Privacy policy

Vimrealm collects as little as it can. You can play the free chapters without an account, and we never sell your data or show ads.

Last updated: 29 October 2026

Who is responsible for your data

The controller of your personal data under the EU General Data Protection Regulation (GDPR) is:

Write to contact@vimrealm.com with any question about your data or to use any of the rights below. We have not appointed a data protection officer.

Playing the free chapters

The free game needs no account. Your progress (stars, best keystroke counts, which introductions you have seen) and settings such as sound are saved in your own browser's storage under vimrealm-save-v1. It stays on your device; we never receive it.

Visit statistics

We count page visits with Vercel Web Analytics. It sets no cookies and stores nothing on your device. To tell visits apart it uses a hash of the request that is discarded after 24 hours. We see totals such as page views, referring sites, country, browser and device type, not individuals.

Legal basis: our legitimate interest in knowing how many people read the site and where they come from (Art. 6(1)(f) GDPR).

Game statistics

On vimrealm.com the game reports how far players get, so we can see which quests are too hard and where players turn back. We use PostHog, hosted in its EU cloud in Germany, reached through our own domain. It records:

• page views and when you leave a page, with the browser, device type and an approximate location (country and city). PostHog works out the location from your IP address and then discards the address instead of storing it.
• game events such as a quest started or completed, the chapter, stars and keystroke counts, whether you opened the paywall or started a checkout, and whether you unlocked all quests

It never records what you type, your email address or your name, and we have turned off session recording and automatic click tracking.

Whether it can recognise you on your next visit is up to you. The game asks once: "May the Sage remember this browser between visits?"

• Until you answer, or if you choose "No thanks": the random visitor ID lives only in the page's memory and is forgotten when you close or reload the tab. Nothing is stored on your device. Legal basis: our legitimate interest in improving the game (Art. 6(1)(f) GDPR).
• If you choose "Remember me": the ID is saved in your browser's storage, so your visits link up. Legal basis: your consent (Art. 6(1)(a) GDPR).

You can change your answer at any time here. Withdrawing consent does not affect what was collected before.

You can also object to game statistics altogether by writing to us. The game works the same if a browser extension blocks them.

Buying the full version

Payments are handled by Stripe. On Stripe's checkout page you enter your email, card or other payment details and your billing country, which Stripe needs to calculate tax. Your card details go to Stripe and never reach us.

From Stripe we receive and keep your email address, your Stripe customer ID, the IDs of the checkout and the payment, the amount and currency, whether the purchase is paid or refunded, and when it happened. Your email address becomes your Vimrealm account, and we send it a welcome letter with a sign-in link.

Stripe also processes payment data as an independent controller, for example to prevent fraud and to meet its own legal duties. See the Stripe Privacy Policy.

Legal basis: performing our contract with you (Art. 6(1)(b) GDPR), and keeping sales records as Polish tax and accounting law requires (Art. 6(1)(c) GDPR).

Your account and cloud saves

Accounts exist only for buyers. For each account we store:

• your email address
• your cloud save: the same stars, best keystroke counts and seen introductions that the game keeps in your browser
• sign-in links and sessions, stored only as one-way hashes. A sign-in link works once and expires after 15 minutes (24 hours for the one in the welcome letter).

Signing in sets one cookie, vr_session. It is strictly necessary to keep you signed in, is only sent to our API, cannot be read by scripts, and lasts 180 days. Each time you open the game while signed in, it is renewed for another 180 days.

Legal basis: performing our contract with you (Art. 6(1)(b) GDPR).

Writing to us

The in-game Contact form sends us your topic and message, and your email address if you give one so we can reply. If you leave "Include my quest and browser info" ticked, it also sends the current quest and screen, your star count, your browser's user-agent string and the window size. For payment questions it adds the site address you played on and how your return from the checkout went, including the Stripe checkout ID. If you are signed in, the message is linked to your account.

Messages are stored in our database and forwarded to our mailbox. To limit spam, we store a one-way hash of your IP address with the message and delete it after 24 hours. Emails you send to contact@vimrealm.com reach the same mailbox.

Legal basis: our legitimate interest in answering you and fixing what you report (Art. 6(1)(f) GDPR), or steps related to our contract when you are a buyer (Art. 6(1)(b) GDPR).

Who processes your data for us

We use these service providers. Each processes data only on our instructions, under a data processing agreement.

Some of these companies are based in the United States, so your data may be transferred outside the European Economic Area. Those transfers are protected by the EU–US Data Privacy Framework where the provider is certified under it, and otherwise by the European Commission's Standard Contractual Clauses. Write to us for a copy of the safeguards.

We may also disclose data where the law requires it, for example to a tax authority or a court.

How long we keep it

• Purchase records: for as long as Polish tax and accounting law requires, currently five years from the end of the year in which the tax on the sale was due.
• Account and cloud save: until you ask us to delete your account. After deletion we keep only the purchase records above.
• Contact messages: as long as needed to deal with your matter and any follow-up. IP hashes are deleted after 24 hours.
• Game statistics: under a random ID that is not linked to your name or email, for as long as they help us improve the game.
• Browser storage: on your device until you clear it.

Your rights under the GDPR

You have the right to:

• Access your data and get a copy of it (Art. 15)
• Rectification of data that is wrong or incomplete (Art. 16)
• Erasure, also called the right to be forgotten (Art. 17)
• Restriction of processing (Art. 18)
• Portability: receive the data you gave us in a machine-readable format, or have it sent to someone else (Art. 20)
• Object to processing based on our legitimate interests (Art. 21)
• Withdraw consent at any time, without affecting earlier processing (Art. 7(3))
• Lodge a complaint with a data protection authority (Art. 77). In Poland that is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl). You can also complain in the EU country where you live or work.

To use any of these rights, email contact@vimrealm.com, from the address you bought with if your request is about your account. We may ask you to confirm the request from that address before we act on it. We answer within one month, and it is free.

Other things you should know

• You don't have to give us any data to play the free chapters. To buy, we need your email address, because it is how you sign in.
• We make no automated decisions with legal or similarly significant effects on you, and we don't build marketing profiles.
• We don't send newsletters. The only emails you get are the welcome letter, sign-in links you ask for, and our replies.
• Players under 16 should ask a parent or guardian before choosing "Remember me" or buying the full version.
• Links to other sites, such as Stripe's checkout, are covered by those sites' own privacy policies.

Changes to this policy

If we change what we collect or why, we will update this page and its date. For changes that matter to buyers, we will also tell you by email.

See also the Terms and conditions, including the 14-day refund.