Early-access draft. This policy is a working draft for an early test of the game and is pending legal review. Items marked TODO are not final.
Who we are
ViceLedger is an online game in early development, operated by TODO — operator legal name (“ViceLedger”, “we”, “us”). We operate the game at play.viceledger.net and this website at viceledger.net. For players in the European Economic Area (EEA), the United Kingdom and Switzerland, we are the controller of your personal information. You can reach us at support@viceledger.net.
What this policy covers
This policy covers the ViceLedger game (the web client and the game servers it connects to), your ViceLedger account, this website and the email you send to support. The game is in early development, and some features described here, including sign-in, may not be available yet. We describe them now so you know how they work before you use them.
What we collect
When you sign in
ViceLedger uses Google Firebase Authentication for sign-in. Every account, whichever method you use, gets a Firebase user ID (UID): a random identifier that links you to your game data.
| Sign-in method | What we receive |
|---|---|
| Your Firebase UID, plus your email address, name and profile photo link when Google provides them. We never receive your Google password. | |
| Apple | Your Firebase UID, plus your email address and name only if you choose to share them when you sign in. Apple may give us a private relay address instead of your real email (“Hide My Email”). We never receive your Apple Account password. |
| Guest | Your Firebase UID only. Firebase anonymous sign-in creates it and stores it in your browser. We receive no email address or name. If you clear your browser data or change devices, you can lose access to a guest account, and we cannot recover it. |
Firebase also records when your account was created, when you last signed in and which sign-in method you used.
When you play
- Gameplay and economy records. Your character and its state, the in-game items and currency you hold, and the records of transfers, trades, market orders and fills, loot, combat results, jobs, deliveries and factory events that involve you. The game server processes your movement and actions in real time and keeps these records so the shared economy stays consistent.
- Display name, if you set one. Other players can see it.
- Technical and security data. Your IP address, the times of your connections and requests, your browser and device type, and server logs. We use these for security, to prevent cheating and abuse, and to keep the service running.
The game stores your sign-in session, your settings and cached game files in your browser's storage, so you stay signed in and the game loads faster. It uses no advertising or analytics cookies.
When you contact us
Your email address and whatever you write to us.
When you visit this website
viceledger.net has no accounts, no analytics and no advertising, and it sets no cookies of its own. Cloudflare, which hosts it, processes your IP address and request details to deliver the pages and protect the site, and may set a strictly necessary security cookie if it needs to check for automated traffic.
What we do not collect
- Payment card or bank details. Nothing is sold in the game today.
- Precise location, contacts, photos, or access to your camera or microphone.
- Cryptocurrency wallet recovery phrases or private keys. We will never ask for them.
How we use information
- To create your account and sign you in.
- To run the game: process your actions on the server, keep your character, items and currency, and record transfers and trades in the economy ledger.
- To keep the game fair and secure: detect cheating, bots, fraud, abuse and attacks, and enforce our Terms of Service.
- To answer support requests and tell you about your account or important changes to the service.
- To find and fix bugs and improve the game.
- To comply with the law.
We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use it to show you ads. We do not send marketing email.
Legal bases (EEA, UK and Switzerland)
If you are in the EEA, the UK or Switzerland, we rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Create your account, sign you in, run the game, and keep your character, items, currency and economy records | Performance of our contract with you (the Terms of Service) |
| Detect cheating, bots, fraud, abuse and attacks, and enforce the Terms | Our legitimate interests in keeping the game fair and the service secure |
| Answer support requests and send messages about your account or the service | Performance of our contract with you, and our legitimate interest in answering you |
| Find and fix bugs and improve the game | Our legitimate interest in a working, improving game |
| Comply with the law and respond to lawful requests | Legal obligation |
We do not rely on consent for any of this today. If we ever ask for your consent, you can withdraw it at any time. Storing your sign-in session and settings in your browser is strictly necessary to provide the game you asked for.
Service providers
These companies process information for us to run ViceLedger, or sign you in when you choose them:
| Provider | What they do | Information involved |
|---|---|---|
| Google (Firebase Authentication) | Sign-in for Google, Apple and guest accounts | Firebase UID, email and name when provided, sign-in times, IP address of sign-in requests |
| Apple (Sign in with Apple) | Signs you in when you choose Apple | Name and email only if you allow Apple to share them |
| Amazon Web Services, US East (N. Virginia) region, United States | Hosts the game servers, the game database and backups | Account IDs, gameplay and economy records, server logs including IP addresses |
| Cloudflare | Hosts this website and the web client; DNS, network security and email routing for support@viceledger.net | IP addresses and request details; support email in transit |
| Google (email) | The mailbox that receives support email | Your email address and messages |
Google's and Apple's own privacy policies also apply to your Google and Apple accounts. Solana settlement is in local testing only and is not part of the public service: we publish nothing about you on any public blockchain.
