Privacy statement

Veyrlands (“we”, “us”, or “our”) respects your privacy. This statement explains what personal data we process when you use Veyrlands, why we process it, and which rights you have under the General Data Protection Regulation (GDPR/AVG).

Who is responsible?

The controller is Veyrlands.

Privacy questions and requests can be sent to [email protected].

What data do we process?

• Account data, such as your chosen name, email address, password hash, access status, and notification preferences.
• Game data, actions, feedback, and messages needed to provide and improve the service.
• Security and operational data needed to prevent abuse, protect accounts, and keep the service reliable.
• Consent and cookie-preference data stored in your browser.
• Optional analytics data only after you grant analytics consent. Our first-party metrics contain an event, page path, timestamp, and, where applicable, an internal account reference.

Why do we process it?

• To create and operate your account and deliver the game you request (performance of a contract).
• To secure the service, prevent abuse, and maintain reliable infrastructure (legitimate interests).
• To answer support requests and act on feedback (contract or legitimate interests, depending on the request).
• To measure optional product usage and load consented Google Tag Manager tags (your consent). You can withdraw this choice at any time.

Who receives the data?

Data may be processed by our hosting, database, email, monitoring, and security providers where necessary to operate the service. Google Tag Manager and tags in container GTM-WRFR6559 are loaded only after the relevant optional consent is granted. The exact third-party tags and their purposes must remain limited to the inventory published in our cookie policy.

We do not sell personal data. Where a provider processes data outside the European Economic Area, we use a lawful transfer mechanism and appropriate safeguards where required.

How long do we keep it?

• Account and game data is kept while your account is active and afterwards only for legitimate business, legal, or dispute-resolution needs.
• Optional analytics metrics are automatically pruned after the configured retention period (395 days by default) and are not collected without analytics consent.
• Cookie preferences remain in your browser for 180 days, after which we ask again.

Your rights

Subject to applicable exceptions, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw cookie consent at any time via Cookie settings; withdrawal does not affect processing that was lawful before withdrawal. Contact us using the address above. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

We use reasonable technical and organisational measures, including password hashing, access controls, CSRF protection, encrypted transport in production, and limited administrative access. No internet service can guarantee absolute security.

Changes

We may update this statement when the service or legal requirements change. The current version is always available on this page.