Privacy policy
Last updated: October 2026
1. Controller
Jens Wegener
Vor der Unsohle 5
59581 Warstein, Germany
Email: rom@realmofmagic.org
No data protection officer has been appointed; none is required under Art. 37 GDPR.
2. Overview
Realm of Magic is a non-commercial online role-playing game (MUD) with this website. We process only the data needed to run the website and the game. There is no advertising, no tracking, no analytics and no third-party content - fonts, scripts and images are all served from our own server.
3. Hosting
The website and the game run on a server at the University of Bremen, Germany. Data is stored there and not passed on to other service providers.
4. Server log files
On every request the web server records the IP address, date and time, the address requested, the HTTP status code, the amount of data sent, the referring page and the browser type (user agent).
This serves security and troubleshooting, for example fending off attacks. The legal basis is our legitimate interest in a secure and working service (Art. 6 (1) (f) GDPR). Log files are deleted automatically after 14 days.
5. Logging in
Players log in to the website with their character's name and a web password they set in the game. To check it we read the character's data (name, level, password in encrypted form and, if given, email address) from the game database. The legal basis is providing the service you use (Art. 6 (1) (b) GDPR).
To protect against password guessing, failed login attempts are counted per IP address in memory for five minutes and then discarded (Art. 6 (1) (f) GDPR).
6. Cookies and local storage
After you log in we set a single cookie, nuxt-session. It holds, encrypted, who is logged in, and is deleted when you close the browser or log out.
Settings such as the look of the game client or the map layers shown are kept by your browser in local storage (localStorage). For logged-in players the game client's settings are also stored on the server, so they are available on other devices.
Both are strictly necessary for features you ask for (§ 25 (2) no. 2 TDDDG) and so need no consent. You can delete cookies and local storage in your browser at any time.
7. The game
Entering the game - through this website's browser client or by telnet - opens a connection to our game server. Your IP address or host name, login times and playing time are recorded. For each character we store the game data (name, password in encrypted form, attributes, items, progress) and, if given, an email address.
This is necessary to run the game (Art. 6 (1) (b) GDPR). We also use connection data to investigate breaches of the game rules such as multiple characters (Art. 6 (1) (f) GDPR). A character's name, level and presence are visible to other players, and partly in public on this website (for example in the list of players online).
Character data is kept as long as the character exists. On request we delete a character and its data.
8. Wiki and board posts
What you publish in the wiki, on the boards or elsewhere on the website is stored with your character name and the time, and is visible to other users. Earlier versions of wiki pages remain in the page history. The legal basis is Art. 6 (1) (b) GDPR.
9. Spell checking
The editor's spell checker sends the text to an instance of LanguageTool running on our own server. The text does not leave the server and is not stored after the check.
10. Contacting us by email
If you write to us, we use your details only to deal with your request (Art. 6 (1) (b) or (f) GDPR) and delete them once they are no longer needed for it.
11. Your rights
You have the right to
- access the data we hold about you (Art. 15 GDPR),
- have inaccurate data corrected (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR) and
- object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR).
An informal email to rom@realmofmagic.org is enough.
You may also complain to a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.