The public ledger
What other members can see
Your handle, display name, selected portrait, profile text, posts, AP reputation, public guild membership, and Arena results are community records. Do not publish private information in those fields.
Return to RumorsCommunity record · effective July 25, 2026
Your account data, without the fog.
Ivalice Labs uses the information needed to run member accounts, community features, and proportionate abuse response. It is not sold, used for behavioral advertising, or turned into automatic guilt by association.
Behind the counter
Private account information
Your email address, Firebase account identifier, verification and access state, role grants, sanctions, moderation cases, and audit events are restricted operational records. Access is controlled by server-issued roles and checked again when a protected action is requested.
Account defense
Session and network observations
After a verified member signs in, the protected security service may record the platform-resolved IP address, a bounded browser user-agent, a coarse client label, sign-in provider, token timing, and App Check status. The browser cannot submit its own IP value. A secret-keyed fingerprint helps compare retained observations without exposing the address in ordinary moderation views.
Enforcement
How staff may use it
Records may be used to secure an account, investigate a report, document ban evasion, revoke active sessions, or support a case-linked moderation decision. Severe sanctions require higher authority; suspension and ban actions disable access and revoke refresh sessions through the trusted server.
Safeguards in the Judge Hall
Power should leave a record.
Masked for ordinary review
Moderators see a coarse network mask and a short one-way network ID. They do not receive raw IP addresses, private email, or full browser details.
Raw access is exceptional
Only an Administrator or Owner with a recent sign-in can reveal an exact IP address. A written reason and the member record are added to the audit trail.
Short, bounded retention
Session observations expire after 90 days by default. The service keeps no more than 64 observations for one account and removes expired records on a schedule.
A network is not a verdict
Shared Wi-Fi, carriers, schools, workplaces, and VPNs can place unrelated people on one address. A network watch is an investigative note, never an automatic ban.
Local and essential storage
Firebase may keep essential authentication state in your browser. The site also remembers interface preferences such as Pub atmosphere. Ivalice Labs does not currently operate an advertising profile or cross-site tracking program.
External services
Twitch embeds and links you choose to open may receive ordinary connection information under their own policies. External images in Pub posts remain click-to-open because loading them directly can reveal a reader's IP address to the image host.
Questions and corrections
Use the Account Desk to review your current member identity. For a data correction, account closure, or privacy question, contact an Administrator through the Pub while the dedicated request desk is being prepared.