Privacy Policy

Last updated November 2, 2026

This policy explains what personal information Vex0ra ("we") collects, why, and your choices. The operator is Vex0ra (operated from British Columbia, Canada). Contact: vaultlinesupport@proton.me.

1. What we collect

• Account data: username, a salted hash of your password (we cannot read your password), and a hashed recovery code. If you sign in with Discord, GitHub or Twitch, we receive only your account's unique ID and display name from that provider. We do not receive or store your email address or any other profile data.
• Gameplay data: balances, bets and results, game stats, rewards, tips sent and received, and the provably-fair seeds for your rounds.
• Sportsbook data: your bets (selections, stakes, odds, results, cash-outs) on the simulated Sportsbook, and the notifications we send you about them.
• Vault Arena data: your friend list and friend requests, friend chat messages, and the lobbies and matches you join (players, moves and results). No money is staked in Vault Arena.
• Responsible gambling data: whether you have started a self-exclusion, for how long, and the dates it was started, extended or lifted (and, for a staff action, who did it and the reason they recorded). Your answers to the self-assessment and the budget calculator stay in your browser and are not sent to us.
• Public profile data: your username, player ID, level and stats can appear on leaderboards, profiles, the live-bets feed and chat.
• Chat and support messages you send, including any contact detail you choose to add.
• Technical data: your IP address is processed to serve the Service; we store only a salted hash of it (not the raw address) for abuse prevention, such as spotting multiple accounts, rate limiting and enforcing bans. We also store a short browser identifier (user agent) for your active sessions.
• Payment data: when purchases are offered, payments are handled by a crypto payment provider. We receive confirmation, amount, the crypto coin used and an order reference. These payment records (receipt number, pack, amount, status and time) are deleted 30 days after the purchase. We never ask for your wallet's private keys or seed phrase.

2. Why we use it

To run your account and the games; to keep the Service fair and secure (fraud, abuse and multi-account detection); to process purchases and support requests; to meet legal obligations; and to improve the Service. We do not sell your personal information and we do not use it for third-party advertising.

3. Who we share it with

• Hosting: Cloudflare hosts the Service and database, so it processes the data on our behalf.
• Sign-in providers: Discord, GitHub or Twitch, only if you choose to sign in with them. Their own policies apply.
• Payment provider for purchases.
• Email delivery: support messages may be forwarded to our support inbox through an email delivery service.
• Demo Slots (freedemo.games and game studios): the Demo Slots page loads third-party games from freedemo.games inside a frame, and game thumbnails from static.freedemo.games. Your browser connects directly to them, so they receive your IP address and device information, and they or the studios may use their own cookies or similar technologies under their own privacy policies. We do not send them your username, balance or any account data, and those games do not use your Play Money. Our servers also fetch public game lists from freedemo.games, which contains no personal data.
• Bot protection: when you sign up or sign in, Cloudflare Turnstile may check that you are human. It runs in your browser and Cloudflare's privacy policy applies.
• Discord community and big-win posts: if enabled, large wins are announced in our Discord server with your username (or "Hidden player" if you hide your profile), the game, bet and payout. Links to Discord are just links; joining is your choice and Discord's policies apply.
• Fonts: the site loads fonts from Google Fonts, which means your browser contacts Google when the page loads.
• Authorities or advisers, where required by law or to protect rights, safety and the Service.

4. Cookies and local storage

See our Cookie Policy.

5. How long we keep it

Account and gameplay data, including your bet history and Sportsbook bets, are kept while your account exists, so you can review your play and verify results and so we can handle disputes, errors and abuse. Payment records are deleted 30 days after each purchase; we keep only a flag that the first-purchase bonus was used, so it can't be claimed twice. Chat messages are deleted 90 days after they are sent (the chat room only displays the last 24 hours). Vault Arena friend chat is deleted after 24 hours, lobbies a few hours after they are created, and unanswered friend requests after 30 days. Notifications in your inbox are deleted after at most 30 days. Self-exclusion records are kept for as long as your account exists, and we may keep them after closure where needed to honour the exclusion and prevent it being avoided by a new account. Support messages and security logs are kept only as long as needed for safety and legal reasons. "Start over" in Settings deletes your casino bet history, stats and rewards but not Sportsbook records, purchase receipts, chat, moderation or self-exclusion records. When you ask us to close your account we delete or anonymise your personal data, except what we must keep by law, for fraud prevention or to honour a self-exclusion.

6. Your rights

Depending on where you live (for example the EU/UK under GDPR, or California under CCPA/CPRA) you may have the right to access, correct, delete or export your data, to object to or restrict some processing, and to complain to your data protection authority. To use these rights, contact us through support. We will respond within the time required by law. We do not discriminate against you for using your rights.

7. Security

Passwords are stored as slow salted hashes, sessions use secure HttpOnly cookies, and traffic is encrypted. No system is perfectly secure, so please use a strong, unique password.

8. Children

The Service is only for people aged 19+. We do not knowingly collect data from anyone younger. If you believe a minor has an account, tell us and we will remove it.

9. International transfers

We operate from British Columbia, Canada. Our providers (such as Cloudflare) may store and process data in Canada, the United States and other countries, which may have different privacy laws. Where required we rely on appropriate safeguards for those transfers.

9A. Canadian privacy law

We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act. You can ask to see, correct or delete your personal information, or withdraw consent, by contacting us. If you are not satisfied with our response you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca).

10. California and other US state rights

Residents of California, Colorado, Virginia, Connecticut, Utah and other states with privacy laws may request to know, access, correct or delete personal information, and to opt out of "sale" or "sharing". We do not sell or share personal information for advertising. We do not respond to Do Not Track signals because we do not track you across sites. Use support to make a request.

11. Data breaches

If a breach affects your personal information we will notify you and the authorities as required by law.

12. Changes and contact

We may update this policy and will change the date above when we do. Questions: use the support form or email vaultlinesupport@proton.me.

Vex0ra is a virtual play-money entertainment game for 19+. Play Money has no cash value and cannot be redeemed.