✦ Welcome to a world of wonder ✦
✦EVERLANEONLINE
DEENES
Explore now ↗

✦ EVERLANE ONLINE · LEGAL

Privacy policy for Everlane Online

Last updated: 07.11.2026

1. Controller

ECLE - Emerv Creveo Life Empire
Owner: Fabian Hartmann
c/o flexdienst – #21189
Kurt-Schumacher-Straße 74
67663 Kaiserslautern, Germany
E-mail: support@everlane-online.de

No data protection officer has been appointed.

2. What this is about

Everlane Online is a fantasy role-playing game for iPhone and iPad. Your save game is stored on your device; if you play with an account on our server, the game also syncs it with the server, which keeps and checks it for each game world (section 3 k). For the online features (account, save game, world chat, whispers, reporting and blocking, trading, Bazaar, Everlane Mall, support) we run our own server. Shared family adventures (for example in the Land of the Deadly) and the group voice chat run over a direct connection between the players' devices (section 3 e).

We show no advertising, use no third-party analytics or advertising services, do not track you across other apps or websites and do not build profiles for advertising.

3. What data we process

a) Account. Account name, e-mail address and a one-way fingerprint of your password (we never store the password itself). The e-mail address is required when you register in the game: you can also log in with it, and it lets us find your account when you contact support. We do not send you advertising. We also store the time and version of your consent to the terms.

b) Characters. For each game world (Sonnental, Kristallhain, Sternenwacht) the name, class and level of your character, so that other players can see them in chat and in the world.

c) Messages. We pass world chat messages on to the players of the same world; the server keeps the last 60 per world only in its memory as a history for players who join. We store whispers between two players (the last 100 per conversation) so that they arrive even when the other player is offline. So that we can review reports, we also keep your last 50 own lines from world chat and whispers for each account (text, time, world, character name and, for whispers, the recipient). All messages pass through an automatic filter against insults, links and contact details; anyone who sends five held-back lines within ten minutes cannot write for five minutes.

d) Reports, blocking and moderation. If you report someone or are reported, we store the report as a numbered case: reason, your note and the context (the reported message with the lines before and after it, name and character of the reported player at the time of the report). If you block someone, we also open a case so that we can check whether they violate the terms. If three different players report the same player within one hour (from accounts that are at least one day old and from different IP addresses), the server mutes that player provisionally for 30 minutes until a team member reviews the reports. The server may notify our support mailbox of new cases by e-mail; this e-mail only contains the number, type and time of the case, no names and no messages. We record moderation measures (warning, chat ban, ban, renaming, including automatic muting) with the reason and the team member who took them.

e) Playing together over a direct connection. Family instances (for example in the Land of the Deadly) and raids with friends do not run on our server: one player opens the instance on their device and the others connect to their IP address. The devices exchange character name, appearance, position, combat values and game events, and the host sees the IP addresses of the other players (and they see the host's). The group voice chat also runs through the host: the microphone is only on when you switch it on yourself and your device has allowed it; your voice only goes to the members of your group. We do not record or store any of this.

f) Support and contact form. If you write to us via the contact form on this website or in the game, we store your name, your e-mail address, the topic, your message and our replies as a case. If you send an e-mail to support@everlane-online.de, we use your sender address and the content to handle your request. The e-mail is received by the mail server of our domain provider checkdomain and forwarded to our support mailbox.

g) Technical data. We need your IP address for the connection and to protect against abuse (such as blocking after too many failed logins or too many contact form requests). We keep it only in the server's memory and do not write it to files or logs. We also process the game version and platform. Only when a member of our team logs in to the server's administration do we record their IP address in the admin log, so that unauthorised access can be detected.

h) On your device. Your save game, your settings, a session (so that you stay logged in) and local accounts with a password fingerprint are stored on your device. The game also creates a local account as a copy of your server account, so that it can open your save games without a connection. Settings, session and local accounts stay only on your device; the game syncs your save game with our server if you play with an account on the server (section 3 k).

i) Trading between players. When you trade with another player, our server passes on the request, the offers and the confirmations. It checks what you offer against your checked save game (section 3 k) and notes there what you gave and received. Once a trade is completed, we record it in the trade log: time, game world, account ID and account name of both sides, the items traded with their quantity (for unique items such as equipment, shells or an SP in a card holder also their values) and the gold. We need this log to investigate fraud and to help you through support if something goes wrong with a trade.

