Privacy policy

AetherLine is an independent fan site for Aion 2 players. It is not affiliated with NCSOFT. This policy explains what personal data the site collects, why, and what you can do about it. For any question or request, email contact@aetherline.blog.

1. Reading the site

You can read every guide without an account. Our server needs your IP address to send you pages, but we don’t store it for readers. We don’t use analytics, advertising or tracking cookies, and fonts are served from our own server, so no third party sees your visit.

2. If you create an account

• The name you choose and your email address.
• Your password, stored only as a one-way hash (argon2id). We can’t see or recover it, only check it when you sign in.
• When you verified your email, and when your account was created and last changed.
• If you sign in with Google: your Google account ID, plus the name, email address and profile picture link that Google shares with us.

3. Signing in and staying safe

• When you verify your email, reset your password, or delete an account that has no password, we email you a 6-digit code (valid for 10 minutes) or a reset link (valid for 1 hour). We store only a hash of it, never the code or link itself.
• To stop password guessing and spam, we record a hashed form of your IP address when you sign in, register or ask for a code, and a hashed form of the email address entered when someone asks for a password reset. These records are deleted after 24 hours.

4. Cookies and browser storage

• Reading the site sets no cookies. When you sign in, we set a cookie that keeps you signed in for 7 days, renewed while you use the site. Accounts can’t work without it, so it doesn’t need a consent banner.
• Your Elyos or Asmodian theme choice is saved in your browser’s local storage. It stays on your device and is never sent to us.

5. Why we use your data

• To run your account and sign you in, because you asked us to (performance of a contract).
• To send account emails: verification codes and password resets. We don’t send newsletters or marketing.
• To protect the site and its users from abuse (our legitimate interest).

6. Who else handles it

• The site, its database and our mail server run on a server we rent from Contabo in the European Union. We send email from our own mail server, not through an email service.
• If you choose Google sign-in, Google handles that sign-in under its own privacy policy and may process data outside the EU.

We don’t sell your data or share it for advertising. We share it with others only when the law requires it.

7. How long we keep it

• Account data: until you delete your account.
• Codes and reset links: they stop working after 10 minutes and 1 hour.
• Hashed records for abuse protection: 24 hours.

8. Your rights

On your account page you can change your name, download a copy of your data and delete your account and everything linked to it. For anything else, such as correcting your email or objecting to or limiting how we use your data, email contact@aetherline.blog from the address on your account, or we may ask you to confirm the request from it. We answer within one month. If you think we handle your data wrongly, you can complain to the data protection authority where you live.

9. Children

Accounts are for people aged 16 and over. If we learn that an account belongs to someone younger, we delete it. If you think this has happened, email contact@aetherline.blog.

10. Changes to this policy

We update this policy when the site changes how it handles data. The date at the top shows the latest version. See also our terms and conditions.