Privacy Policy

Scope: megaforge.net, the Warsong realm, and our Discord community (together, the “Services”).

By using the Services, you acknowledge this Privacy Policy.

Who we are and how to contact us

MegaForge is a fan-operated community project. For privacy requests or questions, use our Discord ticket system or the contact page on megaforge.net. If you prefer email, use the address listed on the contact page.

What we collect

We collect the minimum data needed to run the Services, prevent abuse, and support accounts.

• Account and profile: email, username, password hash, account status, ban or sanction history.
• Gameplay: character names, guilds, inventories, achievements, logs of in-game actions necessary for anti-abuse, matchmaking, and support.
• Technical and security: IP addresses, timestamps, device and error logs, anti-cheat signals, web server logs.
• Support tickets: the content you submit, attachments, and metadata.
• Payments and donations: we do not store card or bank details. These are processed by third-party payment partners; we receive minimal metadata such as transaction IDs and crediting information to apply Donation Points.

Why we process your data and legal bases

We process data only where a valid legal basis applies under Article 6 GDPR, including performance of a contract, legitimate interests, consent where required, and legal obligations. Examples:

• Provide and secure the realm and website: contract necessity and legitimate interests for uptime, scaling, anti-abuse, and troubleshooting.
• Support, moderation, and sanctions: legitimate interests in protecting the community and services.
• Donations and store credits: contract necessity to allocate Donation Points and fulfill redemptions.
• Cookies and analytics that are not strictly necessary: consent, obtained before setting such cookies.
• Legal compliance requests and fraud prevention: legal obligation or legitimate interests, as appropriate.

Cookies and similar technologies

We use essential cookies required to operate the site. Non-essential cookies, such as analytics, will only run after you consent in the banner. You can withdraw consent at any time through cookie settings.

Discord, payments, and other third-party services

We use third parties for community and payments. Their processing is governed by their own privacy policies, and they are independently responsible for their services.

• Discord: community, messaging, and moderation. See Discord’s Privacy Policy for details on data collected through Discord.
• Payment processors: donation handling and fraud checks. We do not see or store your full payment details.

Data sharing

We share data only with:

• Service providers under contract, such as hosting, security and DDoS protection, logging, payment processing, and email delivery.
• Moderators and staff who need access for operations and support, bound by internal access controls.
• Authorities when we are legally required to respond to a valid request.

International transfers

If personal data is transferred internationally by our service providers, we require appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, or rely on other recognized transfer tools where applicable.

Retention

• Account and gameplay data: kept while the account is active, then deleted or irreversibly anonymized after a reasonable period.
• Security and web logs: typically 90 to 180 days unless needed longer for investigations or legal reasons.
• Ban or fraud records: minimal records kept for longer to protect the Services.
• Tickets: retained for the life of the issue and for audit needs, then deleted according to our retention schedule.

Your rights

Depending on your region’s law, you may have rights to access, rectify, erase, restrict processing, port your data, object to certain processing, and withdraw consent where processing is based on consent. We will respond to valid requests and facilitate these rights. You may also have the right to lodge a complaint with your local data protection authority.

To exercise your rights, open a Discord ticket or use the contact page on megaforge.net. We may need to verify account ownership before acting.

Security

We apply reasonable technical and organizational measures such as access controls, TLS in transit, least-privilege administration, and monitoring. No system is perfectly secure, and we encourage good account hygiene, unique passwords, and keeping your email secure.

Children

The Services are for adults only. You must be 18 years of age or older to create an account or play.

Automated decision-making

We do not engage in profiling that produces legal effects on you without human involvement. Automated signals may flag behavior for review, such as anti-cheat or security alerts. A human moderator reviews sanctions before they are imposed.

Do not send us sensitive documents

Do not submit identity documents to us. If you provide identity information to third parties like Discord, that is governed by their policies and controls.

Changes to this policy

We may update this policy to reflect changes to our Services or legal requirements. Material changes will be highlighted on this page with a new “Last updated” date. Continued use of the Services after changes means you accept the updated policy.