Your data and Thornvale

Last updated 21 October 2026

Who we are

Thornvale (thornvaleonline.com) is run by Dawid Mlynarczyk in the United Kingdom, who is responsible for your personal data. For anything about your data, email support@thornvaleonline.com.

What we collect

Your account: your email address and password. Your password is stored only in scrambled (hashed) form by our account provider. We never see it.
Your characters: names, vocation, level, experience, items, gold, quests and other game progress, and which account they belong to.
Technical data: your IP address is used briefly to block repeated wrong passwords, and our server log notes when a character joins or leaves the game.
Emails you send us, if you contact support.

We don't store in-game chat, and we don't use advertising or analytics trackers.

Why we use it

To run your account and save your progress, so we can provide the game you signed up for.
To keep the game fair and secure, such as stopping password guessing and enforcing the rules. This is in our legitimate interest and yours.
To email you about your account, such as password resets, and important news about the game. You can ask us to stop non-essential emails at any time.
To show public highscores: your character's name, vocation and level can appear on the highscores page. Your email is never shown.

Who helps us

We use these services to run Thornvale. They only handle your data on our behalf:

Render: hosts the website and game server (Frankfurt, Germany).
Supabase: stores accounts and characters and sends account emails (Frankfurt, Germany).
Google Fonts: provides the website's fonts, so your browser connects to Google, which sees your IP address.

We don't sell your data or share it with anyone else, unless the law requires it.

Your browser

The game keeps your sign-in, settings and any offline characters in your browser's storage on your device. This is needed for the game to work. We don't use cookies for advertising or tracking.

How long we keep it

We keep your account and characters while your account exists. If you ask us to delete your account, we delete it with its characters and their backups. Server logs are kept only for a short time.

Age

You must be at least 13 years old to create an account.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to stop using it for a particular purpose. Email support@thornvaleonline.com and we'll reply within one month. If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Changes

If we change this policy, we'll update this page and the date at the top. Big changes will also be posted in the news.