Privacy Policy

Last updated: October 11, 2026

This policy explains what personal data L2LegacyWorld (l2legacyworld.com) collects, why, and what rights you have. We collect as little as possible to run a game community.

1. What we collect

Data	Why
Email address	Account login, password recovery, important service emails
Username	Your public identity on the website and in game
Password	Stored only as a secure hash — we can never read it
Game account & character data	Running the game service (progress, items, rankings)
Donation records	Top-ups: amount, date and the payment provider’s reference. We never see your card number — card payments are completed on the payment provider’s own page. For crypto payments we see the public wallet address and transaction ID
Support messages	Resolving your tickets
Basic technical logs	Security, anti-cheat and abuse prevention (IP addresses in server logs)
IP address at vote claim	When you claim a vote reward, your IP address is checked with the voting sites to confirm your vote. We keep only a scrambled (hashed) form of it

2. What we don't do

We don't sell or share your data with advertisers.
We don't use tracking cookies. Website analytics, if enabled, are cookieless and anonymous (Cloudflare Web Analytics). Your browser only stores what is needed to keep you signed in and remember your language.
We don't send marketing emails — only service emails (verification, password reset, important account notices).

3. Who processes data for us

Supabase — database & authentication hosting (EU region, Frankfurt)
Cloudflare — website hosting and delivery
Resend — delivery of service emails (verification, password reset)
Payment providers — the provider shown at checkout processes your payment; your card details stay with them
Voting sites (HopZone, L2Votes) — confirm your vote by IP address when you claim a vote reward

4. How long we keep it

Account data is kept while your account exists. Payment records are kept as long as legally required for accounting. Server logs rotate automatically.

5. Your rights (GDPR)

Access / export — ask for a copy of your data.
Correction — fix your email or username in Account Settings.
Deletion — request account deletion at any time; we remove personal data except records we must keep by law.

To exercise any of these, open a ticket via the support system or contact us on Discord.

6. Children

The service is not intended for children under 16. We do not knowingly collect data from them.

7. Changes

Significant changes to this policy will be announced on the website and Discord.

8. Contact

Questions about your data? Reach the team through the support system (sign in, then open Support) or on Discord.