Where information is processed
ViceLedger is offered to players outside South Korea; it is not offered in South Korea. Our game servers and game database are in the United States, in the AWS US East (N. Virginia) region. Some service providers, such as Cloudflare and Google, operate global networks and may process information in other countries, for example at the data center nearest to you.
If you play from outside the United States, your information is transferred to the United States, whose privacy laws may differ from those where you live. For transfers from the EEA, the UK and Switzerland, we rely on our providers' data processing terms, which include the European Commission's Standard Contractual Clauses and their UK and Swiss equivalents, or on the provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You can ask us for more information about these safeguards.
When we share information
- With the service providers above, to run the service.
- With other players, as part of the game: your display name, your character and what it does in the shared world, and market prices and completed trade volumes.
- When the law requires it, or when we need to protect the rights, property or safety of our players, the public or ViceLedger, including the integrity of the game.
- If ViceLedger is sold or merged, with the new owner, who must keep honoring this policy for the information it receives.
- With your permission.
How long we keep it
| Information | How long |
|---|---|
| Account (Firebase UID, email, name) | Until you delete your account. We plan to delete guest accounts with no sign-in for 12 months automatically, with their game data. That clean-up is not running yet. |
| Character, items and currency | Until you delete your account. During early development, game data may also be reset at any time (see the Terms). |
| Economy ledger entries (transfers, trades, loot) | While your account exists. After deletion, entries that other players' balances depend on are kept with your identity removed. |
| Security and server logs, including IP addresses | The server's logs have a size limit but no time limit yet: when they fill up, the oldest entries are deleted first, so how long an entry stays depends on how busy the server is. We keep entries longer only while investigating a specific security incident or abuse. TODO — retention limit |
| Backups and recovery copies | These hold the same information as the live service at the time they were made, including the logs above. We do not edit them to remove a single account; information leaves them as they expire:
If we ever restore one of them, we delete again every account that was deleted after it was made, before the game reopens. |
| Record of a deletion request | Your account UID and the date we deleted the account, until no backup or recovery copy made before the deletion remains, so that we can repeat the deletion after a restore. |
| Support email | Up to 2 years after the conversation ends, unless you ask us to delete it sooner or the law requires longer |
Your choices and rights
Wherever you live, you can ask us what personal information we hold about you, ask for a copy of it, and ask us to correct or delete it. Depending on where you live, you may have more rights, described below.
- To make a request, email support@viceledger.net. We verify that you control the account, for example by your account UID or a reply from the email address on the account, and we respond within one month. If the law lets us extend that for a complex request, we will tell you why.
- You may use an authorized agent; we may ask the agent for proof that you authorized them.
- If we decline a request, you can appeal by replying to our answer.
- We will not treat you differently for using these rights.
- We do not sell or share personal information, so there is nothing to opt out of; we still treat a Global Privacy Control signal as an opt-out request.
- You can disconnect ViceLedger from your Google account (Google Account → Security → Your connections to third-party apps and services) or from your Apple Account (Settings → your name → Sign in with Apple).
EEA, UK and Switzerland
You have the right to access, correct and erase your personal information, to restrict how we use it, to receive the information you gave us in a portable format, and to object to processing based on our legitimate interests. You can also complain to the data protection authority where you live or work, though we would welcome the chance to help first.
Our representative in the EU and in the UK (Article 27 GDPR and UK GDPR): TODO — legal review
United States
Depending on the state you live in, you may also have the right to opt out of the sale or sharing of your personal information, or its use for targeted advertising or profiling. We do not do any of these things, and we honor access, correction and deletion requests for every player, whichever state they live in.
Elsewhere
If the law where you live gives you other privacy rights, contact us and we will honor them as that law requires.
Deleting your account
To delete your account and its data, follow the steps on Delete your account. A delete option inside the game is planned.
Children
ViceLedger is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that a child under 13 has an account, we will delete it and its data. Where the law sets a higher age for using online services without a parent's consent (in the EEA, between 13 and 16 depending on the country), players below that age need the consent of a parent or guardian. Parents or guardians can contact us at support@viceledger.net. ViceLedger depicts crime and violence.
Security
We use encrypted connections (HTTPS and secure WebSockets) and limit who can access servers and data. No system is perfectly secure; if a breach affects your personal information, we will notify you as the law requires.
Changes to this policy
We will post any changes on this page and update the effective date above. If a change materially affects how we use your information, we will give notice on this website or in the game before it takes effect.
Contact
Questions or requests about privacy: support@viceledger.net.