1. What Is Collected
HavenWorld collects only the minimum necessary information to operate an authentic, secure online multiplayer game:
- Account Credentials: Your chosen username, email address, and cryptographically hashed passwords.
- In-Game Activity: Avatar customization presets, inventory items, sanctuary room layout configurations, chat history, and gameplay achievements.
- Technical Diagnostics: IP address, browser user-agent strings, and server access logs recorded during network requests and WebSocket handshakes.
2. How It Is Used
The collected data is used exclusively to:
- Facilitate account registration, login authentication, and password resets.
- Persist your avatar, inventory, and personalized rooms across gameplay sessions.
- Synchronize real-time movement and chat with other players in active rooms.
- Detect, investigate, and mitigate game exploits, harassment, and abuse.
- Capture crash reports and trace technical errors via Sentry for stability fixes.
3. Third-Party Services
HavenWorld relies on vetted third-party infrastructure providers to deliver services. Each third-party processes data in accordance with their respective privacy policies:
- Sentry (Crash & Performance Monitoring): Sentry Privacy Policy
- Resend (Transactional Email Delivery): Resend Privacy Policy
- Cloudflare (Content Delivery & Web Ingress): Cloudflare Privacy Policy
4. Data Retention
Your account information and in-game state are retained as long as your account remains active, or until you request account deletion. Inactive alpha test data may also be periodically reset or pruned during major version upgrades as documented in our Terms of Service.
5. Your Rights & Data Deletion
You have the right to request a copy of your stored data, correct any inaccurate personal details, or request permanent deletion of your account and all associated data at any time.
To exercise these rights, simply send an email to dboone9@msn.com with the subject "Data Deletion Request" from the email address registered with your account. Your request will be fulfilled within 30 days.
6. No Sale of Personal Data
We do not sell, rent, monetize, or trade your personal information, email address, or gameplay behavior to third parties or advertisers under any circumstances.