Privacy Policy for Tales of Varden

Last Updated: August 10, 2026

1. Introduction

Welcome to Tales of Varden (we, our, or us). This policy explains how we collect and use personal information through our browser game, website, and related services.

2. Information We Collect

  • Account Data: username, email address, and securely hashed password.
  • Game Data: progression, inventory, guild data, and in-game actions.
  • Purchase Data: which Shop package you bought, the amount and currency, and the purchase date - see "Payment Information" below for how payment itself is handled.
  • Usage Data (Google Analytics): IP, browser/device details, visited pages, and gameplay duration.
  • Advertising Data (Meta/Facebook Pixel): your email address and internal account ID, sent to Meta in cryptographically hashed (SHA-256) form - never as plain text - plus standard browser/event data Meta's pixel collects automatically. See "Advertising and the Meta Pixel" below.
  • Rewarded-Ad Data: if you choose to press "Watch ad", our ad network receives your IP address, browser and device details, and the page you came from - directly from your browser, not from us. See "Advertising" below.

3. How We Use Information

  • Account creation and authentication.
  • Saving progress and fair play protection.
  • Improving gameplay balance, performance, and stability.
  • Handling support requests.
  • Measuring and improving the performance of our advertising campaigns.

4. Cookies and Tracking Technologies

We use essential cookies to keep you logged in and provide core features. Analytics cookies (Google Analytics) and the Meta Pixel (see below) help us understand performance, player behavior, and advertising effectiveness. Advertising cookies set by Google are covered in the next section.

You can change or withdraw your choice at any time here: .

5. Advertising (Rewarded Ads)

The game shows optional rewarded ads. These are never forced on you: an ad plays only when you press a "Watch ad" button yourself, in exchange for an in-game reward (for example clearing a dungeon cooldown, rerolling the Trader's offers, or refilling energy). You can play the entire game without ever watching one, and nothing is withheld from players who don't.

Rewarded ads are currently delivered by Monetag through its Direct Link format. Pressing "Watch ad" opens an advertiser's page in a new browser tab, while the game stays open in the tab you came from. From that point Monetag and its advertising partners receive the request directly from your browser and may set or read cookies and similar identifiers, and process your IP address, approximate location derived from it, device and browser information, and the page you arrived from. They use this to select the offer, cap repeats, and detect invalid traffic. We do not send them your account name, e-mail address, or purchase history.

Google AdSense. The site carries a Google AdSense site-ownership tag and a matching ads.txt entry while our application is under review. No AdSense ad code runs on the site today and Google serves no ads here. If rewarded ads move to Google AdSense (Google Ireland Limited / Google LLC), we will update this policy before that happens.

Personalised vs non-personalised ads. If you are in the EEA, the UK or Switzerland, we ask for your consent through a certified consent management platform before any advertising cookie is used for personalisation. If you decline, you will still be able to watch rewarded ads, but they will be non-personalised - selected from general context rather than from a profile about you. You can change or withdraw your choice at any time through the consent banner.

On our side we store only what is needed to grant the reward and to keep the daily limits honest: which reward you watched an ad for, the UTC day, a single-use token, and whether it was claimed. That record contains no ad content and no advertising identifier.

You can read Monetag's own privacy policy at monetag.com/privacy-policy. You can review and adjust Google's use of your data at My Ad Center, and read how Google handles data in advertising at policies.google.com/technologies/partner-sites.

6. Payment Information

When you make a purchase (Supporter tiers, Varden Coins, or other Shop packages), payment is handled entirely by our payment processor, Stripe, Inc. You enter your card or other payment details directly with Stripe on their secure checkout page - we never receive, see, or store your full card number, CVC, or billing credentials.

What we do store on our own systems: the package purchased, the amount charged, the currency, the purchase date, Stripe's checkout session identifier, and whether the purchase was fulfilled. We use this only to grant your purchased rewards, prevent duplicate/fraudulent redemptions, and to help you if you contact support about a purchase. See Stripe's own privacy policy at stripe.com/privacy for how they handle your payment data.

7. Marketing measurement (Meta Pixel)

We use the Meta (Facebook) Pixel to measure how well our ads perform and to show you more relevant ads on Meta's platforms (Facebook, Instagram). The Pixel loads on every page and records standard browsing events (page views, purchases) tied to a browser cookie.

We also use Meta's Advanced Matching feature: if you are logged in, your email address and internal account ID are hashed (SHA-256) in your browser and sent to Meta so it can match you to a Meta account, even across devices. Meta receives only the hashed values, never your email in plain text. We do not send sensitive information (financial, health, or government ID data) through the Pixel.

You can opt out of personalized advertising based on this data through your Meta ad settings, or block the Pixel with a browser ad-blocker/tracker-blocking extension. See Meta's own privacy policy at facebook.com/policy.php for how Meta itself processes this data.

8. Third-Party Services

We use Stripe to process payments, Monetag to serve the optional rewarded ads, and the Meta Pixel for marketing measurement (all described above), and may include links to services like Discord and YouTube. Please review their privacy policies when using those services.

9. Data Security

We apply reasonable safeguards against unauthorized access and loss. Passwords are hashed and never stored as plain text.

10. Your Rights (GDPR)

EEA users can request access, correction, or deletion of personal data, including opting out of Meta Pixel advertising data as described above. Contact us using the address below to exercise these rights.

11. Contact

Email: talesofvarden@proton.me