Privacy Policy

Last updated 15 October 2026

This policy explains what Vaelo (vaelo.win, "the game", "we") collects when you play, why, and what you can do about it. We collect only what the game needs to run your account and keep matches fair.

What we collect

• Your account: your player name, your email address, and your password. We never store your password itself, only a salted hash of it.
• Your progress: level, XP, points, tickets, unlocked items, loadout, match statistics, ranked rating, clan membership and name changes.
• Things you upload: a custom hitmarker sound, if you add one.
• Match data: while you play, your position, actions and hits are sent to the game server and to the other players in your match so the game works. Chat messages are delivered to your match; we don't keep a chat history.
• Reports: if you report a player, or someone reports you, the report stores the reason, any details written, and a short recording of the match for the moderator to review.
• Fair-play checks: hits the server refuses as impossible (for example, more damage than a weapon can do) are logged against the account that sent them.
• Technical data: your IP address (used briefly to limit repeated sign-in and sign-up attempts; not stored with your account), and, if the game crashes, an error report with the error message, the page, the game version, your browser type and your player name.
• On your device: a sign-in cookie that keeps you signed in, and local browser storage for settings such as volume and graphics. There are no advertising or tracking cookies.

Why we use it

To create and run your account, save your progress, verify your email, match you with other players, run matches and rankings, keep the game fair, investigate reports and enforce the Terms, and find and fix bugs. We don't sell your data, use it for advertising, or share it for anyone else's marketing.

Who else handles it

The game runs on services that process data on our behalf:

• Cloudflare: serves the website, passes requests to the game server, and runs the Turnstile anti-bot check when you sign up.
• Railway: hosts the game server and its database.
• Resend: sends the verification code to your email.
• Google Fonts: provides the fonts the pages use (your browser requests them from Google).

Other players see what the game shows them: your player name, title, calling card, clan, level, stats, rank, and what you do in a match. Your email address is never shown to other players.

How long we keep it

Account data is kept while your account exists. When you delete your account, it is removed from the live database straight away. Copies remain in our daily backups for up to 14 days and are then gone. Error reports, fair-play logs and reports are kept until a moderator has dealt with them and clears them.

Your choices and rights

• Delete your account at any time in Settings. This removes your account, progress and uploads.
• Change your player name in the Loadout (limited to once every 30 days).
• Ask for a copy of your data, or for something to be corrected, by contacting us (below).

Depending on where you live, you may have further rights, such as to object to processing or to complain to your data protection authority.

Children

Vaelo is not intended for children under 13, and you may not create an account if you are under 13. If you are under the age of digital consent where you live, you need a parent's or guardian's permission. If we learn an account belongs to a child under 13, we will delete it.

Security

Passwords are hashed, the site is served over HTTPS, and owner tools are restricted to the owner's account. No system is perfectly secure, so please use a password you don't use anywhere else.

Changes

If this policy changes in a way that matters, we'll update the date above and say so in the game.

Contact

Questions or requests about your data: message us on the Vaelo Discord.