Privacy Policy

Vaerune is built around a simple principle: your game servers live on your own computer. The desktop app installs, runs, configures, and backs up dedicated game servers locally, on the disk of the Windows PC you install it on. This policy covers what we (Vaerune) collect through the website, an optional Vaerune account, billing, and the optional cloud-connected features described below. It does not extend our reach into your local server files any further than what is explicitly described in this policy.

This policy applies to visitors of vaerune.com, users who create a Vaerune account, and users of the Vaerune desktop app, whether or not they sign in.

In short: We collect the minimum needed to run your account, entitlements, and billing. Payment details are handled by Stripe, not stored by us. Your game servers, saves, and configuration files stay on your own machine.

2.1 Information you provide

• Account information. If you create a Vaerune account, we collect your email address (for email one-time-code sign-in) or an identifier and basic profile information from a third-party sign-in provider you choose to use: Discord, Google, or Steam. We receive only what that provider shares under your authorization (typically a provider account ID, display name, and avatar), not your password on that service.
• Billing information. If you purchase Vaerune Pro or subscribe to Vaerune Plus, payment is processed by Stripe. We receive limited billing metadata from Stripe (for example: that a payment or subscription is active, its plan, renewal date, and a billing email), but we do not receive or store full payment card numbers.
• Communications. If you contact us for support, we collect what you send us (for example, your email address and the contents of your message) to respond.

2.2 Information collected automatically

• License and entitlement status. Our entitlements service records which tier your account is on (Free, Pro, Plus) and, for Plus, subscription status, so the desktop app and website can unlock the right features.
• Minimal diagnostic and operational data.To keep the Service running and to fix bugs, we may collect limited technical data such as the desktop app's version number, general error signals surfaced when contacting our servers (for example, a failed entitlement check or a failed relay connection), and standard web server request logs (IP address, browser user agent, requested URL, timestamp) for vaerune.com and our API. As of the effective date of this policy, the desktop app does not run a background analytics or usage-tracking system beyond what is described in this section; if that changes, we will update this policy first.
• Cloud/Remote Supervisor traffic. If you are a Plus subscriber and enable the Cloud/Remote Supervisor, your desktop app opens an authenticated connection to our relay so you can view status and issue start/stop commands from a browser. That connection carries operational messages (server status, player counts, start/stop commands, log lines you view in the browser). See 2.4 below and Section 10 of our Terms of Service for how this works.

2.3 Information we do not collect

We do not collect or require, and the desktop app does not ask for, government ID, precise geolocation, or payment card numbers.

2.4 Cloud/Remote Supervisor content

The Cloud/Remote Supervisor relay is a pass-through control channel between your own desktop app and your own browser session; it is not a hosting or storage service. Console output you choose to view in the browser is streamed live and is not retained by Vaerune beyond what is needed to deliver it in transit.

In short: Your server installs, save files, and configuration files are stored locally on your PC. We do not upload, back up, or have access to them.

The Vaerune desktop app manages dedicated game servers entirely on your own computer: installed server files, save data, per-server configuration, mod files, backups, and local event/console logs are all written to your local disk (by default under your Windows user profile). None of this is transmitted to or stored on Vaerune's servers. When the desktop app checks for game or mod updates, or queries a running server for its player count, it talks directly to the relevant third party or to your own server (see Section 7); it does not route your save data or configuration through Vaerune's infrastructure.

• To create and maintain your account and authenticate you across the website and desktop app.
• To process purchases and subscriptions and to determine your current entitlements.
• To operate the Cloud/Remote Supervisor relay for Plus subscribers who enable it.
• To provide customer support and respond to requests.
• To maintain the security, integrity, and availability of the Service, including detecting abuse.
• To diagnose and fix bugs using the minimal diagnostic data described in Section 2.2.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use it to serve third-party advertising.

vaerune.com uses a small number of strictly necessary cookies and browser storage entries to keep you signed in (issued by our authentication provider, Supabase) and to remember basic preferences. We do not use third-party advertising or cross-site tracking cookies on vaerune.com. Our hosting provider(s) may log standard request metadata for security and performance purposes as described in Section 2.2.

