GreenLeaf StudiosPrivacy Policy
This policy explains which personal data we process when you create an account, buy or play Lands of Aurelion, and why.
Who we are
Lands of Aurelion is made by GreenLeaf Studios, a sole proprietorship owned by J. Rongen and registered in the Netherlands (KvK [KvK number], business address [business address]). We are the data controller under the GDPR. Contact: groengras@greenleafstudios.nl.
What we process and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Username, email, password (stored only as a secure hash) | Your account on the website and in the game | Contract (Art. 6(1)(b) GDPR) | Until you delete your account |
| Purchase: date, amount, status, payment reference | Giving you the game, accounting | Contract and legal obligation (Art. 6(1)(b) and (c)) | 7 years (Dutch tax law) |
| Characters: name, class, race, level, rebirths, XP, guild | Your account page and the public leaderboard | Contract (Art. 6(1)(b)) | Until you delete your account |
| Gameplay data on the game server, including chat messages and IP address | Running the online game, preventing cheating and abuse | Contract and legitimate interest (Art. 6(1)(f)) | As long as needed for these purposes |
| IP address and login name of failed login attempts | Protecting accounts against password guessing | Legitimate interest (Art. 6(1)(f)) | 24 hours |
| Emails you send us | Answering your question | Legitimate interest (Art. 6(1)(f)) | Until handled, then at most 1 year |
Payments
Payments are handled by Mollie B.V. (Amsterdam). You enter your payment details at Mollie, not on our website; we never see your card or bank details. Mollie's privacy statement applies to the payment itself.
What others can see
The leaderboard publicly shows your character's name, class, race, level, rebirths and guild. Your username and email are never shown publicly. Other players see your character and chat messages in the game.
Cookies
We use one cookie that keeps you logged in during your visit. It is strictly necessary, so no consent is needed. We do not use tracking or advertising cookies on these pages.
Hosting and sharing
The website and its database are hosted by mijn.host in the Netherlands. We share data only with the services needed to run the game (hosting, Mollie, email) and never sell your data.
Your rights
You can access, correct or delete your data, restrict or object to processing, and take your data with you. You can change your password and delete your account yourself on your account page. For anything else, email groengras@greenleafstudios.nl; we respond within one month. You can also complain to the Autoriteit Persoonsgegevens or the authority in your own country.
Children
If you are under 16, you need permission from a parent or guardian to create an account.
Security
The website uses HTTPS, passwords are stored as hashes, and login attempts are limited. If you think your account is at risk, change your password right away.
Changes
We may update this policy. The date at the top shows the latest version; we announce major changes on the Updates page.