Vantör Digital AB (“we”, “us”, “our”) operates the game Unyha and the website at unyhagame.com, together with our related applications and services (the “Services”). We are the data controller for the personal data described here. This Privacy Policy explains what personal data we collect, how and why we use it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and Swedish data protection law.
The controller responsible for your personal data is Vantör Digital AB, a company registered in Sweden. If you have any questions about this policy or how we handle your data, you can reach us at rob@realspawn.com.
Account data — your email address, and the account and character details you create in the game.
Gameplay and character activity — what your characters do in Unyha, such as deeds, quests, progression, Houses, and in-game events, along with any content you post in public areas such as forums.
Technical data — information collected automatically when you use the Services, such as IP address, browser and device type, operating system, and access times.
Communications — if you contact us, the contents of your message and your contact details.
Under the GDPR we must have a lawful basis for each use of your personal data. We rely on the following:
To provide the Services (performance of a contract) — creating and running your account, delivering the game, and enabling gameplay and its persistent world.
Our legitimate interests — keeping the Services secure, preventing fraud and abuse, understanding in aggregate how the Services are used, and improving and developing the game, balanced against your rights and freedoms.
Your consent — where we specifically ask for it, such as sending you optional updates or marketing emails. You can withdraw consent at any time.
Legal obligations — where we are required to process data to comply with the law.
We keep tracking to a minimum. We use only the cookies strictly necessary to operate the Services, such as keeping you signed in. For usage statistics we use Simple Analytics, a privacy-friendly analytics provider that measures overall traffic without cookies and without collecting information that identifies you personally. We do not use advertising or cross-site tracking cookies, and we do not sell your personal data.
Unyha's living world is driven by a system we call Autochronicle AI, which turns in-game character activity into an evolving history the game reacts to. It works from your characters' in-game activity — deeds, quests, and events — rather than from your personal life. To generate narrative text, part of this processing uses a third-party AI provider, OpenAI, acting as a processor on our behalf; we limit what is sent to the in-game activity needed for that purpose. We do not use your personal data to build advertising profiles.
We do not sell or rent your personal data. We share it only with service providers who process it on our behalf, and only as needed to run the Services:
Vercel — hosting for our website and application.
Cloudflare — network and connectivity for our infrastructure.
Simple Analytics — privacy-friendly, cookieless usage analytics.
OpenAI — AI processing for in-game narrative generation.
Valve / Steam — distribution of the game and account sign-in, where you access Unyha through Steam.
We may also disclose data where required by law, to protect our rights or the safety of our users, or in connection with a merger, acquisition, or sale of assets.
Some of our providers are located outside the European Economic Area (EEA), including in the United States (for example, OpenAI). Where we transfer personal data outside the EEA, we rely on appropriate safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
We keep your personal data for as long as your account is active and as needed to provide the Services. After that, we retain it only as long as necessary to comply with legal obligations, resolve disputes, and enforce our agreements, after which we delete or anonymise it.
Under the GDPR you have the right to:
access the personal data we hold about you;
correct inaccurate or incomplete data;
request erasure of your data (the “right to be forgotten”);
restrict or object to certain processing;
receive your data in a portable, machine-readable format;
withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, contact us at rob@realspawn.com. You also have the right to lodge a complaint with your local data protection authority. In Sweden, this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
The Services are not directed to children under the age of 13, and we do not knowingly collect personal data from them. If you are under the age of digital consent in your country (13 in Sweden), you should use the Services only with the consent of a parent or guardian. If you believe a child has provided us with personal data, please contact us and we will delete it.
We use appropriate technical and organisational measures to protect your personal data. However, no method of transmission or storage over the internet is completely secure, so we cannot guarantee absolute security. Please help protect your account by keeping your login credentials confidential.
We may update this policy from time to time. The “Last updated” date below shows when it was last revised, and if we make material changes we will take reasonable steps to notify you. The current version will always be posted on this page.
If you have any questions about this policy or your personal data, please contact Vantör Digital AB at rob@realspawn.com.
Last updated: 26 September 2026