Privacy notice

Accounts and security

We process your username, email, password hash, verification status and role to manage your account. Random security tokens are stored only as hashes and expire after 24 hours for email verification or one hour for password resets. Email is sent through the local HestiaCP mail server.

The session cookie is necessary for authentication and CSRF protection. Sessions expire after 30 minutes of inactivity and no later than 12 hours. Password changes, bans and role changes revoke previous sessions.

Security check

Our verification challenge is generated and checked on this server, with image and audio alternatives. No external CAPTCHA service is contacted. Challenges are linked to your session, expire after five minutes and can be submitted only once. Request limits and a hidden spam prevention field help protect sensitive forms.

Access records and IPinfo

IP addresses in security records are encrypted and visible only to authorised administrators. Abuse prevention limits and the network cache use HMAC identifiers. Security records are retained for 30 days and pruned periodically during successful write requests. Passwords and security tokens are never logged.

If configured, IPinfo receives the IP address to provide country, continent, ASN and organisation. The cache lasts at most 24 hours. We do not infer cities, VPN use or information outside the Lite plan. IPinfo privacy policy.

Village visitor counters

Visits by signed-in members have a separate, first-party visit counter. Guest visits do not contribute to it. For anti-abuse and approximate unique visitor statistics, our server calculates an HMAC from the visitor's IP address, scoped to the visited village. We do not retain raw IP addresses in these counters or send them to analytics companies. At most one visit is counted per IP address and village in a rolling 24-hour period, so people sharing the same connection may be counted together. Basic bot and repeat-request checks also apply. The founding player's own views and common automated crawlers are excluded.

Under My Village → Privacy & sharing, Private restricts access to you and authorised staff. Realm Members allows signed-in visits and a Discover listing. Choosing Everyone opens your village map, public player name, profile, Mayor’s Welcome and map preview to people on the web.

These pseudonymous visitor identifiers are deleted periodically after 31 days; aggregate daily visit totals are retained while the village exists. Village owners and visitors can see public aggregate statistics, not personal visitor records. This site-level counting is distinct from optional external analytics and should be reviewed by the operator for its applicable privacy and consent obligations before public launch.

Site measurements

Anonymous document totals are counted without visitor identifiers. There is no browser preference dialog. Internal activity reports record completed actions against signed-in accounts, including registration, login, material changes and building activity. They use the existing account identity without a separate visitor cookie. Administrators are excluded from player reports. Retained records follow the configured retention and rights process.

Source-link statistics and registration sources

Source links such as ?track=FACEBOOK record aggregate visits by source and UTC day independently of optional Realm Insights. A keyed digest of the visitor IP address prevents repeated visits to the same source from being counted within 24 hours. We do not store the raw IP, referrer or browser profile in this tracking register. Expired cooldown records are removed on later tracking requests; when no further requests occur they remain until cleanup runs. Aggregate visits are retained for 365 days and are not sent to third-party analytics or advertising providers.

The most recent active source is stored in the existing first-party session, subject to its inactivity and maximum lifetime. It is retained across navigation and registration retries. On successful registration the source is saved once against the new account until account deletion or an applicable rights request. Previous accounts are not reassigned and old registrations are not backfilled. The URL remains ?track=SOURCE; no attribution token is added. External measurement and advertisements use separate provider requirements. Contact the operator about source-related personal data.

Offerwall.GG rewards

When you request the offer list, our server sends Offerwall.GG a random reward-account identifier, your connection IP and browser user agent so it can select offers for your location and device. We do not send your VillageRealm email, password or username. Opening an offer takes you to the provider and advertiser services, which use their own tracking and privacy policies.

We retain conversion references, offer and step names, confirmed reward amounts, reversals and any outstanding RT recovery amount to maintain your Wallet and resolve reward disputes. Administrators can review these financial records. Account deletion removes the account link from retained offer conversion records. Offerwall.GG privacy policy · Reward support.

External measurement and advertisements

Google Analytics (G-YH9HBZH8C5) and HiStats (5058057) load automatically on pages using the shared site layout, including Admin pages. These providers receive connection and browser information and may use cookies. The Google page-view URL excludes query strings and fragments. HiStats uses its standard publisher counter.

The analytics tags are embedded directly and do not wait for a site preference dialog. Advertising partners use their separate integration rules. Google advertising remains blocked without provider authorization.

Partner spaces may show a clearly labelled internal Realm promotion. A requested script, returned frame or internal promotion is not evidence of a paid impression. Providers may be unavailable or blocked.

Google privacy policy · HiStats privacy policy. Contact the operator through Support about retained information.

Support and coupon codes

Tickets and replies are visible only to their owner and authorised staff. Support conversations can include images uploaded by the account owner or authorised staff. Accepted images are checked and resized before storage; access is restricted to the ticket owner and authorised staff. Resolved tickets become eligible for cleanup after 90 days. Report evidence is limited to public village content and is available to authorised staff for 30 days. Confirmed coupon redemptions, reward and correction records keep actual balance changes; deleting an account removes or anonymises its linked ADMIN32 records. Limited timings and sanitised errors from the new service endpoints support site reliability without recording personal request contents.

Controller and your rights

Village Realm - info@villagerealm.net

You can request access, correction, deletion or restriction through the operator’s contact and lodge a complaint with the competent authority. Account data is kept until deletion or service closure. Any legal retention obligations must be explained by the operator before launch.