1. Data processed. In the course of providing the service, the Operator processes the following categories of personal data: account credentials (the password being stored exclusively in irreversibly hashed form), the e-mail address furnished at registration, in-game data pertaining to the User's characters, the network address from which the service is accessed, and a cryptographically hashed hardware identifier transmitted by the client upon authentication.

2. Purpose and legal basis. Such data is processed solely to the extent necessary for the performance of the agreement, the maintenance of service integrity and the enforcement of the game rules, pursuant to Article 6(1)(b) and (f) of Regulation (EU) 2016/679.

3. Diagnostic data. In the event of a malfunction of the client or launcher, diagnostic data generated at the time of the malfunction may be transmitted to the Operator for the exclusive purpose of fault analysis. Such data comprises the diagnostic record, a snapshot of the application's memory at the time of the malfunction, the network address and a pseudonymous installation identifier; it is accessible to authorised personnel only and is erased no later than ninety (90) days after receipt.

4. Third parties and cookies. Payment transactions are processed by third-party payment providers under their respective privacy policies; the Operator does not receive or retain payment instrument details. The website employs a single session cookie strictly necessary for its operation. The service is delivered through a content delivery network (Cloudflare), and the website loads fonts and scripts from third-party content delivery networks, each of which receives the visitor's network address in the ordinary course of serving such content. Personal data is not sold, licensed or otherwise disclosed to third parties, save where required by law.

5. Rights of the data subject. The User may exercise the rights of access, rectification and erasure by contacting support.