Legal
Privacy Notice
Your data, in plain words: each kind on its own row, with why it is kept and for how long.
What Nirvana collects about you, why, how long it is kept, and what you can ask us to do about it. Written in plain words on purpose — if any part of this is unclear, that is a fault in the notice and we want to hear about it.
We collect what running a game server and keeping it fair actually requires: your account details, what your characters do in the world and how you play it, your chat, the addresses you connect from, and your purchases. We do not sell any of it, we do not share it for advertising, and we read nothing at all from your computer. A few automatic helpers use one outside AI service, Anthropic PBC; what they send is listed below. Every automatic decision that could affect your account can be appealed, and most of them a machine is not allowed to make at all.
Who is responsible
Nirvana is a privately operated Ragnarok Online game server. The operator is the data controller for everything described here. You can reach us through the support channels linked in the site footer, or in our community server. If you want something on this page explained, corrected, or acted on, that is the route.
What we collect, and why
| What | Why | How long |
|---|---|---|
| Account details username, password (stored hashed, never in readable form), email address, the date of birth and gender the game client requires | To create and secure your account, recover it, and contact you about it. | While the account exists. |
| Third-party sign-in if you register or link with Google or Discord: the account identifier and email they give us | So you can sign in without a separate password, and so we can link your community account. | Until you unlink it or the account is deleted. |
| Connection records IP address, times you logged in and out | Security, account recovery, and investigating shared-account or fairness reports. An IP address is personal data and we treat it as such. | At least 90 days. |
| Game world activity characters, progress, items, trades, purchases in-game | It is the game. It is also what makes the economy auditable when something goes wrong. | While the account exists. |
| Chat all in-game chat, including whispers, party, guild and clan | Recorded and scanned automatically for real-money trading, account sales and scam attempts. Logs are read by a person only when an investigation calls for it — never for entertainment, and never shown on the public verification page or to other players. The automatic check of public lines uses Anthropic PBC (see Other AI help, below). Global chat is bridged to Discord: a message you send with @gc is posted, with your character name, in the #general channel of our Discord server, where anyone in that server can read it, and what people write in #general is shown in game to everyone, under their Discord display name. | Rolling; kept only as long as it is useful for that purpose. |
| Payments and top-ups what you bought and when | To deliver what you paid for, handle disputes, and meet accounting obligations. Card details are handled by the payment provider and never reach us. | As long as accounting obligations require. |
| Fairness and integrity records anomaly records, cases, and the record of any decision a staff member makes about an account | To keep the game fair and to make our own enforcement checkable. See the Codex Rules and the public record verifier. | Supporting detail 14 days; records attached to an open case are kept until it closes. The findings themselves are kept: they sit in a hash-chained record that exists so enforcement can be checked afterwards, and removing a link would break that chain for everyone. We keep it deliberately thin — a verdict, a timestamp and a fingerprint. |
| Behaviour analysis (the Companion observer) the timing of actions the server already receives (attacks, skills, walking, item use, NPC dialogue), movement paths, pickups, trades, mail, storage and shop flows, how often and how fast you chat and how long your messages are (never what you say), party, guild and friend links, which kinds of messages your game client sends, the order of the first messages it sends after you log in and how quickly it sends each kind of message, login and logout times, the IP address of each session, which accounts share a connection, how you respond to an occasional probe — a picture check, a whisper or a decoy (for a whisper, only the length of your reply, never its text) — and a step-by-step trace of a character's actions and positions: automatically for the 60 seconds after any finding (kept 30 days), and for longer only when a reviewer turns it on for one character | To build a baseline of how each character normally plays and compare every session with it and with players of a similar class and level, so that automation shows up as a departure that a person then reviews. It is report-only: it never kicks, bans, holds or restricts an account. It is part of the server, and has nothing to do with the Companion ally you can summon in game. | See How long we keep behaviour data, below. |
