Privacy Policy

Effective September 30, 2026

Wesware YTJ in Finland operates Quest Online and is the controller responsible for the personal information described in this policy. This policy explains how we handle information when you visit the website or play the game. You can contact us at support@quest.online.

Information we handle

Account information. Your account name, email address when provided, a password hash, account identifier, creation and last-login times, and any account restrictions. We use your email for account verification, recovery, security notices, and communications about your account. We store a password hash rather than your readable password.
Gameplay records. Characters, appearance, location, progress, quests, inventory, currency, guild membership, and in-game mail and transactions. Some transaction and staff-action records are kept separately to investigate problems and abuse.
Messages and reports. The game processes chat to deliver it to the intended players. In-game mail is stored. Information you include in a report or support request, including contact details and messages you provide, is used to handle that request. When a conversation is reported or investigated, messages and relevant context may be included in moderation records.
Technical information. IP addresses, connection details, browser and request information, and diagnostic records needed to deliver the website, run the realm, limit abuse, and troubleshoot failures. Hosting and delivery providers also process requests made to their services.
Billing information. When you use paid features, your billing name, email address, billing address or country, transaction and invoice records, payment status, subscription status, and payment-provider identifiers. The payment provider handles payment-method details.

Why we use information

We use information to create and secure accounts, authenticate players, save progress, deliver multiplayer features and messages, respond to requests, enforce game rules, and investigate errors or abuse. When you use paid features, we also use billing information to process purchases, manage subscription access, issue receipts, handle refunds and disputes, prevent payment fraud, and meet accounting and tax obligations.

We receive information from you, your use of the game, and providers handling your payments or requests. We do not sell personal information or use it for targeted advertising.

Legal bases

We process account and gameplay information to provide the service you request under these Terms. When you buy something, this also covers completing the purchase and managing paid access. Account credentials and information needed to complete a payment are necessary to provide those features.

We rely on our legitimate interests in securing the service, preventing fraud and abuse, maintaining fair play, and resolving technical problems. We consider players' privacy when doing so. We also process information when needed to meet legal obligations, such as accounting requirements or lawful requests.

Where a feature requires your consent, we will ask before using your information for that purpose. You can withdraw that consent through the relevant setting or by contacting us. Withdrawal does not affect processing that was lawful before you withdrew it.

What other players can see

Character names, appearance, and relevant gameplay information are visible to other players. Chat is shared with the players in its channel or intended audience. Whispers and in-game mail are delivered to their recipients. Do not include passwords or sensitive personal information in names or messages.

Service providers

We use DigitalOcean to host the game server and database, Cloudflare to host and protect the website, and Bunny to deliver game artwork and other assets. Your browser also loads fonts from Adobe Fonts. These providers receive the information needed to provide their services, such as network requests and IP addresses; the hosting provider also stores the game data we keep.

Adobe states that its website font service does not set cookies to serve fonts. You can read the providers' information at DigitalOcean, Cloudflare, Bunny, and Adobe Fonts.

When payment features are offered, we use Stripe to process payments and manage billing. Stripe receives payment and contact information needed for checkout, fraud prevention, and its legal obligations. Its handling of that information is described in the Stripe Privacy Policy. Email-delivery providers process addresses and message contents when sending account notices.

We may disclose information when legally required or reasonably necessary to investigate abuse, protect people, or establish or defend legal rights. Staff access is restricted to authorized personnel performing their duties.

International processing

The game server and database are hosted in the United States. Our providers may also process information in other countries, including countries outside the European Economic Area.

DigitalOcean's Data Processing Agreement describes its EU-U.S. Data Privacy Framework transfer arrangement and standard contractual clauses as a fallback. Other providers describe their transfer safeguards in their privacy and data-processing terms. You can contact us for information about the safeguards relevant to your data or to request a copy.

Cookies and browser storage

The game uses your browser's local storage to remember your login session and preferences, including audio and graphics settings, window positions, action-bar layouts, map filters, and tracked quests. Temporary session storage also carries an idle-logout notice. These are used for game functionality, not advertising tracking.

You can log out to remove the stored session token. You can clear site data through your browser to remove saved local preferences; doing so may sign you out or reset settings. Clearing browser storage does not delete your account or server-side progress. Our website and delivery providers may also use technical cookies for security or service operation.

Retention and account deletion

We retain account and gameplay information while needed to provide your account and the game. You can delete your account through My Account on the character-selection screen. This deletes the account and its characters. Some shared guild records, transaction records, and staff-action logs are stored separately and are not automatically removed with the account.

Payment, invoice, refund, and dispute records may need to be kept after account deletion to meet accounting and legal obligations or resolve disputes. Support and moderation records may also be retained where needed to investigate abuse or protect legal rights. Retention depends on the type of record, why it is needed, and applicable law.

Deleting an account cannot recall messages already received by other players or remove copies they have made. Contact us about other information you want reviewed or deleted, including support correspondence and records that remain after account deletion.

Security

We use encrypted connections, hashed passwords, and access controls to protect information. No online service can guarantee complete security. Keep your password private and use a password you do not reuse elsewhere.

Your choices and rights

You can change your password and delete your account in My Account. You can also ask to access or correct your personal information, receive a portable copy, delete it, restrict its processing, or object to processing based on legitimate interests. These rights apply subject to the conditions and exceptions in applicable law. We may need to verify that you own the account before acting.

Send privacy requests to support@quest.online. If we decline a request, you can ask us to review that decision by replying to our response. We will handle requests and appeals within the time required by applicable law.

You may complain to Finland's Office of the Data Protection Ombudsman or the supervisory authority where you live or work.

Player age

Quest Online is for players aged 13 and older, subject to any higher minimum age required where they live. Players under 18 or the local age of adulthood must have their parent or guardian review the Terms and this policy and agree to their use of the game. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact support@quest.online so we can investigate and remove it where appropriate.

Payments

When you pay, payment-method details are submitted to Stripe rather than stored as full card numbers or card security codes in your game account. We receive the payment status and billing records needed to grant purchases, manage access, and respond to billing questions. Optional payment-provider features have their own privacy information and choices.

Policy updates

We will update this page and its effective date when our practices change. We will provide an appropriate notice of material changes where required.