What we keep, and why

Voxland is made by the Voxland team (“we”). This policy covers the website at voxland.lol, the game at play.voxland.lol, and the account you use on both. Questions about it, or about anything we keep, go to hello@voxland.lol.

• Your account. If you register: your account name, your email address if you give one, and your password, which is stored only as a one-way hash we can't read back. Playing as a guest makes an account with none of these.
• Two-step sign-in, if you turn it on. Your authenticator's secret, stored encrypted, and your recovery codes, stored hashed. For passkeys, the public key your device gives us and the name you choose for it. Your fingerprint, face or PIN never leave your device.
• Your sign-ins. To keep you signed in, a session token (stored hashed), whether it's the website or the game, your browser's user-agent string, and when it was made and last used. You can see and end them on your account page.
• Your heroes and what they do. Their names, looks, levels, stats, skills, items, zeny and where they stand; their quests, pets and horses; your guild, friends, claimed land and account storage; and letters you send and receive, until they're thrown away.
• Chat passes through the game server to the players it's meant for. It isn't stored.
• Your network address is used for a moment, in the server's memory only, to limit how many sign-in attempts and connections come from one place. It isn't written to our database.
• Server logs note when heroes enter and leave the world, and errors, so we can keep the game running and fix it. They may name a hero.

There is one cookie, voxland_session, set when you sign in on the website. It keeps you signed in for up to 30 days, is sent only to the account service, and can't be read by scripts. The game keeps your settings (like a folded-up window) in your browser's own storage. There are no analytics, advertising or tracking cookies, and no third-party scripts.

Your account and heroes live in the game's database on a server we rent. The website is served by Cloudflare, which handles each visit to deliver the pages and keeps its own short-lived logs. Email to hello@voxland.lol is forwarded by Cloudflare too. We don't sell or share what we keep with anyone else.

• Your account and heroes: until you delete the account.
• A website sign-in: until you sign out, or after 30 days without use.
• A game sign-in on a registered account: until you sign out, or after 180 days without use.
• A guest account that never made a hero: 7 days.
• Letters: until the hero they're for throws them away.

On your account page you can change your email and password, turn two-step sign-in on and off, add and remove passkeys, end any sign-in, and delete your account. Deleting it removes the account, its heroes, their mail, friends and storage, and frees their guild places and land, for good. For a copy of what we keep about you, or anything else, write to hello@voxland.lol.

Voxland isn't meant for children under 13, and we don't knowingly keep their information. If you think a child has made an account, write to hello@voxland.lol and we'll delete it.

If what we keep or why changes, we'll update this page and its date. If it's a change you'd want to know about, we'll also say so in the game.