Privacy Policy

This privacy policy describes how Soverance Studios ("Soverance", "we", "us", or "our") collects, uses, and protects your information across all of our products and services. This policy covers three products: the Soverance Studios website at soverance.com, the Vanalytics web platform at vanalytics.soverance.com, and the video game Ethereal Legends.

Ethereal Legends is a single-player offline game with no internet connectivity, no user accounts, and no data collection by Soverance. The game is purchased and distributed through Steam, and Steam's own privacy policy governs any data collected during the purchase transaction or through the Steam platform (such as payment information or playtime tracking). Soverance does not receive any personal data from Steam related to your purchase or gameplay.

When you create an account on soverance.com, we collect your email address and username. Your password is hashed using BCrypt before storage and is never stored in plaintext. If you authenticate via SAML single sign-on through an external identity provider, we store the provider's identifier and your external user ID. We also store your account role and timestamps for when your account was created and last modified.

When you log in, we set a single authentication session cookie that lasts for seven days. This cookie is HttpOnly (not accessible to JavaScript), Secure (transmitted only over HTTPS), and uses a SameSite=Lax policy. We do not set any cookies for visitors who are not logged in. We do not use analytics cookies, tracking cookies, or any third-party cookies.

If you participate in the Vanalytics forum, your posts, threads, file attachments, and votes are stored and associated with your user account. File attachments are stored on our server infrastructure.

We do not use any third-party analytics services such as Google Analytics. We do not use tracking pixels, beacons, behavioral tracking, browser fingerprinting, or advertising scripts of any kind.

Vanalytics collects the same account information as soverance.com (email, username, hashed password), plus an API key used by the Windower addon to authenticate sync requests. Your API key is hashed before storage. Authentication on the Vanalytics web platform uses JWT tokens stored in your browser's local storage rather than cookies.

The Windower addon syncs your character data to Vanalytics approximately every 15 seconds while running. This includes your character name, server, race, gender, active job, sub-job, all job levels, job points, crafting points, master level, item level, current and maximum HP/MP, linkshell name, nation, title, equipped gear across all 16 equipment slots, all 10 crafting skills with levels and ranks, merit point allocations, and character appearance model IDs.

The addon also syncs your inventory data across all bags (Inventory, Safe, Storage, Wardrobe, Locker, Satchel, Sack, and Case), including item quantities and a history of inventory changes. Your macro book contents (up to 20 books with names, icons, and command lines) are synced for use with the web-based macro editor.

Session and event data is collected during gameplay, including play session start and stop times, your current zone, and in-game events parsed from the chat log. These events include combat data (damage, healing, experience gained, ability names), economy data (item drops, auction house sales, bazaar sales), and the names of sources and targets involved. Auction house sale records and bazaar listings, including seller and buyer character names, may also be collected.

Character profiles on Vanalytics are private by default. You can choose to make your profile public, which will expose your character name, server, race, jobs, equipment, and crafting skills to anyone with the profile URL.

All sync traffic between the addon and our servers uses HTTPS. Unauthenticated requests are rejected, and rate limits are enforced to prevent abuse.

We use your data to provide and operate our services: to display your character data, inventory, macros, and session analytics back to you, and to enable Vanalytics forum participation and community features. Economy data from individual transactions is used to generate aggregate market analytics such as price history and trends. We do not sell your data to anyone. We do not use your data for advertising. We do not share your data with third parties except as necessary to operate the service through our cloud hosting infrastructure.

Your data is stored in SQL Server databases hosted on Microsoft Azure. All passwords and API keys are hashed before storage. Authentication cookies use HttpOnly and Secure flags. All data transmission between your browser or the Windower addon and our servers uses HTTPS. We take reasonable measures to protect your data, but no system is perfectly secure, and we cannot guarantee absolute security.

Your account data, character data, inventory history, session data, and macro data are retained as long as your account exists. You can request account deletion at any time by emailing [email protected]. Upon deletion, your account credentials, character data, inventory history, session data, and macro data will be removed. Vanalytics forum posts may be anonymized (author attribution removed) rather than fully deleted in order to preserve thread continuity for other participants. Economy data such as auction house and bazaar records may be retained in anonymized form to support aggregate market analytics.

Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

Steam handles the purchase, payment, and distribution of Ethereal Legends and is governed by its own privacy policy. Microsoft Azure provides the cloud hosting infrastructure for soverance.com and Vanalytics. We do not use any third-party analytics, advertising, or tracking services.

We may update this privacy policy from time to time. The effective date at the top of this page will be updated when changes are made. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

If you have questions about this privacy policy or would like to request deletion of your data, please contact us at [email protected].