Dieses Dokument gibt es nur auf Englisch. Maßgeblich ist der englische Text.

Privacy Policy

Elunor: A Reborn Slice Of Life Adventure - Version 1.6 - Effective 20 October 2026

This policy explains what personal data the game Elunor (the game, its website sunsigil.dev, the SunSigil account at account.sunsigil.dev and its servers) collects, why, how long it is kept and the rights you have. It is written to meet the UK General Data Protection Regulation and Data Protection Act 2018 (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

1. Who is responsible

The data controller is SunSigil.dev, the studio that makes Elunor ([legal name of the operator], [postal address]). Contact for anything in this policy, including your rights: privacy@sunsigil.dev. We have not appointed a data protection officer; that address reaches the person who handles data protection. The full legal notice is on our Legal notice page (sunsigil.dev/elunor/imprint/). If we appoint a representative in the UK or the EU, their details will be listed here.

2. What we collect and why

Data: A device identifier: a one-way hash of your device's ID (Android ID, or on Windows the machine ID). The raw ID never leaves your device.
Why: It is your login: it lets the same device return to the same character.
Legal basis: Contract (providing the game)

Data: Sign-in details, if you link an account: your email address and a salted password hash, or the account ID and display name a provider (Google, Microsoft, Discord, Steam, Twitch, Facebook) shares with us.
Why: So you can reach your character from other devices and recover it.
Legal basis: Contract

Data: Your SunSigil account, if you make one: your email address, a salted password hash (never the password itself), whether you confirmed the email, and the character it plays. While you are signed in on account.sunsigil.dev we keep a record of each signed-in browser: a one-way hash of its sign-in token, a short label of the browser and system it is (for example "Chrome on Windows"), when it started and when it ends. The 6-digit codes we email you are kept only in the server's memory for 15 minutes, and the one-time code that signs a game in for 2 minutes.
Why: To run your account, sign you in to our games with one click and let you recover a forgotten password.
Legal basis: Contract

Data: Sign-in security: the IP address a sign-in, registration or password request comes from, and how many wrong passwords were tried for an email address. They are counted only in the server's memory, for a few minutes, and never written down.
Why: To stop people guessing passwords or flooding the service.
Legal basis: Legitimate interests (a secure service)

Data: Your profile from character creation: first name, surname, date of birth, your language, the game language, and which agreements you accepted and when.
Why: To check you are old enough to play, to keep a record of your consent, and to contact or verify you if your account needs support. It is never shown to other players.
Legal basis: Contract; legitimate interests (keeping the game to the ages allowed, and a record of what you agreed to)

Data: Your character: its name, body, position, progress, items, coins, land and buildings, and messages you send in game.
Why: To run the game world and keep your progress.
Legal basis: Contract

Data: Playing one character on several of your devices at once (mirror mode): each device's address on your own home network (for example 192.168.1.20), the port it listens on for your other devices, and the public internet address it connects from.
Why: When two or more of your devices play the same character from the same home network, our server introduces them to each other, so the device you are controlling can send its movement and camera straight to the others - smoother than through our server (see section 4). The addresses are held only in the server's memory while the devices are connected; they are never stored, logged or shared.
Legal basis: Contract (providing the feature you use)

Data: Technical and security data: IP address, connection times, game version, and integrity checks of the game files on your device (a fingerprint of the installed files, whether a debugger or modified files are present, whether several copies run).
Why: To keep the servers running, stop cheating, bots and abuse, and handle appeals against suspensions.
Legal basis: Legitimate interests (a fair and secure game)

Data: Voice chat, if you use it: your voice, as short compressed audio frames passed on in real time to players near you (within about 32 metres in the game world) who have voice on. Our server does not decode, listen to, record or store it. If other players report that you are shouting, your account is muted for a time; we keep the length of that mute and a count of how many there have been in a row.
Why: To run proximity voice chat and keep it pleasant.
Legal basis: Contract (voice chat you choose to use); legitimate interests (a pleasant and safe game)

Data: The age check for voice chat (optional: you can play without it, and only voice is withheld; the check runs on our own server, with no outside company processing it, and we assessed its risks before using it): on a phone, the data on your passport's chip (name, birth date, the issuing state's signature), the chip photo, and three live selfies. The face in the selfies is compared with the chip photo by software on our server, to confirm the person is the passport's holder. All of this is held in the server's memory for that one check and wiped afterwards; nothing of the passport or the selfies is written to the database or a log. We keep only: that you are 18 or older (yes/no), the date, the issuing state, whether your account's birthday matched (and, if not, whether the birthday you gave was younger or older than the passport's - for example an account that said it was under 18 but proved to be an adult, or the reverse; such an account is held for review by a person and voice stays off until we have talked to you), and a one-way fingerprint of the passport's signature, so that one passport cannot unlock several accounts.
Why: To let only adults use voice chat.
Legal basis: Your explicit consent (Article 9(2)(a), because a face is compared); you can withdraw it as easily as you gave it: stop at any time, and write to privacy@sunsigil.dev to have the record we keep deleted (voice then stays off until you pass a check again)

