Privacy Policy

Last updated

This policy explains how [company legal name] ("we", "us") collects and uses personal data when you use Battle Zebra at https://battlezebra.newgames.dev, and the rights you have over it.

1. Who is responsible for your data

The controller of your personal data is:

[company legal name]
[company address]
Email: [company email]

For privacy questions and requests, write to [support email].

2. The data we collect

  • Account data: your email address, display name and password (stored only as a one-way hash, so we cannot read it), whether your email address is verified, and when you created your account and last signed in.
  • Game data: your progress, settings, scores, rankings, virtual currency and items, and anything you create or write in the game, such as names or messages.
  • Purchase data: what you bought, when, the price, currency and payment status, and order and invoice numbers. Our payment provider handles your payment details. We receive a confirmation and a reference, not your full card number.
  • Support data: the messages you send us and our replies.
  • Technical and security data: your IP address, browser and device type, and records of sign-ins, failed sign-in attempts and other security events.
  • Email records: when we sent you an email, which kind of email it was and whether it was delivered. Our logs do not keep the content of these emails.

We do not ask for sensitive data, such as health information, and we do not buy data about you from anyone.

3. Why we use your data, and our legal bases

  • To provide the game and your account: creating your account, signing you in, saving your progress, running matches and leaderboards, and delivering what you buy. Legal basis: our contract with you (Article 6(1)(b) GDPR).
  • To take payments and keep records: processing purchases, refunds and chargebacks, issuing receipts and invoices, and keeping accounting records. Legal bases: our contract with you, and our obligations under tax and accounting law (Article 6(1)(c) GDPR).
  • To keep the game safe and fair: preventing fraud, cheating and abuse, protecting accounts and enforcing our terms. Legal basis: our legitimate interest in a secure and fair game (Article 6(1)(f) GDPR).
  • To send service emails: email verification, sign-in links and codes, password resets, receipts and important notices about your account or our terms. Legal bases: our contract with you, and our legitimate interest in keeping you informed.
  • To answer you: handling your support and privacy requests. Legal bases: our contract with you, our legitimate interests and our legal obligations.
  • To improve the game: fixing problems and understanding how features are used, from data the game already has. Legal basis: our legitimate interests.
  • Marketing: we send newsletters or offers only if you opt in, and you can unsubscribe at any time. Legal basis: your consent (Article 6(1)(a) GDPR).

Where we rely on legitimate interests, you can object, as explained in section 7. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

4. Who we share your data with

We use these service providers ("processors"). They process personal data only on our instructions, under contracts that require them to protect it:

  • Hetzner Online GmbH, Germany: hosting of the game, its servers and its database

We also share data when the law requires it (for example with tax authorities or courts), to protect the rights and safety of players and others, and with a buyer if the game or our business is sold, who must then respect this policy. We never sell your personal data.

5. International transfers

Some of our providers may process data outside the EU, the EEA or the UK. When they do, we protect the transfer with safeguards the law recognises, such as an adequacy decision or standard contractual clauses approved by the European Commission, and the UK equivalents.

6. How long we keep your data

  • Account and game data: while your account is open. When you close your account, we delete or anonymise this data within 30 days, apart from the records below.
  • Purchase records and invoices: as long as tax and accounting laws require, usually between 5 and 10 years.
  • Security records and email delivery logs: up to 12 months.
  • Support messages: up to 2 years after your request is resolved.
  • Backups: deleted data can remain in encrypted backups for up to 30 days, until those backups are replaced.

7. Your rights

Under data protection law, including the GDPR and the UK GDPR, you have the right to:

  • access your personal data and get a copy of it;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict how we use your data;
  • receive your data in a portable format, or have it sent to another service;
  • object to our use of your data based on legitimate interests, and to direct marketing at any time;
  • withdraw your consent at any time where we rely on consent, without affecting what we did before.

To use any of these rights, write to [support email] from the email address of your account. We may need to confirm your identity. We reply within one month, and in most cases it is free.

You also have the right to complain to a data protection authority, in particular in the country where you live or work, or where you think the problem happened. We would appreciate the chance to resolve your concern first.

8. Cookies

We use only the cookies that the game needs to work, such as the cookie that keeps you signed in. Our Cookie Policy describes them.

9. Security

We protect personal data with appropriate technical and organisational measures, including encrypted connections, hashed passwords, encrypted storage of our service credentials, access controls and regular backups. No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the authorities as the law requires.

10. Children

The game is not meant for anyone under 13. If you believe someone under 13 has given us personal data, write to [support email] and we will delete it.

11. Changes to this policy

We update this policy when our practices change. If a change is significant, we will tell you in the game or by email before it applies. The "last updated" date shows the current version.