Lore of Exile

Privacy Policy

Effective date: November 10, 2026

This Privacy Policy explains what personal information Lore of Exile (“we”, “us”) collects when you use our website at https://loreofexile.com, our game server accounts, our launcher and our Discord community, how we use it, who we share it with, and the choices you have. Lore of Exile is a free-to-play community server for the game Shaiya. We do not sell your personal information.

Questions or requests: support@loreofexile.com

1. Information we collect

Account details you give us: your username, your email address and your password. The password you use on this website is stored only as a salted hash (Argon2id), never in readable form. While the game server still uses its own older sign-in, the game’s account database also keeps the credentials it needs to let you log in to the game; we are moving the game to the new sign-in so that this copy can be removed.
Sign-in with Google or Microsoft (optional): if you choose “Continue with Google” or “Continue with Microsoft”, the provider tells us your account’s unique ID, your email address (and whether the provider has verified it) and your display name. We store only the provider’s unique ID and the email address as it was when you linked the account. We request only the basic “openid”, “email” and “profile” permissions. We do not access your Gmail, contacts, calendar, files or any other data in your Google or Microsoft account, and we never post or send anything on your behalf.
Security information: the IP address, browser/device type and time of your sign-ins, and security events such as sign-ins, failed attempts, password changes and two-step verification changes. We use this to keep accounts safe, to show you where you are signed in (Profile → Logins), and to block abuse.
Two-step verification: if you turn it on, we store your authenticator secret in encrypted form, your recovery codes as one-way hashes, and, if you add a passkey, its public key and the name you give it. We never receive your fingerprint, face or device PIN.
Game data: your characters, items, guild, points, kills and similar progress. Some of this (character name, level, kills, guild) is shown publicly in the rankings. The game server also records in-game chat and activity logs, which our staff may review to provide support, enforce the rules and detect cheating.
Discord link (optional): if you link your Discord account, we store your Discord user ID, the date you linked it and the character you chose as your main. Our Discord bot uses this to give you your roles. It does not read your private messages; it reads only a public announcements channel.
Donations: payments are processed by PayPal or Stripe. We receive confirmation that a payment was completed, its amount and a payment reference so we can credit your account. We never see or store your card number.
Emails: we send you service emails only: email verification, password reset, security notices and, for staff, admin invitations. We do not send marketing email. Emails are delivered through our email provider, Resend.
Human check: the login and sign-up forms use Cloudflare Turnstile to tell people from bots. Cloudflare receives your IP address and basic browser signals to decide this; we receive only the pass/fail result.
Server logs: our web servers record the IP address, requested page, time and browser type of each request, for security and troubleshooting.

2. Cookies

We use one essential cookie to keep you signed in. It is marked HTTP-only and, on the live site, secure. It expires after a short period of inactivity, or after up to 30 days if you choose “Keep me signed in”. We do not use advertising cookies, analytics or tracking cookies. Some page components (for example the Bootstrap library) are loaded from the jsDelivr content network, so that service can see your IP address when your browser fetches them.

3. How we use your information

to create and run your account, and to let you play;
to sign you in, to link accounts you choose to link, and to protect accounts (lockouts, rate limits, two-step verification);
to send the service emails described above;
to show rankings, run events and rewards, and to credit donations;
to provide support, moderate the community and enforce the rules, including banning cheaters and ban evasion;
to keep the service reliable and secure, and to meet legal obligations.

4. Information from Google and Microsoft

We use the information we receive from Google or Microsoft only to sign you in, to create or link your Lore of Exile account and to show the email address tied to it. We do not use it for advertising, we do not sell it, and we do not transfer it to others except as needed to provide these features or as required by law. Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can unlink a provider at any time under Profile → Two-Step → Linked accounts, and you can also remove our access from your Google or Microsoft account settings.

5. Who we share information with

We do not sell or rent your personal information. We share it only with the services that help us run Lore of Exile, and only as needed:

our hosting and network providers, which carry the website and game traffic;
Resend, which delivers our service emails;
Cloudflare, which runs the human check on the login and sign-up forms;
PayPal and Stripe, if you donate;
Google or Microsoft, if you sign in with them;
Discord, if you link your Discord account;
the jsDelivr network, which serves some page components;
authorities, if the law requires it or to protect our users and service.

Links on our pages to other sites (for example Discord and YouTube) lead to services with their own privacy policies.

6. How long we keep it

We keep your account and game data while your account exists. Sign-in sessions end when you sign out or they expire. Security logs are kept for as long as needed to protect accounts and the service. We may keep limited records longer where required, for example payment records for accounting, and ban records to prevent ban evasion.

7. Your choices and rights

You can change your password, see and end your sessions, set up two-step verification, and link or unlink Google, Microsoft and Discord from your profile.
You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and related data by emailing support@loreofexile.com from the email address on the account. We will reply and act within a reasonable time, except for records we must keep (see section 6).

8. Security

We protect information with an encrypted connection (HTTPS), hashed passwords, encrypted authenticator secrets, sign-in rate limits and optional two-step verification. Our administration tools require two-step verification. No system is perfectly secure, so please use a strong, unique password and keep your recovery codes safe.

9. Children

Lore of Exile is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

10. Where information is processed

Our servers and service providers may be located outside your country. By using the service you understand that your information may be processed there.

11. Changes to this policy

If we change this policy we will update the effective date above and, for important changes, tell you on the website.

12. Contact

Lore of Exile · support@loreofexile.com · https://loreofexile.com