Personal Data Processing Policy

1. General Provisions

1.1. This Personal Data Processing Policy (the "Policy") establishes the procedure for processing and protecting the personal data of users of the online game "Zarhold", available at zarhold.com, including its subdomains and API (the "Game").

1.2. The operator of personal data is the Game's administration (the "Operator", the "Administration"). Contact for enquiries: support@zarhold.com.

1.3. The Policy applies to all personal data that the Operator receives from users of the Game (the "User").

1.4. By using the Game, the User confirms acceptance of this Policy. If the User does not agree, the User must stop using the Game.

2. Data Processed

2.1. The Operator processes the following data of the User:

• the e-mail address and login provided at registration;
• the internal account identifier and in-game character names;
• technical information: IP address, data about the browser, device, and operating system;
• game progress and history of interactions with the Game (characters, achievements, items, battle results, in-game chat messages);
• information about completed purchases of digital goods (fact, date, and contents of the purchase — without payment-card data).

2.2. The Operator does not collect or process: passport data or other documents, photographs, biometric data, or special categories of personal data (health, beliefs, etc.).

2.3. The User's password is stored exclusively in irreversibly encrypted form (hash) and is not available to the Operator in plain form.

2.4. The Operator does not receive, process, or store payment-card data — payments are processed by a payment provider.

3. Purposes of Processing

3.1. Personal data is processed solely for the purposes of:

• registering and identifying the User and operating the account;
• providing game functionality (saving progress, matchmaking, leaderboards);
• processing and accounting for payments for digital goods;
• communicating with the User (notifications, support, access recovery);
• ensuring fair play — countering fraud and rule violations;
• analysing and improving the Game.

4. Legal Grounds for Processing

4.1. Processing is carried out on the basis of:

• the User's consent to the processing of personal data, expressed upon registration and use of the Game;
• the necessity of performing the Terms of Service, to which the User is a party.

5. Procedure and Conditions of Processing

5.1. The processing of personal data includes: collection, recording, systematisation, accumulation, storage, clarification (updating, modification), retrieval, use, anonymisation, blocking, and deletion.

5.2. Processing is carried out using automated means.

5.3. Data is stored for the lifetime of the account and for the period necessary to achieve the purposes of processing, after which it is deleted or anonymised.

5.4. The Game uses cookies and the browser's local storage (localStorage) to keep the sign-in session and local game settings.

6. Non-Disclosure and Transfer to Third Parties

6.1. The Operator undertakes not to disclose the User's personal data and not to transfer it to third parties, except:

• when required by law (at the request of authorised state bodies);
• when necessary to fulfil obligations to the User — in particular, when processing payments, the payment provider receives only the information necessary to process the payment;
• when the User has given separate consent.

6.2. Persons who have access to personal data in connection with operating the Game are obliged to keep it confidential.

6.3. Only game data is displayed publicly in the Game: character names, levels, achievements, leaderboard positions, and messages the User sends to the public chat. The e-mail address and technical data are not displayed publicly.

7. Rights of the User

7.1. The User has the right to:

• receive information about the processing of their personal data;
• demand clarification, blocking, or deletion of their data if it is incomplete, outdated, or inaccurate;
• withdraw consent to the processing of personal data;
• request deletion of their account and the data associated with it.

7.2. To exercise these rights, the User contacts the Operator at support@zarhold.com or via in-game support.

7.3. Withdrawal of consent and deletion of data necessary for the operation of the account entails termination of access to the account.

8. Data Protection

8.1. The Operator takes the necessary legal, organisational, and technical measures to protect personal data from unlawful access, destruction, modification, blocking, copying, and distribution, including:

• connection encryption (HTTPS/TLS);
• storing passwords only in hashed form;
• restricting access to data;
• backups.

9. Changes to the Policy

9.1. The Operator may amend this Policy. The current revision is always available on this page.

9.2. Continued use of the Game after changes are made constitutes the User's acceptance of the new revision of the Policy.

10. Contact Information

10.1. For any questions related to the processing of personal data, the User may contact the Operator by e-mail at support@zarhold.com or via in-game support.