Privacy Policy

Last updated: 3 October 2026

Avataris is run by Avataris ("we", "us"), a business based in Western Australia. This policy explains what personal information we collect through the game and this website, what we use it for, and what you can ask us to do with it. We handle personal information in line with the Australian Privacy Principles.

Questions or requests: support@playavataris.com.

What we collect

When you create an account

your Player Name, email address and password (stored only as a one-way hash, never as the password itself)
the sex you choose for your characters, and the date you signed up
your account number, which we give you

When you play

your characters and everything about them: vocation, level, skills, items, houses, guild, deaths and progress
when you log in and out, and the IP address you connect from

When you use the website

the IP address and browser details of each request, which our servers and Cloudflare keep in short-term logs
the cookies described below

When you buy something

Stripe collects your payment details (card number, name, email, billing country or postcode) on its own pages. We never see or store your full card number.
We keep a record of each purchase: what you bought, the price, the date, and the Stripe customer and subscription numbers linked to your account.

When you email us

your email address and whatever you tell us.

What is public

Your Player Name, your characters and their vocations, levels and skills, guild and rank, house, recent deaths, online status and last login date are shown on public pages of this website and in the highscores, and other players can see your characters in the game.

Your account number, email address and purchases are never shown publicly.

Why we use it

to run the game and your account, and to let you log in
to deliver what you buy, handle subscriptions, and answer refund and support requests
to keep the game fair and safe: enforcing the Rules, stopping cheating, spam, fraud and attacks
to send you messages about your account and purchases (we do not send marketing emails)
to keep the records the law requires, such as payment records for tax

Cookies

We only use cookies the site needs to work. There are no advertising or tracking cookies.

kotsession: keeps you logged in to your account on this website, and remembers a log-in code or password reset while you are in the middle of one; deleted when you close your browser or log out.
kotremember: only if you tick "Remember me" when logging in; keeps you logged in for up to 30 days.
Cloudflare may set security cookies that help tell people apart from bots.
Stripe sets its own cookies on its payment pages, to process payments and prevent fraud.

We do not sell your personal information. We share it only with:

Stripe, which processes payments (Stripe's privacy policy)
Cloudflare, which delivers and protects this website and runs the "are you human" check on our forms (Cloudflare's privacy policy)
Google, whose Google Workspace service sends our emails to you (confirmation links, log-in codes, account recovery) and holds our support mailbox (Google's privacy policy)
the company that hosts our servers
police, courts or regulators, when the law requires it or to protect people from harm or fraud

Stripe, Cloudflare, Google and our hosting provider may store and process information outside Australia, including in the United States and Europe. We only use providers that protect personal information to a standard comparable to Australian law.

How long we keep it

Account and game information: for as long as your account exists.
Sign-ups that are never confirmed: deleted when the confirmation link expires, after 24 hours.
Log-in codes and recovery links: deleted once used or expired; a record of which address and IP address asked for an email is kept for one day, to stop abuse.
Purchase records: for 5 years after the purchase, as Australian tax law requires, even if your account is closed.
Website logs: a few weeks.
Emails to us: as long as they are useful for your support request, and no more than 2 years.

Keeping it safe

The website only works over encrypted connections (HTTPS), passwords are stored as hashes, payments are handled by Stripe (certified to the highest payment card industry standard, PCI DSS Level 1), and access to our servers and database is restricted. No system is completely secure, so please use a password you do not use anywhere else.

Your choices and rights

You can ask us to:

tell you what personal information we hold about you and give you a copy
correct information that is wrong
delete your account and its information (we keep purchase records for as long as the law requires)

Email support@playavataris.com from the address on your account. We reply within 30 days. If you are unhappy with how we handled a privacy concern, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Age

The game is only for people aged 18 and over, and we do not knowingly collect information from anyone younger. If you think someone under 18 has created an account, contact us and we will close it and delete its information.

Changes to this policy

We may update this policy. The current version is always on this page, with its date at the top. If we make a change that matters, we will also tell you by email or on the website.