Data Protection Policy – XP Chronicle

1. Introduction

We are committed to protecting your personal data and safeguarding your privacy while you interact with our video game platforms. This Data Protection Policy outlines how we handle your personal information when you use our video games, participate in online features, make purchases, create user accounts, and engage with our digital content.

In the gaming industry, user trust is essential. As developers and providers of interactive entertainment experiences, we strive to ensure your personal information is collected and processed responsibly, securely, and transparently. Our goal is to allow you to enjoy immersive gameplay without worrying about the misuse or unauthorized disclosure of your data.

2. Scope of the Policy

This policy applies to all players who access and use our video games across platforms, including console, PC, and web-based environments. It covers:

Game applications and platforms.
Online multiplayer services.
Player accounts and profiles.
Game websites, launchers, and forums.
In-game purchases and downloadable content (DLC).
Customer support and community interaction.

By using our games and services, you agree to the practices described in this Data Protection Policy.

3. Types of Data We Collect

We may collect the following categories of personal data when you interact with our services:

User Account Information: Username, password (encrypted), email address, date of birth, and region.
Gameplay Data: Game progress, character stats, achievements, match history, items owned, and playtime.
Device Information: IP address, operating system, hardware specifications, browser type (for web-based games), and device identifiers.
Connection Data: Login times, session duration, game version, and network performance metrics.
Purchase and Billing Data: Transaction history, payment method, billing region, currency used, and digital receipts.
Support Interaction: Support ticket content, chat transcripts, and email exchanges with customer service.
Multiplayer and Social Data: Friend lists, in-game messages, group memberships, and voice chat usage.
Behavioral Data: Menu preferences, controls used, game modes played, and content accessed.
Optional Personalization Data: Avatars, player bios, user-generated content, and personal settings.

We do not knowingly collect data from users under the minimum age required by applicable law.

4. Methods of Data Collection

We gather your personal information through various channels:

Direct Input: When you sign up for an account, register for events, make purchases, or contact support.
Automatic Collection: Via telemetry systems, analytics tools, and in-game tracking mechanisms that monitor how games are used.
Third-Party Integrations: If you connect your account with other platforms (such as a console network), we may receive certain information based on your permissions.
Community Features: Data is collected through forums, chatrooms, or multiplayer interactions that involve user communication.

Data collection is designed to improve your user experience and ensure the proper functioning of our video games and services.

5. Use of Your Personal Data

Your data is processed for a variety of essential purposes, including:

Service Delivery: To enable core game functions, save your progress, and allow access to multiplayer features.
Account Management: To create and maintain your profile, track statistics, and sync preferences across devices.
Game Improvement: To analyze user behavior, identify bugs, balance gameplay, and introduce new content.
Customer Support: To respond to inquiries, solve technical issues, and offer personalized help.
Security and Integrity: To prevent cheating, enforce community rules, detect fraud, and ensure fair play.
Communication: To provide updates about game events, system changes, or service interruptions.
Marketing (with consent): To deliver optional promotional content, offers, and game-related news.
Compliance: To fulfill obligations under data protection laws and respond to lawful requests by authorities.

We process data only for purposes that are lawful and directly related to the services we provide.

6. Legal Grounds for Processing

We rely on the following legal bases to process your personal data:

Performance of a Contract: Most of our data processing is required to fulfill the services you signed up for, including delivering the game and its features.
Legitimate Interests: We may use data to optimize our games, improve security, or monitor system usage, provided these interests do not override your rights.
Consent: For optional features such as newsletters or certain types of tracking, your prior consent is required and can be withdrawn at any time.
Legal Obligations: In some cases, we are legally required to retain or share certain information, such as billing data for tax purposes.

You may request more information on the specific legal basis applied to your data by contacting our support team.

7. Data Retention Policy

We store your data only as long as necessary to fulfill the purposes outlined in this policy or to comply with applicable regulations. Retention periods depend on:

Type of Data: Game logs may be retained for a few months, while account information may persist until deletion.
Account Status: Data linked to active accounts is maintained, while inactive accounts may be subject to archiving or deletion after a period of inactivity.
Legal Requirements: Transaction records and payment data are stored longer to comply with financial regulations.

Upon expiration of retention periods, data is deleted securely or anonymized to remove any personal identifiers.

8. Security of Your Data

We use industry-standard practices to protect your personal information:

Data Encryption: Sensitive data such as passwords and payment credentials are encrypted.
Access Controls: Only authorized personnel can access specific systems where personal data is stored.
Monitoring Tools: Our platforms are regularly scanned and monitored for suspicious activity or vulnerabilities.
Data Minimization: We avoid collecting more information than is necessary and encourage players to limit optional data sharing.

While we take precautions to prevent breaches, we cannot guarantee absolute security. Users are advised to use strong, unique passwords and to protect their account credentials.

9. Sharing of Personal Data

We do not sell or rent your personal data. However, certain data may be shared in the following scenarios:

With Service Providers: Such as payment processors, cloud storage providers, analytics services, and customer support platforms. These entities are contractually bound to use your data only for the services they provide on our behalf.
With Platform Partners: If you play on console or through a distribution platform, data may be shared with the provider to enable core functionality.
Within Our Company Group: If applicable, data may be processed by subsidiaries or affiliates under the same privacy safeguards.
Legal Disclosures: Data may be disclosed when required by law, court order, or a regulatory authority.

All data sharing is conducted in accordance with data protection laws and internal security protocols.

10. International Data Transfers

Some of your data may be transferred to servers or partners located in other countries. To ensure protection regardless of location:

Data is transferred using secure methods and protected by contractual obligations.
Countries involved must meet adequate data protection standards or have appropriate safeguards in place.
We monitor the data transfer process to comply with international privacy regulations.

You may request information about specific transfer mechanisms used for your data.

11. Your Data Protection Rights

As a data subject, you have the following rights:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Ask us to delete your data when it is no longer necessary.
Right to Restriction: Limit how we process certain information.
Right to Object: Object to specific uses of your data, including profiling or marketing.
Right to Data Portability: Request your data in a format that allows you to transfer it to another provider.
Right to Withdraw Consent: Revoke your consent for optional data use at any time.

To exercise your rights, you can contact us through the in-game support system or your user dashboard. Verification steps may be required to protect your privacy.

12. Policy Updates

We may update this Data Protection Policy periodically to reflect changes in legal requirements, technological developments, or business practices. When significant changes occur, we will notify users through prominent notices in-game or via communication tools provided within the platform.

Continued use of the game after such changes will be considered acceptance of the updated policy.

13. Contact Information

For any questions, concerns, or requests related to this Data Protection Policy or your personal data, you may contact our privacy support team via the methods provided in-game or through the account management interface. We aim to respond promptly and with clarity to all data protection inquiries.