Information we collect
Our services may collect standard traffic information in log files, such as your Internet Protocol (IP) address, browser or client type, Internet Service Provider (ISP), date and time stamp, and requested resource/page; Both in order to prevent our services from Denial of Service (DoS) attacks, to find and prevent fraud, to analyze trends, and to better administer and maintain our services.
Some of our services which are used in conjunction with other service, such as IRC Bots used in conjunction with IRC, or game bots used in conjunction of the game, may further log timestamps for the last seen of nicknames or hold private messages for users. Typically, these will be using the same permission scopes which a regular user of the IRC Network and/or game would be have access to. Typically, these sub-services do not enjoy any additional data collection privileges apart from being optionally exempt from some anti-flooding policies and being under our direct control in case of the need for assistance regarding their usage.
Information TMW Forums collect
To create an account, you need to provide an username, email, and a password (which will be stored in a hashed form). The forum uses standard TLS to protect your information from Man In The Middle (MITM) attacks.
Creating an account will prompt the creation of defaults and storing of further personal data automatically, such as registration date and IP, logs on the actions performed within the forums, language, forum theme, timezone, date format, posting preferences, display options and team memberships. They are stored to provide you functionality, to improve and personalize your user experience, to communicate with you, and to find and prevent fraud.
When registering or posting in our forums, we may share your username, email and/or IP address with privacy-respecting third-parties in order to protect our website from spambots, such as Spamhaus or Stop Forum Spam. By registering, you consent in this sharing. The services we use may change at any time and without prior notice; However, you may request us this information at any time you desire.
You may optionally provide profile data, such as birthday, contact, avatars, signature, and attachments, to be shared with the public.
The accounts created at the forums will be kept until termination, as defined by the Terms of Service. Personal data may be deleted upon request, however, forum posts will be anonymized or pseudo-anonymized. Logs may be kept to protect the rights of the other users from the forum and the legit interests of the board administration, such as to find and prevent abuse or activity connected to abuse.
If you sign up for a team membership, do note that a different agreement may apply to you.
Information TMW Wiki collects
The wiki does not allow edits from unregistered users. To create an account, you need to provide an email, username, a password which will be stored in a hashed form, and it will automatically log the IP and timestamp of the registration. Optionally, you may also provide your real name for attribution purposes.
You are also required to provide a biography of at least 200 characters, which is public. The account creation is a manual process and will have manual review.
You may request by email to have your account terminated and the personal data removed, which will prompt anonymization or pseudo-anonymization of your username.
Several actions on the wiki are logged and these logs are often kept public. You can see which logs are enabled in the Special pages. Several actions require a special team membership or wiki authority, which may be ruled by a different agreement than this one.
Information TMW Vault collects
The Mana World Vault collects registration date, IP, email, a hashed password, any two factor authentication (2FA) secret, credentials for game accounts, ban state, settings and variables from multiple worlds, to provide functionality to you.
In this context, a world is a game server, but it may have unique characteristics.
TMW Vault allows you to connect to worlds which may or may not be controlled by The Mana World Team. If you decide to use TMW Vault to connect to a world, it will share the variables scope and your Vault ID, but it will not share your email, password, or 2FA secret.
Requesting your Vault account termination will grant us an authorization to also terminate any sub-account connected to the Vault on your behalf. Therefore, you do not need to send GDPR requests to each world you used TMW Vault to connect to.
The data collected by TMW Vault is strictly used to identify, contact, or provide authentication functionality for you.
Information our git repositories collects
Therefore, please be mindful on how you want to be attributed for git contributions as it is a mostly irreversible process.
Information our IRC Bot collect
Our IRC bot uses Limnoria. You may create accounts with it, which will collect usernames, passwords, hostmasks and settings. It provide its own controls for the personal data it collects, which should be available at Limnoria's documentation.
You do not need to create an account in order to use Limnoria. The data it collects, such as messages sent to it, serve to prevent abuse, and to protect other users from misusing the bot.
Do note that anyone can bring an IRC bot, and we may, but are not required to keep track of these bots in our channels.
Information our Game bots collects
Any user may write a game bot and connect it to our game. Said bot may collect public data to provide its own functionality. We may, but are not required to keep track of these bots.
Our game bots may collect public information shared with clients like your nickname, and the time you were online (via access list protocol). They may also collect other data to provide functionality, such as access lists and sales.
Information our game servers collect
Our Evol2-based servers collect character data, like inventory, quest data, level, experience, creation date, number of deaths, skill usage, and several others to provide functionality. Character data is bound to the account and will be deleted when the account is terminated.
Do note it shares your online activity with others, and you cannot opt-out from this. While Game Masters may be able to disguise their online activity, this compromises the functionality of the game, being acceptable for moderation purposes but not for regular gameplay.
It may also optionally collect gender, partner (if married), party, guild, clan, birthday, pincode, pets, homunculus, character names, and other data, also to provide functionality and regular gameplay.
To create an account, you may use TMW Vault or register directly in a supported game client. Direct registration may lead your personal data to be saved without the use of modern encryption or security measures, therefore, it is strongly advised to use the vault instead. Accounts created with the vault use a token instead of a password to communicate with the game server, which provide better protection given its one-time nature. Do note all communication with the game server happens over plain HTTP.
Additionally, the game servers may or may not log chat, which is deleted within a week, and the game servers also log other actions such as trade logs for a few months. Other logs, such as authentication logs, are kept for longer.
Non evol2-based servers does not support token-based authentication, and cannot be used with TMW Vault as a consequence.
Public Data and User Generated Content (UGC)
Information shared in a public manner may be collected by individuals not affiliated with The Mana World Team, including bots. This includes User Generated Content (UGC), which is available in most of our services and subject to moderation.
Our responsibility limits to the scope of the services we provide. It does not extend to individuals including bots which may have harvested the public available data, such as the Internet Archive or our bots.
Cookies are small files that a site or its service provider transfers to your computers hard drive through your Web browser (if you allow) that enables the sites or service providers systems to recognize your browser and capture and remember certain information.
If you prefer, you can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies via your browser settings. Like most websites, if you turn your cookies off, some of our services may not function properly.
You can also opt out of all tracking for sites besides themanaworld.org.
You have the right to request copies of your personal data. You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete. You have the right to request that we erase your personal data, under certain conditions. You have the right to request that we restrict the processing of your personal data, also under certain conditions. You have the right to object to our processing of your personal data, under certain conditions. You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
To exercise any of these rights, you may need to prove account ownership. Account ownership is defined by the ownership of the email associated to it. Therefore, you must email email@example.com to exercise your rights when they're not made available on the public interfaces.
Shall you lose access to your email account, we will be rendered unable to confirm your identity and therefore, unable to provide you your rights.
We will aim to respond to your data requests within one month.
The Mana World services does not knowingly collect any Personal Identifiable Information from children under the age of 13, nor provides service to them without parental guidance, supervision or authorization.
If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.
For data requests, or to exercise a right which is not available on the interface, please use instead firstname.lastname@example.org
Do note that we do not provide legal advise.