This page explains what L2Web stores about you, why, and what you can ask us to do with it. Questions: [email protected].
1. The short version
- We ask for a username and a password. An email address is optional, and only used to recover your account.
- We store your characters and their progress, because that is the game.
- We keep chat and moderation records so we can deal with abuse.
- We do not sell your data. Advertising measurement (Meta) runs only if you accept it, and you can decline or change your mind at any time.
- You can delete your account, and the data goes with it.
2. What we collect
Account. Username, a hashed password (never the password itself), the date you signed up, and an optional email address for recovery.
Discord. If you sign in with Discord or link it, we store your Discord user id and display name so the link works.
Characters. Names, class, level, inventory, equipment, position, and the rest of your progress.
Chat and moderation. Messages sent in game, and any mute, warning, or ban attached to your account.
Technical. IP address and basic connection data in server logs, used for security and rate limiting. Optional performance reports from the client, used to find slow spots.
In your browser. Your session token and your settings (language, graphics, keybinds) are stored locally on your device, not on our servers.
3. Why we use it
- To run your account and save your characters.
- To keep the servers up, protect them from abuse, and enforce the rules.
- To fix bugs and improve performance.
- To answer you when you write to us.
4. Who else sees it
Other players see what you would expect them to see: your character name, level, class, appearance, and what you type in chat.
We use hosting and infrastructure providers to run the servers, Discord if you choose to link it, and Meta only if you accept advertising measurement (section 5). We do not sell your data to anyone.
We may disclose data if the law requires it, or to protect the service and its players from abuse.
5. Cookies and advertising measurement
Necessary. Your session token and your settings are stored in your browser so the game works. They are not used for advertising.
Advertising measurement, only with your consent. When you visit the site we ask, in a "Privacy choices" bar, whether we may measure our ads with Meta (Meta Platforms Ireland Limited and Meta Platforms, Inc.). Nothing is measured until you choose Accept. If you choose Decline, or make no choice, Meta's code is not loaded and our server sends Meta nothing. Declining changes nothing in the game.
If you accept, we load the Meta Pixel in your browser and our server sends the same events through Meta's Conversions API (each event carries one identifier, so Meta counts it once). The events are: a visit to a page, viewing a wiki page, completing a sign-up, your first entry into the game world, and coming back to play (at most once every 12 hours).
What Meta receives: the event name and time, the address of the page (without its query), a random event identifier, your IP address and browser user agent, and Meta's own browser identifiers (the _fbp and _fbc cookies). We never send your username, email, password, character names, chat, inventory, payment data or account number.
Why: to know how many visits, sign-ups and new players come from our ads, and to build advertising audiences on Meta (for example, people who visited but did not sign up, or excluding people who already play from sign-up ads). The legal basis is your consent (LGPD, art. 7, I). Meta processes this data under its own terms and its Privacy Policy, possibly outside Brazil.
How long: our server keeps your IP address, user agent and Meta cookies only until the event is delivered to Meta or discarded, and the delivery record itself for up to 30 days. Meta keeps the data under its own policy.
Change or withdraw your consent at any time with the "Privacy choices" link at the bottom of the home page and of the wiki. Withdrawing stops the measurement from that moment and removes the Meta cookies from your browser; it cannot undo events already sent. Advertising measurement is meant for adults: if you are under 18, please choose Decline.
6. How long we keep it
Account and character data stay while your account exists. Chat logs are kept for a limited period for moderation. Server logs are kept briefly for security. Deleted accounts are removed, except where we must keep a record of a ban to enforce it.
7. Your choices
You can ask us to show you your data, correct it, or delete it. Write to [email protected] from the address linked to your account, or use the account screen in game to delete it yourself.
8. Children
The game is not for children under 13. If we learn that we have data from someone under 13, we delete it.
9. Security
Passwords are hashed, sessions are token based, and access to the servers is restricted. No system is perfectly secure, so use a password you do not reuse elsewhere.
10. Changes
If this policy changes we update the date at the top of this page.