Data: Purchases of credits: an order or payment reference, the item, the amount, and that you agreed to immediate delivery. Card and bank details go to Google Play or Stripe only; we never see them.
Why: To deliver what you bought, handle refunds and withdrawals and keep the records tax law requires.
Legal basis: Contract; legal obligation (tax and accounting records)

Data: Appeal messages you send us.
Why: To review a suspension.
Legal basis: Legitimate interests

Data: Emails you send us (for example to support@sunsigil.dev or privacy@sunsigil.dev): your address, the message and our reply. Emails we send you from noreply@sunsigil.dev (your codes and account notices) are not kept after they are sent.
Why: To answer you and keep a record of the conversation.
Legal basis: Legitimate interests; legal obligation where a request concerns your rights

Data: Visits to our website, sunsigil.dev: your IP address and the page asked for, used by the web server only to send the page. We keep no access logs, use no analytics, and load fonts and images from our own server, so no third party learns of your visit.
Why: To show you the website.
Legal basis: Legitimate interests

We do not sell your data, we do not show advertising and we do not profile you for marketing. One automated process does affect you: the game's anti-cheat checks flag an account that does something an honest player cannot do (for example a modified game file), and a daily run turns those flags into a suspension automatically, with no person looking first - a few days for a first offence, longer for later ones. This is a decision made by automated means that significantly affects you, and we make it because it is needed to run the game fairly under our Terms. You are told the length and a reference when you next sign in. You can appeal in the game or at the game's web address under /appeal (more in our Community rules); a person reviews every appeal and can reverse the suspension. You have the right to obtain human intervention, to state your point of view and to contest the decision (Article 22), by appealing or writing to privacy@sunsigil.dev.

Providing your data: you need a device identifier to play at all. A SunSigil account needs an email address. Your date of birth is asked when you create a character. The age check and voice chat are optional. Without the data a feature needs, we cannot offer that feature.

Where data comes from: mostly from you and your device. Sign-in providers send us the account ID and display name you let them share, and Google Play or Stripe tell us that a payment succeeded.

3. Streamer mode

Streamer mode keeps your real name, birthday, email address and position out of a stream or recording. On Windows the game asks the system to leave that text out of screen captures; on phones and in the browser it is shown as dots. It is on by default on phones and in the browser, and turns on by itself on a PC while streaming software runs. The game checks only the names of running programs for this, on your device; nothing about them is sent to us.

4. Playing on several devices at once

You can play your character on more than one of your own devices at the same time - for example a PC and a phone. The device you are using controls the character; the others show the same view (we call this mirror mode). This is how it works and what it involves:

Each of your devices tells our server its address on your home network. If our server sees two or more of your devices connecting from the same home network, it gives them a secret key made for that session only, over their encrypted connection, and tells each where the others are.
The device you control then sends its character's position, facing, camera and flying state straight to your other devices over your home network, about 60 times a second. This traffic is encrypted with that key: other people and devices on the same network cannot read it or pretend to be one of your devices. It stays on your network and uses no internet data.
If your devices are on different networks, or a device cannot reach the others (for example because a firewall blocks it), mirroring goes through our server as before. On a PC, your firewall may ask whether to allow the game on your network; if you refuse, the game still works and mirrors through our server.
Only devices signed in to the same account are introduced to each other. Our server stays in charge of the game: what one device sends to another only changes what that device shows, never your progress, items or purchases.
If you have confirmed you are 18 or older, other players hear your voice only from the device you are controlling; your other devices listen but never send your voice.
Nothing about your home network is stored: the addresses and the key exist only while your devices are connected, and a new key is made whenever a device joins, leaves or takes control. The browser version cannot connect to other devices directly and always mirrors through our server.

Our hosting provider (OVHcloud), which runs the game servers, the database, the website and our email for us as our processor.
Payment providers: Google (Google Play Billing) on the Play Store version, Stripe elsewhere - only for purchases you make.
The sign-in provider you choose, when you sign in with it. The SunSigil account is our own: signing in with it shares nothing with anyone else.
Google Play Integrity, on Android, to check the app is genuine.
Authorities, if the law requires it.

