Privacy Policy
1. Controller
The controller of your personal data is PGAME STUDIO PATRYK BOŻEK, ul. Grunwaldzka 8, 48-303 Nysa, Poland (NIP 7532486567, REGON 545621680). For anything related to your data write to [to be completed].
2. What we collect
Registered account: e-mail address, nickname and your password stored only as a one-way Argon2 hash — we cannot read it.
Guest account: a random nickname. No e-mail address and no password chosen by you.
Game data: your character, progress, items, currencies, battles, guild membership and in-game purchases (product, price and time).
Technical data: the IP address and browser identification (user agent) of each login session, and the IP address attached to security events such as logins, registrations and purchases.
We do not collect payment card details. When real payments are enabled they are handled by a payment provider under its own privacy policy.
3. Why and on what basis
To create your account and run the Game — performance of the contract (Art. 6(1)(b) GDPR).
To keep accounts and the Game secure and to detect abuse, using session and security logs — our legitimate interest (Art. 6(1)(f) GDPR).
To keep purchase records required by tax and accounting law — legal obligation (Art. 6(1)(c) GDPR).
We do not use your data for advertising profiles and we do not sell it. If we ever add analytics or advertising measurement, it will run only after you consent to it.
4. How long we keep it
Account and game data: as long as the account exists. Guest accounts that can no longer be reached are deleted automatically.
Login sessions expire after 30 days. Security logs are kept only as long as needed for security purposes.
Purchase records: for the period required by tax and accounting law, also after the account is deleted.
5. Who receives it
Your data is processed by our hosting provider on our behalf and, once real payments are enabled, by the payment provider. Other players see only your nickname, character, guild and ranking position.
6. Your rights
You have the right to access, correct and delete your data, to restrict or object to its processing and to receive it in a portable format. Write to [to be completed].
You can lodge a complaint with a data protection authority — in Poland the President of the Personal Data Protection Office (UODO), or the authority in your country of residence.
7. Cookies and local storage
ha_session — a strictly necessary cookie that keeps you logged in. It is HTTP-only, cannot be read by scripts and expires after 30 days or when you log out. The Game cannot work without it, so it does not require consent.
The Game also stores two small values in your browser's local storage: your battle playback speed and your cookie choice. They never leave your device.
There are currently no analytics, advertising or third-party cookies. The cookie notice lets you decide in advance whether such measurement may ever be used.