Legal

Privacy Policy

What data this project collects when you browse, register, and play; what it is used for; and how to get it corrected or deleted.

Updated August 2026

01Privacy at a glance

This page explains what happens to your personal data when you use Tree of Savior Classic. The sections below go into detail; this is the short version.

We collect data in two ways:

  • Directly from you, when you register an account, sign in through Discord or Google, buy TP, or contact us.
  • Automatically, as technical data your browser sends with every request (IP address, browser, operating system, request time), kept in server logs.

We use this data to run the website and the game server, keep both secure, and provide the features you ask for. We do not sell your data, and we do not use it for advertising.

02Who is responsible

The identity and direct contact details of the person responsible for this data are still pending and will be published on the Legal Notice page before they are needed. Until then, requests about your data reach us through the community channels listed on this site.

03Server logs and hosting

When you visit the website, our hosting infrastructure (Vercel) automatically records the technical data your browser transmits: IP address, browser type and version, operating system, referrer, and the time of the request. We use these logs to keep the site running and to detect misuse, and for nothing else. They are not merged with your account data.

04Accounts and sign-in

If you register with an email address and password, we store both; the password only in hashed form. If you sign in through Discord or Google instead, the provider sends us your basic profile data (a name, an email address, an avatar), and we store that.

We use this data to manage your master account and the game accounts linked to it, and for account security. Nothing more.

05Game data and rankings

Playing on Yufa generates gameplay data: characters, classes, levels, guilds, items, and the rest of what a game server has to remember to be a game server. We process it to run the game.

Some of it is public. The rankings show character names, classes, levels, and guilds. They never show account names, email addresses, or real names. If you want a character out of the public rankings, contact us.

06TP purchases

When you buy TP, we store the order: what you bought, when, for which game account, and the payment status. We need this to deliver the TP and to sort out disputes.

The payment itself is processed by MercadoPago under its own privacy policy. Your card number and banking details go to MercadoPago, not to us; we never see them.

07Cookies

We only use technically necessary cookies: the session cookie that keeps you signed in, and what the sign-in flow itself requires. No analytics, no marketing, no tracking. There is no cookie banner because there is nothing to consent to.

08External platforms

Signing in through Discord or Google means those providers process data under their own privacy policies. The same goes for the community Discord server: what you post there is handled by Discord, possibly outside your country.

09Data security

Traffic to the website is TLS-encrypted, passwords are stored hashed, and access to the databases is restricted to the people who run the project. Still, no transmission over the internet is completely safe, and we will not pretend otherwise.

10How long we keep data

Account and game data stays stored while your account exists. You can ask for your account to be deleted at any time. Records we need for fraud prevention, moderation, or legal obligations (for example, payment records) may be kept for a limited period after deletion, and no longer than necessary.

11Your rights

You can ask us, at any time:

  • what data we hold about you (access),
  • to fix data that is wrong (correction),
  • to delete your account and its data (erasure),
  • to stop processing your data in a certain way (objection).

Depending on where you live, data-protection law may give you further rights, including the right to complain to a supervisory authority. Those rights are unaffected by anything on this page.

12Protection of minors

The services are not directed at children under 16, and we do not knowingly collect their data. If we learn that we hold data on a child without the necessary guardian consent, we delete it.

13Changes to this policy

We will update this policy when the services or the law change. Material changes that affect your rights will be announced on the website; the current version always applies.