Other players see only your character name, your character and what you do in the game world.

6. International transfers

Moving data between the UK and the EU is covered by each side's adequacy decision. Some providers (Google, Stripe, sign-in providers) may process data in the United States or elsewhere. Where that happens we rely on an adequacy decision (including the EU-US Data Privacy Framework and its UK extension) or on standard contractual clauses with the UK International Data Transfer Addendum (IDTA). To get a copy of the safeguards that apply, or to ask which one covers a given provider, write to privacy@sunsigil.dev.

7. How long we keep it

Your account, character and profile: while your account exists. If you ask us to delete your account, we delete them within 30 days, apart from the records below.
An account not used for 3 years: we aim to delete it after trying to warn you. (This is a goal; until it is done by the system, it is done by hand and may take longer.)
A signed-in browser on account.sunsigil.dev: 30 days, or until you sign out, change your password or delete the account.
Purchase records: as long as tax and accounting law requires (up to 10 years, depending on the country).
Security logs and anti-cheat records: we aim to keep them no longer than 12 months; suspension records for as long as the suspension and any appeal last.
Emails you send us: we aim to keep them no longer than 2 years after the conversation ends, unless a request about your rights needs keeping longer. Our mail server also keeps its ordinary delivery log (the address a message went to or came from, and the time) for as long as the server's log rotation holds it; we aim for no more than 12 months.

8. Your rights

Under UK and EU law you can ask to access your data, correct it, delete it, restrict or object to its use, and receive it in a portable format. Where we rely on legitimate interests you can object at any time, and we will stop unless we have compelling reasons. Where we rely on consent (the age check, the theme cookie) you can withdraw it at any time; this does not affect what was done before. With a SunSigil account you can do two of these yourself at account.sunsigil.dev: "Download my data" saves a copy of what your account and character hold about you (a JSON file), and "Delete account" removes your sign-in at once and has your character erased within 30 days. If you play only in the game and have no SunSigil account, write to privacy@sunsigil.dev to access, correct or delete your data. For anything else, write to the same address. We answer within one month; if your request is complex or we get many, we may extend that by up to two further months and will tell you why within the first month. If we cannot tell that a request is from you, we may ask for proof of identity first (for example a message from the account's email address or a code sent in the game). You can also complain to a supervisory authority: in the UK the Information Commissioner's Office (ico.org.uk, helpline 0303 123 1113), in the EU the data protection authority of the country where you live, work or think the infringement happened (the European Data Protection Board lists them at edpb.europa.eu). We would be glad to hear from you first.

9. Children

The game is for players aged 13 and over and is not directed at younger children. Voice chat is for players confirmed as 18 or older. If your country sets a higher age for agreeing to online services on your own (up to 16 in some EU countries), you may not play without a parent's or guardian's permission, and you must tell us so when you sign up. Players under 18 may buy credits only with a parent's or guardian's permission. If we learn that a child under 13 has an account, we delete it.

In short, for younger players: we keep your real name, birthday and email private from other players; ask a parent or guardian before you play if you are under the age your country sets, and before you buy anything; and tell us at privacy@sunsigil.dev if you want your data deleted.

10. Storage on your device

The game keeps settings (such as volume, the dark theme and Streamer mode) and downloaded game content on your device. The browser version uses local storage and a service worker for the same reasons. account.sunsigil.dev sets one cookie that keeps you signed in, and our websites keep your cookie choice. These are strictly necessary; we use no advertising, analytics or tracking cookies. The websites remember your choice of light or dark theme only if you allow it in the cookie notice, and you can change that at any time from "Cookie settings" at the foot of every page. Our Cookies Policy (sunsigil.dev/elunor/cookies/) lists each item.

11. Security

Connections to our servers, website and email are encrypted (TLS), passwords are stored only as salted hashes, and access to the servers is limited to the operator. Your devices that mirror each other over your home network encrypt that traffic (ChaCha20-Poly1305) with a key our server makes for that session only. Account pages cannot be shown inside another website, accept requests only from our own pages, and ask for your password again before an account is deleted.

12. Other pages

Terms, Refunds and withdrawal, Virtual items and credits, Community rules, Cookies, Accessibility, Complaints, Legal notice and Third-party credits are all listed at the foot of every page of sunsigil.dev.

13. Changes

If we change this policy in a way that matters, we tell you in the game before the change takes effect and, where the law requires, ask you to agree again.