Privacy Policy (GDPR)

1. Data controller

The controller of your personal data is Dawid Szadurski, Murrhardt, Germany. This applies to the website kroniki-krolestwa.com and to the Android app "Agarta: Kroniki Królestwa".

For any question about personal data, write to: support@kroniki-krolestwa.com.

2. Data we process

• Account: username, e-mail address and a password stored only as an encrypted hash.
• Profile: chosen avatar, frame, title and other profile settings.
• Gameplay and statistics: results, Fame Points, game history, progress, achievements and tournament participation. Your username is visible to other players.
• Friends: friends list, invitations and related notifications.
• Tickets and feedback: the content of messages sent through ticket and feedback forms.
• Notifications and newsletter: push subscription data and your e-mail address if you subscribe to the newsletter.
• Purchases: information about a purchased license and the purchase identifier from Google Play. We do not receive your card or bank account details.
• Technical data: IP address, device and browser data in server logs, and aggregated, anonymous visit statistics.

3. Purposes and legal bases

• Running your account and letting you play, including multiplayer games (Art. 6(1)(b) GDPR).
• Security of the service, abuse prevention and statistics on how the game works (Art. 6(1)(f) GDPR).
• Newsletter and push notifications, only with your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR).
• Handling purchases and legal obligations (Art. 6(1)(b) and (c) GDPR).

4. Recipients

We do not sell your data and do not share it for advertising. We use providers that process data on our behalf:

• hosting providers for the website, game server and database,
• Vercel: website hosting and anonymous visit statistics,
• Cloudinary: storage of images such as avatars,
• Resend: sending e-mails, for example password resets,
• Google: purchases through Google Play.

Some providers are based outside the European Economic Area, in particular in the USA. In that case data is transferred using the safeguards provided by the GDPR, such as standard contractual clauses.

5. How long we keep data

Account data is kept until the account is deleted. Server logs are kept for a short time, only as long as the security of the service requires. Purchase data may be kept longer where tax and accounting rules require it.

6. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. You can withdraw consent at any time. You can also lodge a complaint with the supervisory authority competent for your place of residence.

7. Account deletion

You can delete your account yourself in the profile settings or by sending a request to support@kroniki-krolestwa.com. Details are on the account deletion page.

8. Cookies and browser storage

We use session cookies and browser storage only to keep you logged in and to remember game settings. We do not use cookies for advertising.

9. Children

The game is not directed at children. People under 16 may use an account only with the consent of a parent or legal guardian.