Privacy policy
Midgard Universe publishes what happens in game and keeps who you are private. This page lists exactly which data falls on which side of that line.
What is public
Everything that happens in game appears in the Ledger, for anyone to read, logged in or not:
- Characters: name, class, level, stats, skills, equipment, guild, party and online status.
- Items: every item's unique ID, refines and cards, and everyone who has held it.
- Trades, vending sales, mail attachments, drops and refines.
- Zeny on hand, bank balances and guild storage, and every transfer in or out.
- Every command a staff member runs, with its target and time.
- Bans and other punishments, by account ID, category and length.
A character's position on the map is shown per map in aggregate. Its exact location is shown only if its player opts in on the account page.
What is never public
- Your email address. You see it masked on your security page; staff see it in the staff console when they handle your ticket or account.
- IP addresses and hardware IDs. They are used for security, sign-in protection and ban enforcement only.
- Payment details. The payment provider handles them; we keep an amount and a reference.
- Chat and whispers. When chat logging is switched on, staff can read logs only behind a recorded reason, for reported abuse.
- Your master account handle, birthdate and real name, and which game accounts belong to you. When a game account changes owner, the Ledger shows only the account ID.
- Ban evidence and staff notes.
What we store and why
| Data | Why | How long |
|---|---|---|
| Email address | Sign-in, confirmations and security notices | Until you delete your master account |
| Password hashes and 2FA secrets | Sign-in | Until you delete your master account |
| Sign-in history with IP addresses | Shown to you on your security page, and used against account theft | [RETENTION PERIOD] |
| Support tickets | Answering you | [RETENTION PERIOD] |
| Game history | The Ledger | Kept, tied only to the game account ID |
Staff access
Staff can open your account details in the staff console when they handle a ticket, an appeal or an abuse report. Each access is written to the public accountability log, without your personal data.
Deleting your data
Deleting your master account removes your email, password hashes, 2FA and support history within [30 days]. In-game history stays in the Ledger, tied only to the game account ID, because removing it would break other players' trade and item records.
Cookies
The site sets one session cookie when you sign in. There are no advertising or tracking cookies.
Contact
Send privacy requests through a support ticket in the "Privacy request" category, or write to [PRIVACY EMAIL].