| Advisory summaries (Anthropic) a pseudonymised summary of an account's behaviour statistics and anomaly records: the account appears only as its internal number, and each character only as C1, C2 and so on | To help our one reviewer read a case, we may send a pseudonymised summary of an account's gameplay statistics and anomaly records — never your chat, password, IP address or character name — to Anthropic PBC, a United States company, which returns an advisory summary. Once a day, a summary of the same kind may cover the day's highest-ranked accounts together. Under Anthropic's commercial terms, what we send is processed only to produce that answer and is not used to train its models. | We keep each advisory summary for 180 days, or until the case closes if that is later. |
| Other AI help (Anthropic) public chat lines; the pseudonymised records of a case at the highest tier; the questions you ask the Sage | Three older helpers use the same company on the same terms. The automatic chat scan above sends public chat lines (the Global and Main channels, with no name or account attached) to be checked for real-money trading and scams. When a case reaches the highest tier, a case assistant sends that case's recent anomaly records, pseudonymised the same way as the advisory summaries (no character name, chat, IP address or e-mail), so that it can argue the player's side and summarise the case before a person decides. The Sage sends the questions you choose to ask it, with a little game context (your progress stage, Glory balance, Item Level and tier), so that it can answer. | A flagged chat line becomes a fairness record (above). The case assistant's notes: 180 days, or until the case closes if that is later. The Sage's questions and answers: 90 days. See How long we keep behaviour data, below. |
How long we keep behaviour data
Behaviour data is deleted automatically, by a job that runs once a day, on this schedule.
| Record | Kept for |
|---|---|
| Raw observation records the 5-minute summaries of play, session records (including the IP address each session came from), flows and links between accounts, the record of each session's game-client messages (which kinds, the order of the first ones after login and how quickly each kind was sent), and any step-by-step trace a reviewer turned on | 90 days |
| The automatic trace after a finding the step-by-step trace of a character's actions and positions in the 60 seconds after a finding | 30 days |
| Each character's personal baseline how that character normally plays | Until 180 days after that character's last login |
| Scores and daily ranks including each account's daily summary | 90 days |
| Probe records which probe, when, how it ended and how long the answer took | 90 days |
| Advisory summaries | 180 days, or until the case closes if that is later |
| Labels a reviewer's mark that an account is a bot or a person | 2 years |
| Links between flagged accounts which flagged accounts share a connection or trade with each other, and when that was first and last seen | 30 days after the link was last seen |
| Alert and message queue messages waiting to be posted to staff or to Discord — including your @gc messages with your character name, and alerts that name an account | 90 days after the message was delivered (a message not yet delivered is kept until it is) |
| Chained findings anomaly records in the enforcement chain | As described for fairness and integrity records, above |
One exception, so that a review can finish: while an account has an open case, or has had a new anomaly record in the last 7 days, none of its behaviour data is deleted (a flow or link between two accounts is kept while either of them is in that position). Deletion catches up at the next daily run once the case is closed and 7 days have passed without a new record.
The same daily job deletes the AI helpers' records:
| Record | Kept for |
|---|---|
| The case assistant's notes its argument for the player's side, its summary and its draft reply, for one case | 180 days, or until the case closes if that is later (the exception above applies) |
| The Sage's questions and answers | 90 days |
| The AI call log which helper ran, when, for which account, and how much text it sent and received — never the text itself | 90 days |
The exception above does not apply to the Sage's questions and answers or to the AI call log: they always go after 90 days.
What we never collect
These are commitments, not current settings. They are published here and in the Codex.
| Never | Commitment |
|---|---|
| Hardware identifiers | No MAC address, disk serial, motherboard ID or machine GUID. Nothing that identifies your computer or survives a reinstall. If this ever changes, this page changes first and you will be asked again. |
| Anything from your computer | Nirvana does not install any anti-cheat software on your computer — no DLL, no driver, no launcher agent — and will not. Nothing is read from your computer at all: no files, no processes or modules, no list of the other programs you run, no window titles or browser tabs, no screenshots or screen capture, ever, and no record of what you type — no key codes, no passwords, no clipboard. There is no client-side component. |
| Chat content for behaviour analysis | The behaviour analysis records when and how much you talk, not what you say. Chat content is logged separately, for the real-money-trading and scam scan described above, as before. |
| Anything sold or shared for advertising | We do not sell your data, and there are no advertising or analytics trackers on this site. |
Our lawful basis
We rely on the Malaysian Personal Data Protection Act 2010 (as amended). In plain terms, we process your data on two grounds:
- To provide the service you asked for — your account, your characters, your purchases. We cannot run the game without this.
