Privacy Policy

Last updated: 2026-06-01

1. Controller

Chris Schmidt
Darmstädter Str. 8, 64372 Ober-Ramstadt, Germany
Email: mad@shardworlds-game.com

2. Privacy Contact

For privacy requests, contact: mad@shardworlds-game.com

3. Data We Process and Why

  • Account data: username, email, password hash, language settings to provide your account.
  • Game/profile data: characters, game state, messages, trade/combat records to operate gameplay.
  • Billing/subscription data: subscription status, payment provider IDs, invoice events to perform the contract.
  • Security data: IP addresses, login/session events for abuse prevention and service security.
  • Support/legal data: requests (e.g., cancellations) to comply with legal obligations and communication duties.

4. Legal Bases (Art. 6 GDPR)

  • Art. 6(1)(b) GDPR (contract and pre-contractual measures)
  • Art. 6(1)(c) GDPR (legal obligations)
  • Art. 6(1)(f) GDPR (legitimate interests, especially service security and stability)
  • Art. 6(1)(a) GDPR (consent where required)

5. Cookies and Similar Technologies

We use technically necessary cookies, including session cookies and language settings. For non-essential storage/access on end-user devices, consent is obtained where legally required.

6. Recipients / Processors

  • Hosting infrastructure providers
  • Stripe for payment processing
  • Email providers for transactional messaging (password reset, verification, notices)

7. Retention

We keep personal data only as long as necessary for the relevant purpose or as required by law. Data is then deleted or anonymized.

8. International Transfers

If service providers process data outside the EU/EEA, this is done only with appropriate safeguards (such as EU Standard Contractual Clauses) and GDPR compliance controls.

9. Your Rights

You have the right to access, rectification, erasure, restriction, portability, and objection. You can withdraw consent at any time with effect for the future.

10. Complaint with a Supervisory Authority

Competent or lead supervisory authority:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
https://datenschutz.hessen.de/