The desktop app is a native Windows application, not a browser page, and does not use browser cookies; any local files it writes on your device (for example, a cached sign-in session) are covered by Section 3 above.

We share personal information only as needed to operate the Service, with the service providers ("subprocessors") below, each acting under its own privacy policy and, where applicable, under a data processing agreement with us. We do not sell personal information.

We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of Vaerune, our users, or others, and in connection with a merger, acquisition, or sale of assets (with notice to affected users where required by law).

To find, install, and update dedicated game servers and mods, the desktop app connects directly, from your own computer and your own internet connection, to third-party services including Steam/Valve, SteamGridDB, Thunderstore, mod.io, Modrinth, and Nexus Mods, as well as game publishers' own update servers. These requests (for example, downloading a server binary, fetching box art, or searching a mod catalog) are made directly to that third party and are governed by that third party's own privacy policy and terms, not this one. Vaerune is not affiliated with, and does not control the data practices of, any of these third parties.

We retain account information for as long as your account is active. If you delete your account, we delete or anonymize your account information within a commercially reasonable period, except where we are required or permitted to retain it (for example, billing records for tax and accounting purposes, or information needed to resolve disputes and enforce our agreements). Billing records held by Stripe are retained per Stripe's own policies and applicable law. Locally-stored server data (Section 3) is retained on your own device under your own control and is not something we retain or delete on your behalf.

We use reasonable administrative, technical, and organizational safeguards designed to protect information we hold, including encryption of data in transit (TLS), scoped access to production systems, and reliance on established providers (Supabase, Stripe, Fly.io, Vercel) for the infrastructure underlying authentication, billing, and hosting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to applicable law, you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of your account and associated personal information.
• Request a copy of your personal information in a portable format.
• Object to, or request that we restrict, certain processing.
• Withdraw consent, where processing is based on consent.

You can exercise many of these rights yourself from your account settings, or by contacting us using the details in Section 16. We will verify your request before acting on it and will respond within the time required by applicable law.

If you are located in the European Economic Area or the United Kingdom, the following additional information applies.

11.1 Legal bases for processing

• Contract: to create your account, provide the Service, and process payments.
• Legitimate interests: to secure the Service, prevent abuse, and improve reliability, balanced against your rights.
• Consent: for any optional processing where we ask for your consent (for example, optional marketing email, if offered).
• Legal obligation: where we must retain or disclose information to comply with law.

11.2 Data controller

The data controller for personal information described in this policy is Vaerune. You may lodge a complaint with your local data protection supervisory authority; for the UK, this is the Information Commissioner's Office (ICO).

11.3 Your GDPR rights

In addition to Section 10, EEA/UK users have the rights to data portability and to lodge a complaint with a supervisory authority, as described above.

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you additional rights:

• The right to know what personal information we collect, use, disclose, and (if applicable) sell or share.
• The right to delete personal information we hold about you, subject to certain exceptions.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information.
• The right to non-discrimination for exercising your privacy rights.

We do not sell or share personal information (as those terms are defined under the CCPA/CPRA) for cross-context behavioral advertising. Categories of personal information we collect map to those described in Section 2 (identifiers such as email and auth-provider IDs, commercial information such as billing status, and internet/network activity such as request logs). You can submit a CCPA request using the contact details in Section 16; we will verify your identity before responding.

Vaerune and its subprocessors may process and store information in countries other than your own, including the United States. Where required by applicable law (such as the GDPR), we rely on appropriate safeguards for such transfers: transfers of personal information out of the European Economic Area and the United Kingdom rely on the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, together with the subprocessors' own additional safeguards.

The Service is not directed to, and we do not knowingly collect personal information from, children under 13 (or, in the EEA/UK, under 16). If we learn that we have collected personal information from a child in violation of this policy, we will take steps to delete it. If you believe a child has provided us with personal information, please contact us using the details in Section 16.

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where required by law, provide additional notice (such as an in-app or email notice). Your continued use of the Service after a change becomes effective constitutes acceptance of the revised policy.

If you have questions about this policy or want to exercise a privacy right described above, contact us at support@vaerune.com.