j) Bazaar. When you list something in the Bazaar, our server keeps your listing: the item (for unique items with their values), quantity, price, duration, world and your account. Players in the same world see the listing with your character's name. For each account we store a history of your last 30 sales, purchases and returns (with the other side's character name) and, for 14 days, the IDs of your orders, so that an interrupted order is not carried out twice. Proceeds, purchased items and returned listings arrive as a delivery in your mail. We write every event (listing, purchase, withdrawal, expiry) to the Bazaar log: time, world, listing, item with its values, quantity, price and gold, and the account ID and account name of seller and buyer. We need this log to investigate fraud and to help through support.

k) Save game on the server (anti-cheat). If you play with an account on our server, the game uploads your save game for each game world: shortly after saving, when the app goes to the background, before entering a world and before every Bazaar or trade order. The save game contains everything the game stores for your character (such as level, gold, bag, equipment, companions, specialist cards, quests and progress), plus the social details in the game: friends and block list, group and family, your mail, the latest chat lines on your device and messages from the Messenger, each with the names of the other players. For each account and world, the server keeps the most recently accepted save, a list of the last 40 syncs (version, time, result, reasons, level and gold) and what has come in or gone out through the Bazaar, trades and deliveries since then. If the server holds a newer save than your device, for example from another device, the game loads it.

The server automatically compares every new save with the most recently accepted one: whatever has changed must have been possible in the game in the time that has passed, or must have come through the server. It does not accept an impossible save; the most recently accepted one then applies again, updated with Bazaar, trades and deliveries since then. It accepts an unusual save and flags it. If a save shows something an honest game hardly ever produces, the server locks the Bazaar and trading for that character until a team member has reviewed the save, and opens a moderation case for it (reasons, world, account name and characters; as in section 3 d, the notification to our support mailbox only contains number, type and time). A suspicious gain in gold locks the Bazaar and trading until it has evened out with playing time. The server writes refusals, flags and locks to a check log (time, account ID, character name, world, result, reasons). You can always keep playing.

l) Everlane Mall and purchases. Only our server keeps your Stars balance, per account. For this we store your last 200 bookings (top-ups, purchases with offer, quantity, world and delivery number, Loyalty Bonus, refunds, credits from support) and your Loyalty Bonus streak. When you buy Stars in the App Store, the game sends our server Apple's transaction ID and the chosen package. Our server then looks up the transaction with Apple itself (App Store Server API) and receives details of this purchase from Apple, including the app, product, type of purchase, whether it was refunded, and price and currency. With your account we store the transaction ID, package, product, time, environment (App Store or test environment), price and currency as reported by Apple and the Stars credited, and after a refund also its time and reason as reported by Apple. We never receive payment details such as card or bank account numbers. So that no purchase is credited twice, we keep a directory of which transaction ID belongs to which account. If Apple refunds a purchase or reverses a refund, Apple notifies our server; from the notification we store only its ID, type, environment, the transaction ID, the associated account and the processing status (not the notification itself), and we check the transaction with Apple again. Refunds and credits are also recorded in the admin log. Whatever you buy in the Everlane Mall arrives as a delivery in your mail; we keep the deliveries (content, world, time, whether collected) with your account.

4. Purposes and legal bases

  • Providing the game, your account and the online features: Art. 6(1)(b) GDPR (contract).
  • Security, protection against fraud and abuse, chat moderation, handling reports, enforcing the terms: Art. 6(1)(f) GDPR (legitimate interest in a safe and fair game).
  • Arranging a trade between players and the Bazaar: Art. 6(1)(b) GDPR; the trade and Bazaar logs: Art. 6(1)(f) GDPR (legitimate interest in investigating fraud and settling trade and Bazaar questions through support).
  • Save game on the server: keeping it and syncing it between your devices, Art. 6(1)(b) GDPR; the automatic check, the check log, locking the Bazaar and trading and the related case: Art. 6(1)(f) GDPR (legitimate interest in a fair game and in making sure nothing obtained by cheating is passed on through the Bazaar or trades).
  • Everlane Mall: crediting Stars, keeping the balance and delivering goods, Art. 6(1)(b) GDPR; checking purchases with Apple, processing refund notifications and keeping transaction IDs after an account is deleted: Art. 6(1)(f) GDPR (legitimate interest in preventing double credits and fraud with refunded purchases).
  • Answering your requests: Art. 6(1)(b) GDPR where they concern your account or the game, otherwise Art. 6(1)(f) GDPR.
  • Microphone: only when you switch it on yourself (Art. 6(1)(b) GDPR; access to the microphone follows your permission in the system, Section 25(1) TDDDG).
  • Storage on your device (save game, session, settings): strictly necessary for the game (Section 25(2) no. 2 TDDDG).

