1. Information We Collect

Depending on how you use Velheim, we may collect:

• Account identifiers such as username, display name, password hash, account rights, online status, and last activity.
• Website data such as IP address, browser details, cookies, page requests, session state, security logs, and diagnostics.
• Game and community data such as chat logs, trade logs, death logs, marketplace logs, vote logs, hiscores, achievements, and support-related records.
• Store data such as player name, cart item IDs, order status, payment processor, transaction IDs, captured/refunded amounts, buyer email/name when provided by the processor, and dispute status.
• Messages or files you send through Discord, support, forms, email, or direct staff contact.

2. How We Use Information

We use collected information to operate accounts, process store orders, deliver virtual goods, run hiscores and vote rewards, investigate bugs, prevent abuse, moderate staff logs, answer support requests, secure the service, improve performance, and comply with payment processor requirements.

Payment records are also used to resolve refunds, disputes, chargebacks, accidental payments, and manual payment checks.

3. Payments and Financial Data

Velheim does not store full card numbers, bank login credentials, or full payment credentials. Automated payments are processed by providers such as Stripe and PayPal. Manual payments, including bunq, are confirmed outside the automated store flow and may require you to contact Sandstorm directly.

Payment processors may send us transaction IDs, buyer email, payer name, order status, amount, currency, refund status, and dispute status. Their handling of payment data is governed by their own privacy policies and terms.

4. Cookies, Analytics, and Security Tools

We use cookies and local browser storage for features such as shopping cart behavior, login/session behavior, interface state, and basic site operation. Disabling cookies may break parts of the website or store.

We also use an anonymous activity cookie to show how many visitors are currently viewing the website, how many are viewing each page, and rolling 24-hour, 7-day, and 30-day unique visitor totals. This counter uses a random browser ID, expires inactive live viewers after a short time, prunes old activity records, and does not store player names or IP addresses in the presence counter.

We may use infrastructure and security services, including hosting/CDN/security providers, to cache assets, block abuse, diagnose slow pages, and protect the website. These services may process request metadata such as IP address, browser, URL, and timing data.

5. Sharing Information

We do not sell personal information. We may share limited information when needed with payment processors, infrastructure providers, security tools, staff or administrators, legal authorities when required, or service providers that help operate Velheim.

Public pages may show usernames, display names, crowns, hiscores, achievements, marketplace entries, votes, or similar game-related records.

6. Retention

Account, game, moderation, payment, and diagnostic records may be retained as long as reasonably needed to operate the service, investigate abuse, provide support, prevent duplicate claims, handle disputes, and maintain historical rankings or logs.

Some records may be deleted, compressed, cached, anonymized, or archived over time as part of normal maintenance.

7. Security

We use practical technical and administrative measures to protect data, including HTTPS, restricted staff access, protected secret files, webhook verification for automated processors, runtime log separation, and database access controls where available.

No online service can guarantee perfect security. You are responsible for using a strong password, protecting your device, and avoiding suspicious downloads or links.

8. Your Choices

You may contact staff to ask about account access, account correction, support records, or privacy concerns. Some data cannot be removed immediately if it is needed for security, payment disputes, abuse prevention, legal compliance, or service integrity.