schedule, resolved reports are deleted after 90 days and other reports after 180 days. Information copied into a report may therefore remain longer than the original message or activity record.
How long information is kept
Under the current retention schedule, building activity records are kept for 14 days and other activity records for 90 days, then automatically deleted. Account and game data are retained while your account remains open. Expired sign-in sessions are automatically removed.
If you ask us to close and delete your account, we will process the request and delete associated account information, game data, and messages within 30 days, subject to any information we need to retain as legally permitted or required.
Cookies and tracking
Emberhallow uses an essential session cookie to keep you signed in. This cookie is used for account authentication, not advertising or tracking you across other websites.
If you choose Remember Me, this browser also stores your email address and preference to fill in the sign-in form. Log out ends your login but keeps those details. Forget this device logs out and clears them. Passwords are not stored by this feature; any saved password is managed separately by your browser.
We do not use advertising cookies, third-party analytics, or cross-site tracking technologies. We do not currently change how our website operates in response to browser "Do Not Track" signals. We do not knowingly allow third parties to track your activity across other websites through Emberhallow.
Service providers
Emberhallow Online is hosted on a virtual private server provided by OVHcloud. OVHcloud may process technical and hosting-related information as necessary to provide its infrastructure and services.
We may also use service providers for email delivery, backups, and security. These providers may process information as necessary to support the operation of Emberhallow.
We do not sell player information or share it with third parties for their own advertising purposes.
Security
We use technical safeguards intended to protect accounts and game data, including password hashing and server-side checks on gameplay actions. No online service is perfectly secure. Please use a unique password and notify us if you suspect unauthorized account access.
Your privacy choices
You can contact us at support@emberhallow.com to ask about the personal information associated with your account, request corrections or deletion, or request account closure. We may need to verify that you control the account before responding. We will handle requests in accordance with applicable law. Parents or guardians who believe a child under 13 has registered should contact us so we can investigate and take appropriate action.
Changes to this policy
We will update this page, its version, and its effective date when our practices or this policy change. For material changes, we will provide notice through email where appropriate or required by law.