View source for The Mana World:Privacy policy

{{Meta}}{{I18n}} __NOTOC__ __NOEDITSECTION__
<h1 id="privacy-policy">Privacy Policy</h1>
<p>This is the general Privacy Policy for The Mana World Project (&quot;we&quot;, &quot;us&quot;, &quot;The Mana World&quot;, &quot;TMW&quot;), along
all its services, including websites, forums, wikis, repositories and game servers,
Containing information regarding the types of information that is collected and
recorded by us. If you have additional questions or require more information about
our Privacy Policy, do not hesitate to contact us at [mailto:&#x6c;&#101;&#103;&#97;&#x6c;&#x40;&#x74;&#104;&#x65;&#x6d;&#97;&#x6e;&#97;&#119;&#111;&#x72;&#108;&#100;&#46;&#111;&#114;&#103; &#x6c;&#101;&#103;&#97;&#x6c;&#x40;&#x74;&#104;&#x65;&#x6d;&#97;&#x6e;&#97;&#119;&#111;&#x72;&#108;&#100;&#46;&#111;&#114;&#103;]</p>
<p>This Privacy Policy does not extend to third party services we may host, such as
guild websites; please refer to their privacy policies instead.</p>
<h2 id="consent">Consent</h2>
<p>By using any of our services, you hereby consent to our Privacy Policy and agree
to its terms. By doing so, you become a &quot;User&quot;.</p>
<h2 id="information-that-we-collect">Information that we collect</h2>
<p>Our services may collect standard traffic information in log files, such as your
Internet Protocol (IP) address, browser or client type, Internet Service Provider
(ISP), date and time stamp, and requested resource/page; both in order to prevent
our services from Denial of Service (DoS) attacks, to find and prevent fraud, to
analyze trends, and to better administer and maintain our services.</p>
<p>Some of our services which are used in conjunction with other service, such as IRC
Bots used in conjunction with IRC, or game bots used in conjunction with the game,
may further log timestamps for the last sighting of nicknames or hold private
messages for users. Typically, these will be using the same permission scopes
which a normal user of the IRC Network and/or game would have access to.
Typically, these sub-services do not enjoy any additional data collection
privileges apart from being optionally exempt from some anti-flooding policies and
being under our direct control in case of the need for assistance regarding their
usage.</p>
<p>Our services typically offer the users &quot;accounts&quot;, which any natural person may
register provided the user&#39;s consent and acceptance of this Privacy Policy and
our terms of use.</p>
<p>Do note that some services like repositories, wikis and forums may collect data
subject to irrevocable license terms, such as the GNU General Public License
version 2 or later. This Privacy Policy does not supersede nor prevail over the
license terms, except when required by law.</p>
<h3 id="information-that-tmw-forums-collect">Information that TMW Forums collect</h3>
<p>To create an account, you need to provide a username, email, and password
(which will be stored in a hashed form). The forum uses standard TLS to protect
your information from Man In The Middle (MITM) attacks, and implements Perfect
Forward Secrecy to protect past sessions against private key compromises.</p>
<p>Creating an account will prompt the creation of defaults and storing of further
personal data automatically, such as registration date and IP, logs on the actions
performed within the forums, language, forum theme, timezone, date format, posting
preferences, display options and team memberships. They are stored to provide you
functionality, to improve and personalize user experience, to communicate
with you, and to find and prevent abuse.</p>
<p>When registering or posting to our forums, we may share your username, email and/or
IP address with privacy-respecting third-parties in order to protect our website
from spambots, such as Spamhaus or Stop Forum Spam. By registering, you consent to
this sharing. The services we use may change at any time and without prior notice.
However, you may request this information from us at any time you desire. You may 
optionally provide profile data such as contact information, birthday, avatars,
signature or attachments to be shared with the public.</p>
<p>When accessing or using our forums, you are subject to the [https://forums.themanaworld.org/ucp.php?mode=privacy forum privacy policy]
in relation to phpBB software and phppBB&#39;s use of cookies.</p>
<p>The accounts created for the forums will be kept until termination, as defined by
the Terms of Service. Personal data may be deleted upon request, however forum
posts will be anonymized or pseudo-anonymized. Logs may be kept to assist us in
protecting other users from abusive behavior.</p>
<p>If you sign up for a The Mana World Team membership, do note that a different agreement may apply
to you.</p>
<h3 id="information-that-tmw-wiki-collects">Information that TMW Wiki collects</h3>
<p>The wiki does not allow edits from unregistered users. To create an account, you
need to provide a username, email and password which will be stored in a hashed
form, and it will automatically log the IP and timestamp of the registration.
