Icesus Privacy Policy

Version 2 · 2026-04-17

1. Who we are

Icesus is a multi-user text game ("MUD") running since 1995. The service is operated by Jää ry, a registered non-profit association.

Data controller: Jää ry
Business ID: 3049019-4
Domicile: Jyväskylä, Finland
Contact for any privacy matter: mud-admins@icesus.org

2. What we collect

When you create and use an Icesus account, we hold the following personal data about you:

Account (required) — character name and password hash. Used for authentication. Retained until you request deletion.
Contact (optional) — email address. Used for password recovery and critical account notices. Retained until deletion, or until you update it in game or ask us to remove it.
Verification (optional) — real name and phone number. Used for account ownership recovery in disputes. Retained until deletion, or until you update it in game or ask us to remove it.
Self-disclosure (optional) — homepage URL. Displayed in the finger command. Retained until deletion, or until you update it in game or ask us to remove it.
Technical — IP address on login and login history. Used for abuse prevention and fraud detection. Raw logs retained for 90 days, aggregated thereafter.
Gameplay — character save data and public chat channel logs. Used to provide the game service. Retained indefinitely; removed on request.
Consent — policy version you accepted, timestamp, and IP at acceptance. Retained as proof of consent under GDPR Art. 7, until you request deletion.

3. Why we hold it — lawful bases

Contract: Account data and gameplay saves are necessary to provide the service you have asked for.
Legitimate interest: IP logging for abuse prevention.
Consent: Optional fields (email, real name, phone, homepage) are held only if you voluntarily provide them. You may update them in game with chfn, and you may ask us to remove them at any time.
Legal obligation: We retain your consent record to demonstrate compliance.

4. Who we share your data with

We do not sell or rent your personal data. If you use features that connect to third-party services, information you choose to send through those features may also be shared with those services, such as Discord. The service runs on infrastructure we operate ourselves. Analytics on our public web properties are performed with self-hosted, cookieless software on the same infrastructure — no data leaves our servers.

5. Your rights

Under the GDPR you have the right to:

Access: see what we hold about you
Rectification: correct inaccurate data
Erasure ("right to be forgotten"): have your account and data deleted
Portability: receive an export of your data
Restriction (Art. 18): require us to pause processing while a dispute about accuracy, lawfulness, or objection is being resolved
Objection (Art. 21): object to processing that relies on our legitimate interest — for example, the IP logging we perform for abuse prevention
Withdraw consent for any optional field at any time

6. How to exercise your rights

In game, type privacy view to see a summary of the data we hold about you.
In game, type privacy policy to re-read this document.
For correction, deletion, export, or any question, email mud-admins@icesus.org. We respond within 30 days.

7. Age

The age limit to play Icesus is 16 years. We do not knowingly collect data from users under 16. See help rules for the full game rules.

8. Changes to this policy

When this policy changes in a material way, the version number above is incremented. Your next login after a version bump will display the updated policy and require you to accept it before continuing to play.

9. Controller and jurisdiction

The data controller is Jää ry (Business ID 3049019-4), domiciled in Jyväskylä, Finland. Questions, complaints, and enquiries: mud-admins@icesus.org.