Privacy policy

Last updated: 12 October 2026

Harling is a free game in development, made by an independent developer. This page explains what data we collect, why, where it is kept and how you can have it deleted.

Who is responsible

Gian Luca Cecchi, Arezzo, Italy. Contact for anything to do with your data: [email protected].

What data we collect

Game account: email address and password. The password is never stored in plain text: we only keep an encrypted fingerprint from which the password cannot be worked out.
Characters and play: your characters’ name, class and appearance, level, items, position in the world, quests, friends, guilds and time played.
Request to join the playtest: email, nickname, operating system, experience with MMORPGs, any notes and language.
Requests to collaborate: the nickname, email, game account, an optional link and the introduction you write in the “Work with us” form, to assess your application and reply to you.
Voice chat: your voice travels in real time between nearby players and is neither recorded nor stored.
IP address: used only for a moment, in memory, to limit abuse (for example too many sign-in attempts) and for the form’s anti-bot check. We do not save it anywhere.
Game statistics: daily counts, anonymous or linked to a character (for example how many characters were active on a given day), used only to improve the game.

We do not use advertising, profiling, third-party analytics tools or tracking cookies, and we do not sell or pass on data to anyone.

Why we use it

to let you sign in and play (performance of the service you ask for);
to send you the emails that are needed: playtest invitations, password recovery;
to keep the game safe and fair: blocking abuse, moderation (legitimate interest);
to understand what works in the game, with the statistics described above (legitimate interest).

Who else processes the data

We use a few providers, only to make the service work:

Cloudflare: delivery of the website and the game files, protection against attacks and bots, connecting the voice chat, nightly backups of the database;
Resend: sending emails.

The game server and the database are currently in Italy. If one day they were to move to another country, we will say so here before moving them.

Some of these providers may process data outside the European Union; when they do, it is with the safeguards provided for by the GDPR (standard contractual clauses or adequacy decisions).

For how long

account and characters: as long as the account exists; if you ask for it to be deleted, within 30 days;
requests to join the playtest: until you get in, or until you ask us to remove them;
requests to collaborate: while we assess them and, if you collaborate, for as long as the collaboration lasts; otherwise up to 6 months, or sooner if you ask us;
sign-in and password recovery tokens: they expire on their own and are deleted;
backups: one a day, kept for 14 days; so a deleted account also disappears from the backups within 14 days;
log of game events (for example coins earned or spent by a character, to spot cheating and errors): 90 days in the database, then in a compressed archive where it stays for up to a year.

Your rights

You can ask at any time to see your data, correct it, receive a copy of it, restrict its use, object to it or have it deleted, by writing to [email protected]. We reply within 30 days. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

Deleting your account: from the Account page of this website, with the “Delete account” button, or by writing to [email protected] from your account’s address. Either way, we delete your account, your characters and your playtest request.

Age

By using Harling you declare that you are at least 14 years old. We do not ask for your age or store it.

Changes

If we change this page in a significant way, we will say so in the website’s News and, if you have an account, we will let you know by email.