Privacy & Cookie Policy.

Information collected

• Account data, including username, email, password hash, role selection, profile details, age-gate confirmation, and settings.
• Gameplay data, including characters, campaigns, maps, homebrew creations, Creator Lab content, progression, XP, currency, inventory, settings, and logs.
• Communication, community, safety, moderation, report, appeal, and enforcement data.
• Creator Lab and marketplace data, including published content, sales records, payout information, tax-related information, disputes, and buyer entitlements.
• Device, technical, platform, payment, crash, diagnostic, security, anti-cheat, and approximate location data where needed.
• Optional data such as marketing preferences, survey responses, and support tickets.

How information is used

BloodStone Forge uses information to provide, operate, secure, and improve 20Realms; save progress and entitlements; run moderation, anti-cheat, anti-fraud, abuse prevention, safety reviews, and account enforcement; process purchases, creator revenue shares, refunds, tax obligations, and payout records; support parent or guardian requests; communicate support responses and notices; comply with legal obligations; and enforce agreements.

Cookies and similar technologies

Cookies and similar technologies may include local storage, SDK identifiers, analytics pixels, anti-fraud tools, and platform SDKs.

• Strictly necessary: login, security, load balancing, fraud prevention, account sessions, purchases, and core site functions.
• Functional: language, UI settings, accessibility settings, cookie choices, and remembered selections.
• Analytics: usage metrics, crash trends, performance, feature use, and product improvement.
• Advertising or marketing: campaign measurement and ad relevance where enabled and permitted.

Non-essential cookies use prior opt-in in the EU/EEA/UK where required. In other regions, opt-out may be used where legally allowed. Browser controls may also block or delete cookies, but some features may be affected.

Sharing and user-generated content

Information may be shared with hosting providers, analytics providers, payment processors, platform partners, anti-cheat and security vendors, support tools, moderation vendors, tax and payment partners, professional advisors, law enforcement, regulators, or transaction parties if BloodStone Forge merges, acquires, or sells assets.

If you publish maps, homebrew content, comments, Creator Lab content, or similar materials, that content may be visible to other users and may continue to be available to users who acquired it before removal, unless removed for legal, safety, or policy reasons.

Retention

• Account profile and core service records: active account plus 24 months.
• Billing, tax, payout, and transaction records: 7 years or longer where required by law.
• Security and anti-cheat logs: 12 months rolling unless needed for investigations.
• Support tickets: 24 months after closure.
• Moderation reports and enforcement records: 36 months after final action unless law or safety requires longer.
• Crash and diagnostics telemetry: 12 months rolling, then aggregated or anonymized where practical.
• Backups: encrypted rolling 35-90 day window unless otherwise required.

Your rights and choices

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to certain processing. Parents or guardians may request review, correction, deletion, or consent withdrawal for a teen user where allowed or required by law.

Contact support@20realms.net. BloodStone Forge may verify identity before fulfilling requests.

Children, security, and transfers

20Realms is intended for users age 13+. Users under 18 must have parent or guardian permission where required by law. Users under 13 are not allowed unless BloodStone Forge later provides a legally compliant child account and parental consent flow.

BloodStone Forge uses administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is perfectly secure. Information may be processed in countries other than your own with safeguards where required by law.