Legal
Privacy policy
What the game and this site collect, why, and what you can ask us to do about it. It is short because the service is small: an account, your collection, and matches against other players.
Revised [date] · replaces the 2018 policy
Scope
In this policy, "we" means ReaverGames Ltd, which developed Runewards, released it in 2018, and operates the game and this website today. This policy describes how the game handles your data now, and it replaces the policy published in 2018.
This policy covers the game client, the game servers and this website. It does not cover other sites you may reach from links here, and we cannot control what those sites do. By using the game or the site, you agree to the current version of this policy.
What we collect
To run an account and a match, the server needs and keeps the following:
- Your account details: username, email address, and a password stored as a hash, never as text we can read.
- Game data: your collection, decks, hero levels, quest and campaign progress, and match results.
- Connection data: your IP address and the time of a login, which the server records as part of keeping the account secure.
- Crash and error reports generated automatically by the client when something fails, which may include information about your system.
How we use it
Account and game data are used to provide the game: to sign you in, to keep your collection and progress, to match you against another player, and to fix faults. Connection data is used to run and secure the service.
We do not sell your data, and we do not share it with anyone for marketing. We will send you email about the game only where you have asked for it, or where it concerns your own account, such as confirming your address or resetting your password.
We may disclose data where a court order or the law requires it.
Children under 13
We will not knowingly collect personal information from anyone aged 12 or under. If you are a parent and believe your child has created an account, contact us at [contact address] and it will be removed.
Information that is public inside the game
Some information is visible to the person you are playing against, and to anyone else you interact with in the game. Your username and your visible match information are part of playing a game against another person.
Anything you type in a public function of the game should be treated as public. We are not able to keep private something you have chosen to tell other players.
Security and retention
The server is self-hosted. Access to the database is restricted, passwords are stored as hashes, and traffic between the client and the server is encrypted. No system is perfect, and we will tell you if something happens that affects your account.
Your data is kept for as long as your account exists. If you ask us to delete the account, the account and its game data are removed.
Your choices
You can ask to see what the account holds, correct it, or have it deleted. Write to [contact address] from the address on the account. We may decline requests that are repetitive, would need disproportionate effort, or would affect somebody else’s privacy.
Where you have opted in to email about the game, every message includes a way to stop receiving them.
Changes to this policy
This policy is current as of the revision date above. If it changes, the new version is published on this page, and the revision date changes with it.
Contact
Questions or complaints about this policy, or about how the game handles your data: [contact address].
This document is based on the privacy policy published with Runewards in 2018. It has been rewritten for the restored game: the sections on payment, in-game currency and third-party publishers were removed, because none of them apply to the game as it runs today.