Privacy Policy

1. Information We Collect

We collect the following information when you use Aethervale:

• Account information: email address and display name
• Usage data: game activity, collection data, marketplace transactions, token balances
• Technical data: IP address, browser type, device information, access times
• Payment data: processed securely by our payment provider; we do not store credit card numbers

2. How We Use Your Information

• To provide and maintain the Service
• To personalize your experience (creature recommendations, collection features)
• To process transactions and manage your token balance
• To communicate with you about your account (email verification, password resets)
• To prevent fraud, abuse, and enforce our Terms of Service
• To improve the Service through aggregate, anonymized analytics

3. Data Storage & Security

Your data is stored securely using industry-standard encryption. Account data is hosted on Supabase (PostgreSQL with row-level security). Images and media are stored on Cloudflare R2 with authenticated access. We implement reasonable security measures but cannot guarantee absolute security.

4. Game & Collection Data

Your creature collection, marketplace activity, and game progress are stored to maintain your account state. This data is private to your account and is not shared with other users except as necessary for marketplace transactions (e.g., your display name is shown on your marketplace listings).

5. Data Sharing

We do not sell your personal data. We may share limited data with:

• Service providers: hosting (Supabase, Cloudflare, Hetzner), payment processing
• Legal requirements: if required by law, regulation, or valid legal process
• Safety: to protect the rights, property, or safety of our users or the public

6. Cookies & Tracking

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising pixels. Analytics, if used, rely on server-side aggregate data.

7. Children's Privacy

Aethervale is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has created an account, we will promptly delete it and any associated data. If you believe a child under 13 is using our Service, please contact us.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to certain processing of your data
• Export your data in a portable format

To exercise these rights, contact us at privacy@aethervale.app

9. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., transaction records for audit).

10. Changes to Privacy Policy

We may update this Privacy Policy at any time. Material changes will be communicated via email or in-app notice. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions, contact us at privacy@aethervale.app