Privacy Policy

Arena Immortalis — last updated: 16 July 2026

1. Data controller

Adrenaline Games, PoznaƄ, Poland. Contact for privacy matters: support@adrenalinegames.pl.

2. What we collect and why

DataPurposeLegal basis (GDPR)Retention
Email address, username, password (stored as a bcrypt hash — we never see your password)Account creation, login, account recoveryArt. 6(1)(b) — contractUntil account deletion
Gameplay data (level, items, fights, guild, chat messages)Providing the Game, leaderboards, moderationArt. 6(1)(b) — contractUntil account deletion; chat logs max 90 days
IP address, technical logsSecurity, anti-cheat, abuse and fraud prevention, rate limitingArt. 6(1)(f) — legitimate interestMax 90 days
Payment data (handled by PayPal — we never receive your card number)Processing optional purchases, accountingArt. 6(1)(b) contract; Art. 6(1)(c) tax lawAccounting records: 5 years (Polish tax law)

3. Local storage — no tracking cookies

The Game stores a login token and interface preferences (e.g. which tutorials you have seen) in your browser's local storage. These are strictly necessary for the Game to function. We do not use advertising or analytics trackers and we do not display third-party ads.

4. Who sees your data

Other players see your username, level, class, stats, equipped items, guild, titles and public chat messages — that is part of the Game. Your email and IP address are never visible to other players.

Processors we use: our hosting provider (VPS in the EU) and PayPal (payments, their privacy policy). We do not sell or share your data for marketing.

5. Your rights (GDPR)

You have the right to access, rectify, export and erase your data, to restrict or object to processing, and to withdraw consent where processing is based on consent. To exercise any right — including full account deletion — email us at support@adrenalinegames.pl from your account's email address. We respond within 30 days. You may also lodge a complaint with the Polish supervisory authority (UODO, uodo.gov.pl) or your local authority.

6. Data security

Passwords are hashed with bcrypt, connections are encrypted (HTTPS), the database runs on an EU server with restricted access, and payment card data never touches our infrastructure.

7. Children

The Game is intended for players aged 16+. We do not knowingly collect data of younger children; if you believe a child is playing, contact us and we will remove the account.

8. Changes

We will announce material changes to this policy in the Game. The current version is always available at this address.

← Back to the Arena | Terms of Service