Privacy policy

Last updated: September 12, 2026.

This notice explains how Eddeen uses personal information on the website and in the game. It is a notice, not a request for blanket consent.

The short version

• We use account and game information to let you sign in, save your progress and deliver purchases.
• Other players can see your character information and the messages you send to them. Keep private details out of chat.
• You can ask to see, correct or delete your information.
• You must be at least 13 to play. Players under 18 need a parent or legal guardian's permission.

1. Who is responsible

Paulo Coutinho, an individual based in Brazil, is responsible for deciding how Eddeen uses personal data (the data controller). Contact [email protected] for privacy questions, requests or concerns about a child. You can also use our contact page.

2. Information we process

• Account details: the name, email, sign-in identifiers and profile details you provide; a protected password hash; account status, language, time zone and security or recovery records. Optional fields may include a nickname and avatar. Billing or contact features may ask for a phone number, tax identifier or address when needed.
• Game data: account and character identifiers, character names, worlds, vocation, level, progress, inventory and other saved game state, along with login and connection information.
• Messages and support: text you send through game chat, contact forms, email or reporting tools, and information needed to investigate a report or answer you. Delivering a chat message involves processing it; this does not mean every conversation is permanently archived.
• Purchases: orders, amounts, currencies, subscription status, transaction references, payment confirmations, refunds and billing information. Payment providers process payment credentials through their own checkout. Do not send card details in chat or to support.
• Technical and safety data: IP addresses, request times, session identifiers, device or browser information sent with requests, errors and records of security or account activity.
• Optional communications and measurement: newsletter signup and confirmation details, cookie choices and, when analytics is allowed, banner views and clicks linked to a visitor identifier.

Most information comes from you or from using the service. Payment providers send transaction updates, and other players may send reports involving you. The game chat has no file attachments. The website does allow an avatar image, which is resized for use on the account. Do not upload someone else's photo without permission or include private details in an image.

We do not ask for sensitive information such as health details, religious beliefs or biometric identification to play. Avoid sharing these in messages or support requests unless genuinely needed for your request.

3. Why we use it and our legal grounds

• Providing the service: account access, saved progress, chat delivery, purchases and related support are used to perform our agreement with you or take steps you request before it.
• Legal duties: necessary transaction records, responses to valid legal demands and legally required safety measures are processed to meet applicable obligations.
• Safety and reliable operation: proportionate fraud prevention, troubleshooting, abuse investigation and protection of players may rely on legitimate interests, after considering necessity and your rights. These interests do not override a child's best interests.
• Your choice: newsletter messages and optional analytics rely on consent where required. You can withdraw it without losing ordinary game access. Withdrawal does not make earlier lawful processing unlawful.
• Legal claims: relevant evidence may be retained or used to establish, exercise or defend rights, on the grounds permitted by applicable law.

We use the legal basis that fits each purpose under Brazil's LGPD and, where applicable, the GDPR. We do not treat accepting the terms as permission for every use of data. If a required account detail is missing, we may be unable to provide that feature; optional choices are identified separately.

4. What other people can see

Public character pages and search results show game details such as character name, vocation, level, world and last login. They do not display your sign-in email, password or billing details. A character's game image is not proof of the player's identity.

Chat messages are visible to their intended recipients or channel audience. Reports can be reviewed by authorized staff. Recipients can copy or share messages, so do not use chat for secrets. Ask an adult for help if someone pressures you to share private information.

5. Who receives information

Access is limited to people who need it to operate Eddeen or address a request. Hosting, storage, email and technical service providers may process necessary data for us. Payment providers and app stores receive the information needed to handle purchases and may also have their own legal duties and privacy notices.

We may disclose relevant information to competent authorities when legally required, or where lawfully necessary to protect someone, address fraud or defend a legal claim. We do not sell personal data. We do not use children's or teenagers' profiles for targeted commercial advertising. Contact us for information about the providers involved in your account or purchase.

