Privacy Policy

Last updated: 17 October 2026

1. Who is responsible for your data

The controller of personal data processed on perun-ots.online and on the PerunOTS game server is the operator of PerunOTS (a sole proprietorship registered in Poland), e-mail: contact@perun-ots.online. The operator's full name, address and tax id are shown to logged-in players on the Buy Perun Coins page before every purchase and in every purchase confirmation e-mail, and are sent to anyone who asks by e-mail. Write to this address with any question about your data.

2. What data we process

• Account data: account name, password (stored only as a one-way hash), e-mail address, country, creation date.
• Game data: characters and everything that happens to them in the game (items, skills, deaths, guilds, houses, chat in public channels), logins and logouts.
• Technical data: IP addresses used to log in to the game and the website, data about the game client needed for protection against cheating, server and website logs.
• Purchases: history of Perun Coins and shop purchases; for paid orders also the data passed to us by the payment provider (transaction id, amount, payer e-mail). We never receive your card or bank login details.
• Messages you send us by e-mail or the helpdesk.

3. Why we process it

• To run your account and the game, and to deliver what you buy (performance of the contract, Art. 6(1)(b) GDPR).
• To protect the game and its players: preventing cheating, multi-accounting abuse, account theft and spam, enforcing the server rules (our legitimate interest, Art. 6(1)(f) GDPR).
• To keep accounting and tax records of payments (legal obligation, Art. 6(1)(c) GDPR).
• To answer your messages and to send e-mails you asked for, such as account recovery or e-mail verification.

Character names, levels, deaths, guilds and similar game information are public on the website (highscores, character profiles). We do not sell your data and do not use it for advertising.

4. Who else sees it

Only the providers we need to run the service, under data processing agreements: the server hosting provider (OVH, EU), the e-mail provider (MyDevil, Poland) and, for paid orders, the payment provider handling your payment. Data may be disclosed to authorities when the law requires it.

5. How long we keep it

• Account and game data: as long as the account exists. You can ask us to delete your account at any time.
• IP addresses and logs: up to 12 months, longer only when needed for an ongoing abuse case.
• Payment records: 5 years from the end of the year of the payment, as required by tax law.

6. Your rights

You may request access to your data, its correction or deletion, restriction of processing, a copy of your data (data portability), and you may object to processing based on our legitimate interest. Send the request from the e-mail address of your account. You also have the right to lodge a complaint with a supervisory authority; in Poland this is the President of the Personal Data Protection Office (UODO, uodo.gov.pl).

7. Cookies

The website uses only a session cookie needed to keep you logged in and to protect forms. There are no advertising or tracking cookies.

8. Age

If you are under 16, you may create an account only with the consent of your parent or legal guardian.

9. Changes

We will publish any change of this policy on this page and announce important changes in the news.