Optionally, you may also provide your real name for attribution purposes.</p>
<p>You are also required to provide a biography of at least 200 characters, which is
public. The account creation is a manual process and will have manual review.</p>
<p>You may request by email to have your account terminated and the personal data
removed, which will also prompt anonymization or pseudo-anonymization of your username.</p>
<p>When contributing, you grant us a special license described at the footer of the
wiki website, or at the submission form. This license will cover the entirety of
your contribution, including edit messages, and shall take precedence and priority
over this Privacy Policy and the rights connected to it. The biography field is
also subject to this special license.</p>
<p>Several actions on the wiki are logged and these logs are often kept public. You
can see which logs are enabled in the Special pages. Several actions require a
special team membership or wiki authority, which may be subject to a different
policy.</p>
<h3 id="information-that-tmw-vault-collects">Information that TMW Vault collects</h3>
<p>The Mana World Vault collects registration date, IP, email, a hashed password, any
two factor authentication (2FA) secret, credentials for game accounts, ban state,
settings and variables from multiple worlds, to provide functionality to you.</p>
<p>In this context, a world is a game server, but it may have unique characteristics.</p>
<p>TMW Vault allows you to connect to worlds which may or may not be controlled by
The Mana World Team. If you decide to use TMW Vault to connect to a world, it will
share the variables scope and your Vault ID, but it will not share your email,
password, or 2FA secret.</p>
<p>Requesting termination of your Vault account implies the termination of all
connected sub-accounts and their related data. To avoid termination of a
sub-account, you may disconnect it from your Vault account prior to requesting
termination of your Vault account.</p>
<p>The data collected by TMW Vault is strictly used to identify, contact, or provide
authentication functionality for you.</p>
<h3 id="information-that-our-git-repositories-collect">Information that our git repositories collect</h3>
<p>The git repositories have their own privacy policies and terms of use. When
contributing to a The Mana World repository, you may be asked for your nickname
and/or a legal name for attribution. This attribution will be added to the git
history and cannot be removed. Rectification may be possible via the “.mailmap” file,
however, different git implementations may ignore this file, in which case the
data cannot be rectified.</p>
<p>Therefore, please be mindful on how you want to be attributed for git
contributions as it is a mostly irreversible process.</p>
<h3 id="information-that-our-irc-bot-collects">Information that our IRC Bot collects</h3>
<p>Our IRC bot uses Limnoria. You may create accounts with it, which will collect
usernames, passwords, hostmasks and settings. It provide its own controls for the
personal data it collects, which should be available at
[https://docs.limnoria.net/use/plugins/User.html Limnoria&#39;s documentation].</p>
<p>You do not need to create an account in order to use Limnoria. The data it
collects, such as messages sent to it, serve to prevent abuse and to protect
other users from misusing the bot.</p>
<p>Do note that anyone can bring an IRC bot to our channels, and we may, but are not required to
keep track of these bots in our channels.</p>
<p>All bots are subject to our rules and regulations.</p>
<h3 id="information-our-game-bots-collects">Information our Game bots collects</h3>
<p>Any user may write a game bot and connect it to our game. Said bot may collect
public data to provide its own functionality. We may, but are not required to
keep track of these bots.</p>
<p>Our game bots may collect public information shared with clients like your
nickname, and the time you were online (via access list protocol). They may also
collect other data to provide functionality, such as access lists and sales.</p>
<p>All bots are subject to our rules and regulations.</p>
<h3 id="information-our-game-servers-collect">Information our game servers collect</h3>
<p>Our game servers collect character data, like inventory, quest data, level,
experience, creation date, number of deaths, skill usage, and several others to
provide functionality. Character data is bound to the account and will be deleted
when the account is terminated.</p>
<p>Do note our servers share your online activity with others, and you cannot opt-out from
this. While Game Masters may be able to disguise their online activity, this is only acceptable for moderation purposes and not for regular gameplay as it would
compromise the functionality of the game.</p>
<p>Our servers may also optionally collect character information such as gender, partner (if married), party, guild, clan,
birthday, pincode, pets, homunculus, character names, and other data, also to
provide functionality to regular gameplay.</p>
<p>To create an account, you may use TMW Vault or register directly in a supported
game client. Direct registration may lead your personal data being saved without
the use of modern encryption or security measures, therefore, it is strongly
advised to use the vault instead. Accounts created with the vault use a token
instead of a password to communicate with the game server, which provide better
protection given its one-time nature. Do note most communications with the game
server happen over plain Transmission Control Protocol (TCP), which isn&#39;t
encrypted in transit.</p>
<p>Additionally, the game servers may or may not log the chat, which is deleted within
a week, and the game servers also log other actions such as trade logs for a few
months. Other logs, such as authentication logs, are kept for longer.
Chat log is hashed to SHA256 before being saved on Moubootaur Legends only.</p>
<p>The logs and game data may be used in an anonymous way for analytical purposes,
such as identifying trends, bugs, unused content and improve the game in overall.</p>
<p>Do note that game staff is subject to a different agreement than this privacy
policy, as most administrative or moderation actions are logged and made available
for the public.</p>
<p>Non Evol2-based servers do not support token-based authentication, and cannot
be used with TMW Vault as a consequence.</p>
<h2 id="public-data-and-user-generated-content-ugc">Public Data and User Generated Content (UGC)</h2>
<p>Information shared in a public manner may be collected by individuals not
affiliated with The Mana World Team, including bots. This includes User Generated
Content (UGC), which is available in most of our services and subject to
moderation.</p>
<p>Our responsibility limits to the scope of the services we provide. It does not
extend to individuals including bots which may have harvested the publicly available
data, such as the Internet Archive or our bots.</p>
<h2 id="cookies">Cookies</h2>
<p>Cookies are small files that a site or its service provider transfers to your
computer&#39;s hard drive through your Web browser (if you allow) that enables the
sites or service provider’s systems to recognize your browser and capture and
remember certain information.</p>
<p>We use cookies to understand and save your preferences for future visits, such as
to keep you logged in.</p>
<p>If you prefer, you can choose to have your computer warn you each time a cookie
is being sent, or you can choose to turn off all cookies via your browser
settings. Like most websites, if you turn your cookies off, some of our services
may not function properly.</p>
<h2 id="your-rights">Your rights</h2>
<p>You have the right to request copies of your personal data.
