Privacy Policy

This Privacy Policy explains how RagnaPlace ("we", "us", "our") collects, uses, shares, and protects your personal information when you visit or use ragnaplace.com. RagnaPlace is a free, fan-made Ragnarök Online database and community, and is the controller of the personal data described here. You can reach us about privacy at privacy@ragnaplace.com. This policy applies to everyone who uses the site, wherever you live. It explains what we do with your data; it is not a contract you accept by using the site, and your choices about optional cookies are made separately in the cookie settings.

We only collect the information we need to run the site. Account information — when you sign in we store your email address and basic profile details such as a username and avatar, and if you sign in with Google, Discord, Twitch, or GitHub we receive basic profile information from that provider. When you create an account you also confirm that you meet the minimum age, and we record when you did. We use passwordless sign-in (magic link), so we never store a password. Content you create — forum topics and replies, builds, gallery images, skins, replays, comments, private messages, likes, reports, and anything else you choose to submit. Technical and usage information — collected automatically, such as your IP address, browser and device type, language, the pages you view, the page that referred you, and access times; your IP address and browser are also stored with each sign-in session. We do not request or store payment details, government identification, or your home address.

We use the information we collect to operate, maintain, and secure the site, to create and manage your account and sign you in, to display and moderate the content you and others submit, to respond to your reports and requests, to understand how the site is used so we can improve it, to show advertising that keeps the site free, and to comply with our legal obligations. We do not make decisions that produce legal or similarly significant effects about you through solely automated means.

Where data protection laws such as the GDPR, UK GDPR, or Brazil's LGPD apply, we rely on the following legal bases. We process your account and content data to perform our agreement with you and provide the service you ask for. We rely on your consent for non-essential cookies, analytics, and personalized advertising, and you may withdraw that consent at any time. We rely on our legitimate interests to keep the site secure, prevent abuse and fraud, and improve our features, balanced against your rights. And we process data where it is necessary to comply with a legal obligation.

We use cookies and similar technologies (such as local storage) to keep you signed in, remember your preferences, measure how the site is used, and deliver and personalize ads. Strictly necessary cookies are always active because the site cannot work without them. In the European Economic Area, the United Kingdom, Switzerland, and Brazil, and whenever we cannot tell where you are, the other cookies are only set after you accept them; elsewhere they are on by default. You can see the cookies we use and accept or reject the optional ones at any time through the Cookies link at the bottom of every page, and you can also block or delete cookies in your browser.

We use Google Analytics to understand how visitors use the site, Google AdSense to show the ads that keep RagnaPlace free, and Google Funding Choices to show Google's consent and ad-blocking messages. These services may set cookies and process data such as your IP address, device and browser information, and the pages you visit, to measure use, show ads, and limit how often you see them. In the European Economic Area, the United Kingdom, Switzerland, and Brazil, and whenever we cannot tell where you are, analytics and advertising cookies stay off until you accept them; elsewhere they are on by default and you can turn them off at any time in the cookie settings. Your choice is passed to Google through Google Consent Mode. Google handles this data under its own privacy policy, and you can manage ad personalization at g.co/adsettings.

We never sell or rent your personal information. We share it only with the service providers that help us run the site, and only for that purpose: - Cloudflare: content delivery, security, DNS, hosting of the site, storage of uploaded images (R2), and the country lookup used to choose the cookie banner. - Our server host: a virtual private server where our API, database, cache (Redis), and search engine (Elasticsearch) run. We operate these services ourselves. - Our email delivery provider: sends sign-in links, account notices, and the notification emails you turn on, so it receives your email address and the message. - Google: Analytics, AdSense, and Funding Choices (see above), and Google sign-in if you use it. - Discord, Twitch, and GitHub: only if you sign in with them. They tell us who you are and know that you used them to sign in to RagnaPlace. - YouTube and other video platforms (such as Twitch or TikTok): videos embedded in posts load from them when you play or open them, and they may set their own cookies. - Discord webhooks: market and MVP alerts are sent to the Discord webhook address you enter, so Discord receives the content of those alerts. - Browser push services (from Google, Mozilla, Apple, or Microsoft, depending on your browser): deliver push notifications if you turn them on. We may also disclose information when the law requires it, to enforce our Terms of Use and Rules, or to protect the rights, safety, and security of our users and the public. We may share aggregated or anonymized statistics that cannot identify you.

RagnaPlace is available worldwide, so your information may be stored and processed in countries other than the one you live in, including countries that may have different data protection laws. When we transfer personal data internationally we take steps to keep it protected, for example by relying on providers that offer recognized safeguards such as the European Commission's Standard Contractual Clauses. For transfers from Brazil we rely on the standard contractual clauses approved by the ANPD or on other safeguards the LGPD allows.

We keep personal information only as long as we need it: - Account (email, username, profile, linked sign-in providers): while your account exists. When you delete your account you have 30 days to change your mind by signing in again. After that we delete your sign-in methods, sessions, notification settings, characters, favorites, and stream links, delete your avatar and cover and the images and skin packs you did not choose to keep, and remove your email and username. Content you chose to keep stays online under an anonymous "Deleted" name. - Sign-in sessions, with the IP address and browser they were opened from: up to 7 days after your last visit, and deleted at once when you sign out or delete your account. Sign-in links expire after 5 minutes. - Content you post: until you delete it or your account. Private messages you sent stay in the conversation for the other person, under the anonymous name. - Reports and contact messages: up to 12 months after they are handled. - Moderation and guild audit records: up to 12 months, longer only while needed for an open dispute or legal claim. - View counts: your IP address is held in memory for 5 minutes so a page view counts once; the daily counts we keep for 90 days do not identify you. - Search history: the words searched, kept for up to 12 months without your account or IP address. - Server logs: up to 30 days. - Backups: up to 30 days, after which deleted data is gone from them too. After these periods we delete the information or make it anonymous.

Depending on where you live, you may have the right to access the personal information we hold about you, to correct or update it, to delete it, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw consent at any time. If you are in California you may also ask what information we collect and request that we do not sell or share it or use it for targeted advertising, and we will never discriminate against you for exercising your rights. We honor recognized opt-out signals such as Global Privacy Control where the law requires it. You can delete your account yourself in the account settings. For anything else, write to privacy@ragnaplace.com or use the contact form at the bottom of any page; we may ask you to confirm that the account is yours. We answer within 15 days if you are in Brazil and within one month if you are in the European Union or the United Kingdom. You also have the right to complain to a data protection authority, such as the ANPD in Brazil or the authority of your country in the European Union.

RagnaPlace is not directed to children. You must be at least 13 years old, or the minimum age required in your country if it is higher (such as 16 in some European Union countries), to create an account, and you confirm this when you sign up. If we learn that an account belongs to someone younger, we close it and delete its data. If you believe a child has given us personal information, write to privacy@ragnaplace.com.

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction, including encryption of traffic over HTTPS, passwordless sign-in, and restricted access to data. However, no method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that affects your personal data, we will notify you and the relevant authorities as required by law.

The site may contain links to other websites, official game pages, and community resources that we do not operate. This Privacy Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to read the privacy policy of any site you visit.

We may update this Privacy Policy to reflect changes in our practices or for legal reasons. When we do, we change the "Last updated" date on this page, and for significant changes we also tell signed-in users on the site or by email before the changes take effect. Where the law requires your consent for a new use of your data, we will ask for it.

For any question or request about this Privacy Policy or your personal information, write to privacy@ragnaplace.com or use the contact form at the bottom of every page. We answer within 15 days in Brazil and within one month in the European Union and the United Kingdom.