6. Processing outside your country

Eddeen is operated from Brazil. Depending on the service provider used, hosting, payment or support processing may take place in another country. A foreign provider's involvement is not itself permission to transfer data without legal protection.

Any restricted international transfer must have a valid mechanism under the law that applies, such as an adequacy decision or approved contractual safeguards. You can contact us to ask which countries and recipients are involved in your data and for information about the applicable safeguards, including a copy where available. Simply using Eddeen is not consent to unrestricted international transfers.

7. How long information is kept

Account and saved game data are kept while needed to provide your account. Deleting an account removes its characters and game progress, clears its profile and saved addresses, and revokes its sign-in access. This does not instantly erase every related record held for a separate lawful reason.

Purchase and payment records may remain for applicable tax, accounting, dispute and legal limitation periods. Support messages and safety evidence are kept only as needed to resolve the matter and address related legal or safety needs. Technical records are subject to the service's retention schedules. A preservation duty or active dispute may require relevant records to be kept longer, with restricted use.

Newsletter data is used until you unsubscribe or the list is closed; minimal records may remain to respect your withdrawal or demonstrate consent. If information remains in backup copies, it must be restricted until those copies are replaced or deleted, and must not be restored for ordinary use after a valid deletion request. Once information is no longer needed and no lawful retention reason remains, it must be deleted or genuinely anonymized. Ask us for the retention details applicable to your data.

8. Cookies and newsletters

Necessary cookies support sign-in, form security and notices. Preference cookies remember permitted choices. Optional banner analytics counts views and clicks using a visitor identifier when you allow analytics. You can refuse optional categories or change your choice through cookie settings. See the Cookie Policy for details.

Newsletter signup uses email confirmation. You can unsubscribe through the link in a newsletter or contact us. Essential account, security and purchase messages are separate from newsletter subscriptions.

9. Young players

Eddeen's minimum age is 13. Under-13s must not create accounts or play. Players aged 13 to 17 need a parent or legal guardian's permission under the Terms of Use. Contact us if you believe an account belongs to an under-13 child or was created without required permission, so we can investigate, restrict access and address the data.

Children's and teenagers' best interests must guide decisions about their data. Where GDPR Article 8 applies to consent for an online service offered directly to a child, the threshold is 16 unless the relevant country lowers it, never below 13. Below the applicable threshold, the required guardian authorization must be obtained and reasonably verified. That consent rule is not a universal minimum age to play and does not replace local contract or child-safety rules.

A parent or guardian may ask for help exercising a child's rights. We may need proportionate proof of authority and will also consider the young person's rights, safety and best interests. We do not require public disclosure of a child's age, real name or contact information.

10. Your choices and rights

Depending on the law that applies, you can ask for confirmation and access, correction, deletion, anonymization or restriction, information about sharing, and portability where provided by law. You can withdraw consent and object to processing in the circumstances allowed by law. You can request review of decisions based solely on automated processing where the law grants that right, and can appeal a game penalty through our contact email.

Use your account controls or email [email protected]. We may ask for the minimum information needed to verify you or your authority to act for someone else. Never send your password or full payment credentials. Requests are normally free; any lawful exception must be explained.

Under the LGPD, confirmation and access can be provided in a simplified form immediately, or as a complete statement within 15 days, subject to applicable rules. Where the GDPR applies, the usual response period is one month; a permitted extension of up to two further months must be explained within the first month. Other requests follow the deadlines that apply to them. If we cannot fully honor a request, we will explain the legal reason.

You can complain to Brazil's ANPD, an applicable consumer protection body, or your competent data protection authority. Where the GDPR applies, this includes the authority in the place of your habitual residence, work or alleged infringement.

11. Security and changes

We use password hashing, access controls and other technical and organizational measures appropriate to the data and risks. No online service can promise absolute security. We must notify affected people and authorities of qualifying incidents as required by applicable law.

We will update the date when this notice changes and give clear notice of important changes. If a new use requires consent, we must obtain it before that use begins. Contact us if any part is unclear; we can help explain it.