5. Recipients and service providers

  • Hosting: OVH GmbH, Oskar-Jäger-Straße 173/K6, 50825 Cologne, Germany, operates our server and this website on our behalf (processing on behalf pursuant to Art. 28 GDPR). The server is located in a data centre of the OVH group in Canada (Beauharnois, Québec). The European Commission has found that Canada ensures an adequate level of data protection (adequacy decision pursuant to Art. 45 GDPR); the transfer is based on this decision.
  • Apple (Apple Distribution International Ltd., Ireland) provides the game through the App Store and handles the purchase of Stars (payment, billing, refunds); Apple's privacy policy applies to this. To check purchases, our server looks up the transaction IDs the game reports to it with Apple via the App Store Server API; we only pass these IDs to Apple, no account, chat or game data. Apple sends our server notifications about refunds (section 3 l).
  • E-mail: checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck, Germany, operates the mail servers for everlane-online.de as our domain provider and forwards e-mails to support@everlane-online.de to our support mailbox on our behalf (Art. 28 GDPR).
  • E-mail delivery: Brevo (Paris, France) sends the notifications about new cases to our support mailbox on our behalf – without player names, messages or e-mail addresses. Processing takes place in the EU (Art. 28 GDPR).
  • Other players see the name, class and level of your character, your messages in the channels you write in and your family name. In the Bazaar, players in your world see your listings with your character's name, and after a purchase buyer and seller learn the other side's character name. Players in a family instance also receive the data from section 3 e.

We do not sell data and do not pass it on for advertising purposes.

6. Storage period

  • We store account data for as long as your account exists, and the same applies to your save game on the server (with the last 40 syncs), your Stars balance with the last 200 bookings and your deliveries.
  • Deleting your account: in the game under MENU › Account › Delete account. We then immediately remove from our server: your account, characters, block list, whisper histories, the chat lines kept for moderation, your save games for each world, your Bazaar listings and history, your deliveries, your Stars balance with all bookings and your account's moderation history. Unspent Stars, deliveries not yet collected and the items in your Bazaar listings are forfeited.
  • Remaining after deletion until the end of their period, but without your account ID and names (a “deleted” marker takes their place): the entries in the trade and Bazaar logs (so that the other side can still get help from support), other players' reports against you (they belong to the reporter; we close them), whispers to you in the lines of other players kept for moderation, and the entries in the admin log. Also remaining, without any link to your account: the transaction IDs of your purchases with Apple (so that the same purchase cannot be credited to another account) and Apple's refund notifications.
  • We delete reports, support requests, contact form requests and moderation measures no later than 12 months after the last change; if you delete your account, your own requests and reports and the anti-cheat cases concerning your account are deleted with it immediately. Bans for serious violations are kept for as long as they apply.
  • We delete the admin log (which team member did what and when for which account, including credits and refunds of Stars) after 12 months.
  • We delete trade and Bazaar log entries after 12 months and the IDs of your Bazaar orders after 14 days.
  • We delete the chat lines kept for moderation after 30 days. Whisper histories remain until one of the two of you deletes their account. The server keeps the world chat history only in its memory.
  • We delete Apple's refund notifications 200 days after receipt. We keep the directory of transaction IDs without a fixed period.
  • The anti-cheat check log has no fixed period but a fixed size: when it grows beyond 5 MB, the server sets it aside and starts a new one, deleting the one set aside before. If you delete your account, we immediately remove your entries from both.
  • Unused sessions expire after 60 days.
  • Server logs contain no IP or e-mail addresses and are deleted after 14 days.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Write to us at support@everlane-online.de or use the contact form. You can delete your account yourself in the game at any time.

You can lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement (Art. 77 GDPR).

8. Children and young people

The online features are intended for players aged 16 and over. Younger players may only use them with their parents' consent.

9. Security

The connection to the server is encrypted (TLS). We store passwords only as a PBKDF2 fingerprint with an individual salt, session keys only as a checksum. Direct connections in family instances are not secured by our server – only play there with people you trust.

10. This website

When you visit everlane-online.de, the server processes your IP address, the time, the requested address and information about your browser as technically necessary to deliver the pages and protect against attacks (Art. 6(1)(f) GDPR). We do not write access logs. The website sets no cookies, uses no analytics or advertising services and loads no fonts, scripts or images from third-party servers. The contact form only sends your details to our own server (section 3 f).

11. Changes

We update this policy when the game or the law changes. The current version is available at https://everlane-online.de/en/privacy.html. The German version of this policy is authoritative.