Old Guards Ran Online: privacy notice

Notice version: 1. Last change: 2026-11-04. Published by Old Guard Games.

This notice tells you what data the service keeps, why, where, for how long, who sees it, and how to have it deleted.

The client shows this notice and the terms of use before you make an account.

"We" and "us" means the Old Guards Ran Online team.

1. What we keep and where

We keep no payment data. The service has no shop that takes real money.

We do not ask for your real name, address, phone number or date of birth.

The client does not send the files of your original game install to us.

Our game servers never receive your password. Only Firebase Authentication receives it, over an encrypted connection.

The server counts open connections from each IP address (at most 16) to stop abuse. It keeps this count in memory only.

When you tick "I agree to the Terms", the client does not send or keep a record of it. You accept by making the account (terms introduction and section 13).

2. Why we may use it

• To give you the service that you ask for: your account, your log in and your saved game.
• To keep the service safe and fair: to find bugs, stop cheating and stop attacks.
• When the law makes us do it.

We do not use your data for advertising. We do not make profiles of you for marketing. We do not sell your data.

3. Data on your own computer

• "Remember me" keeps your e-mail address and a sign-in token in %APPDATA%\RanOnlineRemaster\firebase-remember.bin, encrypted for your Windows user. It never keeps your password. Untick "Remember me" to empty the file.
• bin/server.ini and bin/ran-beta-ca.pem hold the server address and a public certificate. They hold no personal data.
• Bug report folders stay on your computer until you send them yourself (section 6).

4. How long we keep it

• Server logs with IP addresses: 30 days. Then they are deleted automatically.
• Account, character and game action data: until the test period ends. Then we delete it within 30 days.
• If you ask us to delete your account:
  1. On the day we confirm your request, we disable your sign-in and remove you from the game.
  2. We delete your game account, your characters and your Firebase sign-in within 7 days.
  3. All live data is gone within 30 days of your request.
• Backup copies age out on a fixed schedule. Our backup storage deletes each backup copy automatically when it is 29 days old or sooner. So each backup copy that can hold your data is gone within 30 days after we delete your account, or after the test period data is deleted.
• If we must restore a backup, we delete your account again before the game starts.
• Game action records that name your account (for example a trade with another player) can be kept up to 30 days more, to check fraud against the other player. Then we delete them.
• Ban and deletion records (section 1) hold no e-mail address and no name. We keep them while the test period runs, and we delete them when the test period data is deleted.

5. Who sees it

• Only the project team reads this data. They read it only to run the service, fix bugs and stop abuse.
• Google provides Firebase Authentication, Firestore, the backups and the server for the project. Google processes the data for us.
• We do not sell your data and we do not give it to advertisers.
• We give data to the police, a court or a regulator only when the law makes us do it.
• If a security problem exposes your personal data, we tell the players that it affects (by e-mail to the account address or by a notice in the game), and we tell the regulators when the law requires it, in the time that the law requires.

6. Bug reports

• F11, or Bug Report in the Esc menu, writes a folder on your own computer.
• The folder holds the client version, the time, your map and position, and recent client log lines.
• The game removes passwords, tokens, account names and e-mail addresses from the log lines.
• The game does not send the folder. You choose if you send it, through the contact route (section 9).
• Read the files first and remove anything that you do not want to share.

7. Your choices and rights

• Ask us what data we keep about your account, and ask for a copy.
• Ask us to correct it or to delete it.
• Stop using the service at any time. Ask us to delete your account if you do not want us to keep your data.
• Send your request through the contact route (section 9). Send it from the e-mail address of your account, or answer the confirmation e-mail that we send to that address. This is how we make sure that the account is yours.
• We answer within 30 days.
• Do not put account data or e-mail addresses in a public bug report.
• The game itself cannot delete your account or the data of your characters. Use the contact route.
• If you think that we use your data wrongly, you can complain to the data protection authority of your country, for example the National Privacy Commission (Philippines), the Personal Data Protection Committee (Thailand) or the Personal Data Protection Commission (Singapore).

8. Children

• The service is not for children younger than 16 (terms section 3).
• If we find that an account belongs to a child younger than 16, we close the account and delete its data as section 4 says.
• A parent or guardian can ask us to do this through the contact route (section 9).

9. Changes and contact

• If this notice changes, we put the new version in the game package, give it a new version number and announce it in the game.
• Questions and privacy requests go to the contact route.
• Contact route: the.oldguard.games+ran@gmail.com