Fantasyquest

Privacy Policy

Effective date: September 25, 2026

Dark Forge Studio, LLC, based in California, USA, operates Fantasyquest and is responsible for the personal information described in this Policy. Contact us at admin@darkforgestudio.com for privacy questions or requests.

This Policy covers the public website and news at fantasyquest.gg, player accounts at accounts.fantasyquest.gg, restricted administration services at admin.fantasyquest.gg, and the Fantasyquest game and launcher. It explains the information used to run these services. A separate platform, such as Steam, handles information for its own services under its own privacy policy.

Information we collect and why

Account and sign-in information. When you register, we receive your email address and password. We store a password hash, your account identifier, creation and email-verification timestamps, account permissions, and sign-in session records. We use these to create and secure your account, verify your email, authenticate you, and connect your characters to your account. Verification emails are sent through Resend, which receives the recipient address and the message, including its verification link, and processes delivery information.

Game activity and progress. The game processes and saves character names, appearance choices, game-world location, character status, skills, quests, achievements or unlocks, inventory, equipment, virtual currency, trades, and other progression. It also processes gameplay commands and operational records needed to run the shared world, save progress, investigate problems, and maintain a fair game economy. Game-world location means your character's position, not your device's GPS location.

Chat and social features. We process messages, sender and recipient character names, channels, timestamps, guild membership and roles, party information, ignore lists, and channel preferences to deliver messages and operate social features. Other players see the information needed for the interaction, such as your character name, visible appearance, online presence, guild membership, or messages sent to their channel. Whispers go through our servers to their intended recipients; they are not an end-to-end encrypted service. Recipients may copy or share what they receive, so do not put sensitive personal information in chat.

Reports and support. When you submit a bug report, we collect its title, category, text, character name, game-world position and zone, game build, report time, and identifiers used to process the report and prevent abuse. The bug form also offers an initially selected option to include operating-system platform, engine version, frame rate, and window size; you can turn that option off before submitting. The character and game context is still included. Reports help us investigate and fix problems. If you contact support, we receive your email address, message, and whatever information you choose to send.

Connection and technical information. Connecting to the website, account service, launcher updates, or game exposes connection information such as your IP address and request time to the systems delivering the service. Web requests may include browser or client information, requested pages, referrers, and response or error information. We and our infrastructure providers use this information to deliver content, secure connections, prevent abuse, and diagnose availability and performance problems. Please avoid putting private information in URLs or report text.

Administrative records. Authorized operators can access account and character information needed to administer the service and investigate issues. We record some administrative actions, such as changes to game-master privileges, with the acting and affected account identifiers and time. News drafts, publication details, and editor identifiers are stored to manage news. Published stories are public; administrative account details are not part of the public news feed.

Cookies and information on your device

The account service uses an essential sign-in cookie called fq_session. A remembered sign-in can last up to 30 days. Without Remember me, the browser cookie is a session cookie and the server-side session lasts up to 12 hours. Signing out ends that session. Separate account and admin hosts use their own cookies. Blocking these cookies prevents the corresponding sign-in functions from working.

The launcher has separate Remember Email and Remember Login choices. If selected, it stores the chosen email and/or a sign-in credential on your device. It does not save your password. You can turn off those choices and sign out. The game also saves settings and interface preferences on your device, and some character settings are saved with your game data.

Cloudflare may use security cookies or browser challenges when needed by the protection features enabled for our sites. These help distinguish legitimate requests from abuse. Our application does not currently change its behavior in response to a browser's Do Not Track signal. That signal is different from a legally recognized privacy opt-out request; contact us to exercise applicable rights.

Who receives information

Cloudflare processes network and security information across the websites using its network, and other providers may process information about your use of their own services. Visiting an external platform such as Steam is subject to that platform's separate practices. Our disclosure of a provider here does not mean that the Studio receives everything that provider collects.

Where information is processed

The Studio is based in the United States. Information may be processed in the United States and in other countries where our service providers operate. Resend stores customer email data in the United States, and Cloudflare operates a global network. Privacy laws may differ from those where you live. Contact us for information about the arrangements relevant to your data and any transfer safeguards required by applicable law. Using the service does not waive your privacy rights.

Retention and deletion

Account and game records are kept to maintain your account and saved progress. Some records, including account records and bug reports, have no automatic expiry and remain until removed through maintenance or a deletion process. We consider whether information is still needed to provide the service, investigate an unresolved issue, prevent abuse, meet a legal obligation, or resolve a dispute when deciding how long to retain it.

Verification links expire after 24 hours. Sign-in sessions have the lifetimes described above; expiry of a link or session does not delete the account. Operational logs, administrative records, reports, and backups can have different retention periods. Backup copies are not removed immediately when an active record is deleted. Information should be deleted or de-identified when no longer needed for the purposes described here, subject to applicable legal requirements.

The account page lets you delete an eligible character. That does not delete your account, previously submitted bug reports, all historical records, or copies of messages held by other players. Limited records of deleted characters are kept to prevent old game saves from restoring them. There is currently no self-service button that deletes an entire account and all associated personal information.

To request account closure or deletion of personal information, email admin@darkforgestudio.com. Tell us which account or character is involved and what you are requesting. We may need to verify that you control the account. We will explain any information we must retain and the reason when responding to your request. Do not send your password, full payment details, or identity documents unless we specifically explain why additional verification is necessary.

Your choices and privacy rights

You can browse public pages without an account, choose whether to use chat, manage ignore lists and channel subscriptions, turn off optional bug-report diagnostics, sign out, and change launcher remember choices. An email address and authentication information are needed to create and use an account; game activity must be processed for online play.

You can email us to ask to review, correct, receive a copy of, or delete personal information. Depending on your location and the law that applies, you may also have rights to restrict processing, object to certain processing, withdraw consent where consent is the basis for a particular use, receive information in a portable form, or opt out of certain sales, sharing, targeted advertising, or profiling. These rights have conditions and exceptions; listing a right does not mean Fantasyquest carries out every activity it covers.

Send requests to admin@darkforgestudio.com, including enough information to identify your account and the request. An authorized representative may contact us where applicable law permits it; we may need evidence of their authority and verification of your identity. We will respond within the period required by applicable law. You may ask us to review a refusal and may complain to the privacy regulator responsible for your location. We will not penalize you for exercising rights protected by law.

If you are a registered user under 18 in California, you can also ask us to remove content you posted by emailing the same address with your character name and enough detail to locate it. Removal may not erase every copy, including content copied or reposted by others, and legal exceptions may apply.

Children

Fantasyquest is for people aged 13 and older, subject to any higher age requirement that applies. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information, contact admin@darkforgestudio.com so we can investigate and take appropriate steps to remove it and restrict the account. Players who are minors must have the permission required by our Terms of Use and applicable law.

Security

We use measures such as password hashing, expiring sign-in credentials, secure public account connections, and restricted administrative access to protect information. No online service or storage system can guarantee absolute security. Use a unique password, protect your email account, and contact us if you suspect unauthorized access.

Future paid features and policy changes

Optional subscriptions and purchasable cosmetics are planned. Before introducing payment processing or other materially different uses of personal information, we will explain the relevant data, providers, purposes, and choices. This Policy does not claim that those paid features are currently available.

We will post updates here with a new effective date. For material changes, we will provide a prominent notice on the website or through the services and obtain consent where required by law. Questions can be sent to Dark Forge Studio, LLC at admin@darkforgestudio.com.