You have the right to request that we correct any information you believe is
inaccurate, if your request is deemed reasonable.
You have the right to request that we complete the information you believe
is incomplete.
You have the right to request that we erase your personal data, under certain
conditions.
You have the right to request that we restrict the processing of your personal
data, under certain conditions.
You have the right to object to our processing of your personal data, under
certain conditions.
You have the right to request that we transfer the data that we have collected to
another organization, or directly to you, under certain conditions.</p>
<p>To exercise any of these rights, you may need to prove account ownership.
Account ownership is defined by the ownership of the email associated to it.
Therefore, you must email [mailto:&#100;&#97;&#x74;&#x61;&#x40;&#x74;&#x68;&#x65;&#109;&#97;&#x6e;&#97;&#119;&#111;&#114;&#x6c;&#100;&#x2e;&#x6f;&#x72;&#103; &#100;&#97;&#x74;&#x61;&#x40;&#x74;&#x68;&#x65;&#109;&#97;&#x6e;&#97;&#119;&#111;&#114;&#x6c;&#100;&#x2e;&#x6f;&#x72;&#103;] to exercise your rights when
they&#39;re not made available on the public interfaces.</p>
<p>Should you lose access to your email account, we will be rendered unable to confirm
your identity and therefore, unable to provide you your rights.</p>
<p>We will aim to respond to your data requests within one month.</p>
<h2 id="childrens-information">Children&#39;s Information</h2>
<p>The Mana World services does not knowingly collect any Personal Identifiable
Information from children under the age of 13, nor provides service to them
without parental guidance, supervision or authorization.</p>
<p>If you think that your child provided this kind of information on our website, we
strongly encourage you to contact us immediately at [mailto:&#x64;&#97;&#116;&#97;&#x40;&#x74;&#104;&#x65;&#109;&#97;&#x6e;&#97;&#x77;&#x6f;&#x72;&#x6c;&#x64;&#x2e;&#x6f;&#x72;&#x67; &#x64;&#97;&#116;&#97;&#x40;&#x74;&#104;&#x65;&#109;&#97;&#x6e;&#97;&#x77;&#x6f;&#x72;&#x6c;&#x64;&#x2e;&#x6f;&#x72;&#x67;] and we
will do our best efforts to promptly remove such information from our records.</p>
<h2 id="changes-to-this-policy">Changes to this policy</h2>
<p>We may change this policy at any time and for any reason. A notice in game, on the
forums and on IRC will be given every time there is a modification.</p>
<h2 id="contacting-us">Contacting Us</h2>
<p>For legal inquiries, such as pertaining to this Privacy Policy, please use
[mailto:&#x6c;&#101;&#103;&#97;&#108;&#64;&#116;&#x68;&#x65;&#x6d;&#97;&#x6e;&#x61;&#119;&#111;&#114;&#x6c;&#x64;&#46;&#111;&#114;&#x67; &#x6c;&#101;&#103;&#97;&#108;&#64;&#116;&#x68;&#x65;&#x6d;&#97;&#x6e;&#x61;&#119;&#111;&#114;&#x6c;&#x64;&#46;&#111;&#114;&#x67;]</p>
<p>When otherwise unavailable in the user interface, you may contact us at
[mailto:&#x64;&#x61;&#x74;&#97;&#64;&#116;&#x68;&#101;&#x6d;&#97;&#110;&#x61;&#x77;&#x6f;&#114;&#108;&#x64;&#x2e;&#x6f;&#114;&#103; &#x64;&#x61;&#x74;&#97;&#64;&#116;&#x68;&#101;&#x6d;&#97;&#110;&#x61;&#x77;&#x6f;&#114;&#108;&#x64;&#x2e;&#x6f;&#114;&#103;]
to request a copy or the removal of your personal data, to exercise your right to
be forgotten, or to make requests under the GDPR act.</p>
<p>This Privacy Policy does not supersede the [/tos Terms of Use] and is subject to
it.</p>
<p>Do note that we do not provide legal advice.</p>


<span style="font-size:.8em"><p>In case of discrepancies between this document and the [https://policies.themanaworld.org Policies] website, the version that is present at [https://policies.themanaworld.org https://policies.themanaworld.org] shall be considered authoritative and prevail over this document.
Similarly, in case of discrepancies between translations of this document and the original English version, the latter shall prevail over the translation.</p>
</span>