Privacy Policy
Last updated 13 October 2026. This describes exactly what OblivionScape stores about you, why, how long, and what you can ask us to do with it.
OblivionScape is a free, non-commercial hobby project run by private individuals. They decide what is stored and why, and the Contact section says how to reach them.
What we store
| Data | Why | How it is stored |
|---|---|---|
| Your email address | It is how you sign in, how we reach you about your account, and how an administrator identifies it | As you typed it |
| Your display name | The name of your account, on your account page | As you typed it |
| Your password | To sign you in | Hashed with argon2id and a random salt. We cannot read it, and nobody here ever sees it |
| Activation and password-reset links: a random token for each link we email you | To activate a new account, or to let you choose a new password | Only a hash of the token. An activation link works for 24 hours, a reset link for 1 hour and once; an account that is never activated is deleted 48 hours after it was made |
| Your account's state and the times you made it, activated it and last signed in, and a count of failed sign-ins | To run the account, and to lock it for a while after repeated wrong passwords | As recorded |
| Each signed-in launcher or browser: when it signed in, its user agent and its IP address | So you can see and end your own sessions, and to catch ban evasion and automated sign-ups | The address as it is, not hashed. A sign-in ends 90 days after it was last used; its record stays |
| Each play session: the character and realm, when it started and the IP address the launcher started it from | To let your game into the realm, and to investigate abuse | The address as it is, not hashed. A session ends after 12 hours; its record stays |
| Character names, their realm and slot, and when each was made or deleted | To run the game | As recorded |
| Game state the realm keeps: your character's position, health, magicka and fatigue, appearance, race, class, level, experience, attributes, skills and spells, the items and gold it carries, its quests, its party, guild and friends, its bounty and crimes, and its record on the Stats tab | It is the game | As recorded |
| Mail you send in the game, including its text | To deliver it | Until the recipient collects it |
| A connection log for each time a character joins the realm: which character, when it connected and disconnected, and the game and client versions | To debug faults | As recorded. The game server does not receive your IP address |
| Reports you send and reports about you, with what was written and where the sender stood; records of deaths, mutes, bans and what administrators do, with character names | Moderation and debugging | As recorded |
| Server log files, which include character names, where characters joined and died, chat lines, and who spoke by voice and where (not what was said) | To debug faults | Plain text on our servers |
| The website's access log: for each request, the IP address, the time, the page or file asked for, and the user agent of the browser or the launcher | To keep the site and the downloads running, and to stop abuse | Plain text on our servers |
What stays on your PC
The launcher keeps its settings and your saved sign-in in your Windows user's local application data folder; the sign-in is encrypted for your Windows user. The game folder holds the OblivionScape client's log, which is overwritten each time the game starts, the list of players you muted, and the play session the launcher starts. None of these is sent to us. If the game crashes, the game's own crash reporter may offer to send a report; that report is the game's own and does not come to us, and OblivionScape sends no crash reports of its own.
Voice chat
Voice is passed between players as they speak and is not recorded or stored anywhere. The server log notes who was speaking and where, not what was said.
Chat
Chat lines are not kept in our database. They appear in the server log files, with the name of the character who sent them.
Cookies and browser storage
The account pages (registration, sign-in and your account) set cookies that are strictly necessary and used for nothing else: one keeps you signed in on your account page, and one stops another site from submitting a form as you. They are sent only over HTTPS and only to this site. There are no advertising cookies and no third-party cookies, which is why this site has no cookie banner.
The website also keeps one value in your browser's local storage: that you accepted the Terms of Service, and on which date. It is not sent to us. Clearing your browser's site data removes it, and the prompt appears again on your next visit.
We email you only about your account: a password-reset link when you ask for one, and, when new accounts must be activated, the activation link. We send no newsletters and no advertising.
Email is delivered through Resend (resend.com), a delivery service that receives your address and the message in order to send it. We do not sell or rent your address, and we do not send email on anyone else's behalf.
Who can see it
The administrators who run the servers. Beyond them, the one third party that handles personal data is the email delivery service named above, which receives your address for each email we send. We do not share personal data with anyone else, and we use no third-party analytics or advertising service.
Other players can see your character's name, level, face and body, what it wears, where it is in the world, its party and guild, and what you write in chat, and they hear what you say by voice. That is the game working as intended.
Where it is held
On servers we run ourselves, in databases and log files. Your characters are backed up every night.
How long we keep it
Account and game data is kept while your account exists. Records of sign-ins and play sessions, connection logs, death records and moderation records are not deleted automatically. Server log files and the website's access log are kept until they are rotated away. When you delete your account, your email address, display name and password are removed from it and its characters are retired; ask us to remove the rest.
Your rights
Depending on where you live, you may have the right to ask for a copy of your data, to have it corrected, to have it deleted, or to object to how it is used. We honour those requests for any player who asks, wherever you live.
- A copy of your data: ask us and we export what we hold.
- Deletion: you can delete a character in the launcher and your whole account on your account page. Ask us to remove what remains, such as connection logs. Moderation records of a banned account are kept, because deleting them would defeat the ban.
- Correction: ask us.
Children
OblivionScape is not intended for children. Oblivion Remastered carries an age rating, and you are responsible for meeting it where you live. We do not knowingly hold data about a child; if you believe we do, tell us and we will delete it.
Security
Passwords are hashed with argon2id and never stored in a readable form. Sign-in tokens and email links are stored only as hashes. The website and the account service are served over HTTPS. Access to the servers is limited to the administrators who run them. If you find a vulnerability, please tell us rather than publishing it.
Changes to this policy
We may update this policy. The date at the top changes when we do.
Contact
Ask an administrator in the game's chat or on the OblivionScape Discord server. We answer requests about personal data through either.