- To prevent fraud and keep the game fair — the integrity records, the behaviour analysis, chat scanning, and connection history. This is a legitimate interest of ours and of every other player, and we keep the collection as small as we can while it still works.
Where data is sent to Anthropic PBC in the United States (the advisory summaries and the other AI help listed above), we do so under PDPA 2010 s.129 on the basis that what is sent is limited to the purpose it is sent for, pseudonymised whenever it concerns a case (the advisory summaries and the case assistant), and processed under a written contract that forbids any other use.
Where we ask for your agreement — as we do when you register — we record which version of this notice and of the Terms you accepted, and when. That record contains no IP address or device information: the question it answers is simply which document you saw, and your login history already holds the rest.
Automatic decisions, and the limits on them
This matters enough to state precisely, because most services are vague about it.
- No machine can ban, suspend, or take anything from your account. Every action with a real consequence is decided by a person, recorded, and appealable.
- One thing a machine can do on its own is pause you briefly. If a check fires that an ordinary game client structurally cannot trigger, trading, selling, storage and mail can be paused for around half an hour. It is not a ban and not a verdict, it records nothing against you, and it lifts by itself — you do not need to contact anyone.
- A check can interrupt you and ask you to prove you are at the keyboard. If automated play is suspected — including when another player reports it — the game can open a short picture challenge. While it is open your actions are paused. Get it right and you carry on as though nothing happened. Miss it and you are returned to character select and a low-confidence note is recorded for a person to read. It does not ban you, does not restrict your account, and does not touch your standing.
- Your standing never reflects machine suspicion. There is deliberately no "under review" state: the standing shown on your account page moves only when a person has actually decided something. When a machine speaks to you directly — a hold notice, the challenge above, a picture check — it says plainly what it is. The one exception is the occasional probe described next: a probe whisper or decoy deliberately looks ordinary, which is why it is disclosed here instead.
- The Companion observer and the AI helpers never decide anything about your account. They produce leads at a low, capped weight and text that a person reads; none of them can, by itself, cause any action against your account. A probe — a picture check, a whisper or a decoy — is recorded for that person, and a missed one adds only a low-weight note. It never takes anything from you, and missing a picture check does not send you to character select.
Your rights
- Ask what we hold about you, and get a copy.
- Correct it if it is wrong.
- Ask us to delete your account and its data. We will, subject to what we must keep for accounting and for fairness records tied to an unresolved case.
- Withdraw your agreement to the optional parts, and object to how we use your data.
- Appeal any restriction — through the Appeal a Restriction page, which works even when you cannot log in, with no session needed.
One honest note about deletion and our enforcement log. Staff decisions are written to a tamper-evident chain, and a fingerprint of that chain is published to the Bitcoin blockchain so we cannot quietly rewrite our own history. Only fingerprints are published — never your name, your account, or any reason text. So the published part contains nothing personal about you and nothing about you is stuck there, while the underlying record stays deletable like everything else.
Sharing
We share data only where running the service requires it: the payment provider that processes a purchase; the community platform you chose to link; Discord, which carries the global-chat bridge described above (a message you send with @gc is posted there with your character name); and Anthropic PBC, which processes for us the AI-assisted parts described above — the advisory summaries, the chat scan, the case assistant and the Sage. We do not sell data, and we do not share it for advertising. We will disclose data if the law compels us to.
Children
Nirvana is not intended for children below the age at which they can agree to this on their own. If you believe a child has registered, tell us and we will remove the account.
Changes
If we change what we collect, why, or how long we keep it, we publish the new version here and ask you to accept it again — we do not change the substance quietly and treat your old agreement as covering it. Wording and clarity fixes do not bump the version.
Version 2026-10-04 ·
See also Terms of Service,
the Codex Rules,
and the record verifier.
This notice is maintained by the operator and has not yet been reviewed by a lawyer. We would rather publish an honest description now and correct the wording later than collect data with nothing written down at all.