Privacy policy
Effective . Who we are, what the game collects, and what you can do about it.
The short version. You can play Væ Victis without an account. Today the game sends only anonymous play stats: no name, no email, no cookie, and no address is kept. You can switch them off in the game. Your saves stay in your own browser. If cloud saves arrive and you choose to sign in with Google, we will keep only what is needed to keep your save safe. We never sell or share it.
Who we are
Væ Victis ("the game") is a free browser game made and run by Serifeus Studio ("we", "us"). It is played at vaevictis.vip. The studio is based in Mexico; the data described here is stored on our own server in the European Union. We are the controller of the information described here. Write to us at hello@vaevictis.vip about anything on this page.
1. Anonymous play stats
To learn how far people get, where they stop and what kills them, the game counts plays. It works like this:
- What is sent. A few small messages, about one a minute and one when you leave the page:
- a random id made by your browser (16 random characters, not linked to you) and a random id for this visit;
- milestones the first time you reach them: the title screen, starting the story, each place reached, acts, bosses met or beaten, endings;
- deaths: where, what kind, and what killed you;
- the place you were in when a play stopped;
- play time, active time, and how many seconds you used a keyboard, a gamepad or touch;
- the game version and whether the screen is a phone, a tablet or a computer.
- What our server works out and then forgets. From the request it notes the browser family (for example Firefox) and the system family (for example Android), then drops the full browser string. It looks up the country from your IP address, in memory, and then throws the address away. The IP address is never written anywhere, not even in the web server's access log for this route. To stop floods, a salted, one-way hash of it is held in memory for one minute and never stored.
- What is never collected: your name, email, account, precise location, contacts, or any fingerprint. No cookie is set. No advertising or analytics company is involved; the messages go only to our own server.
- Where and how long. On our own server (see where your data is kept), for 400 days, after which it is deleted.
- Switching it off. In the game, open COUNSEL (settings) and turn PLAY STATS off. That also forgets the random id on your device; if you turn it back on you start as a new, unlinked player. Stats are also off when your browser sends Do Not Track or Global Privacy Control.
- Why (legal basis). Our legitimate interest in finding out which parts of a free game work, using data that does not identify you. You can object at any time by switching it off.
2. Your saves and settings, on your device
The game keeps your progress in your browser's own storage (localStorage). It stays on your device; we cannot see it.
| Key | What it holds |
|---|---|
vv.world, vv.save | Your saved game: where you are and the story's flags. |
vv.opts3 | Your settings: volume, subtitles, screen effect, HUD style. |
vv.introSeen | Whether you have seen the opening, so it can be skipped next time. |
vv.statsId, vv.statsMs, vv.stats | The random stats id, which milestones were already counted, and your PLAY STATS switch (section 1). |
To erase them, clear this site's data in your browser's settings. That also erases your save.
3. The offline cache
The game installs a service worker that stores the game's own files (code, pictures, sounds) in your browser's cache, so the next visit starts at once and works offline. It holds only the game's files and a note of which areas you have visited, so it can fetch what comes next. Nothing in it is sent to us. Clearing the site's data removes it.
4. Cloud saves with Google sign-in (planned, optional)
We plan to offer cloud saves, so you can carry your game between devices. It will be optional: the game will always work without signing in. This section describes what will happen when you choose to sign in. It takes effect when the feature launches, and we will update the effective date then.
What we will store
- Your Google account ID (the "sub": a number that identifies your account to us and nothing else).
- Your email address, only if the sign-in screen asks for it, to recognise you if you write to us and to tell you about changes to your account.
- Your display name, only if the sign-in screen asks for it, to greet you in the game.
- Your save data: the same progress and settings described in section 2, and when it was saved.
We will not ask for your contacts, files, calendar, YouTube, or any other Google data, and we will not post anything for
you. We will ask only for the basic sign-in permissions (openid, and email and profile at
most).
Why
Only to sign you in and keep your save. Legal basis: providing the service you asked for.
Where your data is kept
On a server run by Serifeus Studio, located in the European Union. No cloud provider has access to the save data beyond hosting the machine. Play stats (section 1) are kept on the same server.
How long
For as long as you keep your account. If you do not sign in for 2 years we delete the account and its saves. When you ask us to delete it, we do so within 30 days, including backups.
Deleting your account and data
- Email hello@vaevictis.vip from the address on your Google account, or tell us your display name, and ask us to delete your data. We will confirm when it is done.
- A delete my account option inside the game is coming with cloud saves.
- You can also remove the game's access at any time from your Google Account, under "Third-party apps and services" (myaccount.google.com/connections).
No selling, no sharing
We do not sell, rent or share your data with anyone, and we do not use it for advertising. We would disclose it only if the law requires us to.
Google API Services User Data Policy
Væ Victis's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Children
Væ Victis is a dark game, with gothic violence, blood and religious themes, made for adults and older teens. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has signed in, write to us and we will delete the account.
6. Your rights
Wherever you live, you can ask us to see, correct, export or delete the personal data we hold about you, or object to how we use it. Write to hello@vaevictis.vip; we answer within 30 days.
- In the EU, the EEA and the UK (GDPR) you also have the right to restrict processing, to withdraw consent at any time, and to complain to your local data protection authority.
- In Mexico these are your ARCO rights (access, rectification, cancellation and opposition) under the federal law on the protection of personal data held by private parties; you may also revoke your consent at any time.
- In California (CCPA/CPRA) you have the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, and we do not use it for targeted advertising. We will not treat you differently for using these rights.
Play stats are anonymous: we cannot link them to you unless you send us the random id from your device. Switching PLAY STATS off stops them at once.
7. Security
Everything travels over HTTPS. Our server is ours alone, kept up to date, and only the studio can reach the data.
8. Changes
If we change this policy we will update it here and change the effective date. If a change affects signed-in players in an important way, we will tell them in the game or by email before it takes effect.
9. Contact
Serifeus Studio · hello@vaevictis.vip · contact page