Ethereal Realms Entertainment ("we", "us") is the trading name of Joshua Longworth, a sole trader based in England, who is the controller of the personal data described here. For any privacy question or request, email info@etherealrealms.co.uk.

You can browse this website without an account. We only collect personal data when you create or use a Lightspire account, play online, contact us, or comment on our Instagram or Facebook posts.

We do not use advertising trackers, sell personal data or use it for automated decisions that have legal or similarly significant effects on you.

Lightspire news emails are optional. You choose whether to receive them when you create your account, and you can turn them off at any time from your account preferences or by emailing info@etherealrealms.co.uk. Account and security emails are still sent while your account exists because they are needed to run it.

We only use cookies and browser storage that are strictly necessary for signing in and keeping your account secure. We do not use analytics, advertising or social media tracking cookies, so there is nothing to opt in to.

Embedded videos on this site are served from our own server. Links to Steam, Discord, Bluesky, Instagram, YouTube, Facebook and Amazon take you to those services, which have their own privacy policies.

We use YouTube API Services to upload our own development videos to the Ethereal Realms YouTube channel. This is an internal tool used only by us. It does not access the YouTube accounts of website visitors or players.

When the tool uploads a video, it stores only the YouTube video ID and link, so that the same video is not uploaded twice. It does not collect, view or store information about YouTube viewers, and it does not share YouTube data with anyone.

Use of YouTube is also subject to the Google Privacy Policy. Access for our tool can be revoked at any time from the Google security settings page. Stored video IDs and links are deleted on request to info@etherealrealms.co.uk, or within 30 days of access being revoked.

We use an internal tool with Meta's Instagram and Facebook APIs to publish our own development posts to the Lightspire Instagram account and Facebook Page, and to see how those posts perform. The tool is used only by us. It does not access the Instagram or Facebook accounts of website visitors or players, and it never posts, replies or sends messages to anyone.

When someone comments on one of our posts, the tool can read the comment text, the commenter's public username and when it was posted, so that we can understand feedback and questions about Lightspire. We also read the view, reach and engagement figures Meta provides for our own posts, and audience figures that Meta aggregates (for example by country or age range), which do not identify individual followers.

Comments are stored on our own computer, are not shared with anyone and are not used for advertising. Summaries we write from them do not name the people who commented.

To have a comment you made removed from our records, email info@etherealrealms.co.uk with the post and your username and we will delete it within 30 days. Deleting a comment on Instagram or Facebook also removes it from our next collection. Use of Instagram and Facebook is also subject to Meta's Privacy Policy.

We only share personal data where it is needed to run the service:

• Our hosting and email providers, who store data and send account emails on our behalf under contract.
• Google, Microsoft, Apple and Valve (Steam), when you choose to sign in or link an account with them.
• Other players, who can see your username, match results and leaderboard standing in online play.
• Authorities or advisers where the law requires it, or to protect the rights and safety of players and the service.

Some of these providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.

• Account, game and ranked data: for as long as your account is open. When you ask us to delete your account we remove or anonymise it within 30 days, except where we must keep limited records for legal or security reasons.
• Verification and password-reset codes: until they are used or expire.
• Security and server logs: no longer than 12 months.
• Comments collected from our Instagram and Facebook posts: no longer than 12 months.
• Mailing-list consent records: while you are subscribed and for a short period afterwards so we can show we honoured your choice.
• Emails you send us: as long as needed to deal with your enquiry, and no longer than two years after our last contact unless we are working together.

You must be at least 13 years old to create a Lightspire account. We check this using the date of birth you give when signing up. If you believe a child under 13 has created an account, email info@etherealrealms.co.uk and we will delete it.

The website and account service are served only over HTTPS. Passwords are hashed, session cookies are secure and HTTP-only, sign-in attempts are rate-limited and database access is restricted. No system is perfectly secure, so please use a password that is unique to Lightspire.

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use it;
• receive your data in a portable format; and
• withdraw consent at any time, for example to the mailing list.

To make a request, email info@etherealrealms.co.uk from the address linked to your account. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, although we would appreciate the chance to help first.

We will update this page when our services or practices change and revise the date at the top. If a change significantly affects how we use your data, we will let account holders know by email before it takes effect.