Privacy Policy
Last updated: 2026-09-01
This describes what Waystone actually collects and does with your data today, not a generic template. It will change as the platform grows — check back here.
What we collect
When you create an account: a username, an email address, and a password (stored as a salted, one-way hash — we cannot see or recover your actual password). If you create a character in Aetherfall, its name, class, and appearance are stored against your account.
How you stay signed in
Your session is kept as a token in your browser's local storage, not a cookie. It isn't shared with any third party and is removed when you log out.
Password resets
If you request a password reset, we send a one-time link to your email address viaResend, a transactional email provider. That email contains a single-use link, valid for 30 minutes.
Who else sees your data
Nobody, beyond the infrastructure that runs Waystone: Resend (sending the emails above) and Cloudflare (routing traffic to our servers). We don't sell data, run ads, or use third-party analytics or tracking of any kind.
Deleting your data
Self-service account deletion isn't built yet. Until it is, contact us (see below) and we'll remove your account and data manually.
Contact
A dedicated contact address isn't set up yet — this section will be filled in before Waystone is promoted beyond an early/testing audience.
See also the Cookie Policyand Terms of Service.