This document explains what personal data we process while running the MabronRO game server (mabronro.net), why we process it, and what rights you have.
Who is the data controller
The controller is Tomáš Huml, Company ID 23925230, Dukelská 418, 769 01 Holešov, Czech Republic, the operator of the MabronRO server. Contact: [email protected]. Use this address for any question or request regarding your data.
What data we process
- Website registration: e-mail address and username. We need the e-mail for password recovery and order confirmations.
- Game accounts: login name, password (stored as a hash, never in readable form), last login date and the IP address you connected from. We process the IP address for security reasons, preventing attacks on accounts and handling rule violations.
- Buying coins: first name, last name and e-mail. We do not ask for or store your address or phone number.
- Payment details: we never see or store your card number or card details. Payments are processed by Stripe; we only receive the information that the payment went through.
- Game data: characters, their equipment, chat and records of game command usage. Used to run the game and resolve disputes between players.
- Server logs: IP address and time of access.
Why we process it
- Performance of a contract: so you can have an account, play, and buy coins.
- Legitimate interest: securing the server and protecting it against attacks, bots and fraud.
- Legal obligation: keeping records of received payments.
Who we share it with
We do not sell your data and do not pass it to anyone for marketing purposes. We only share it with processors the service could not work without:
- Stripe (Stripe Payments Europe, Ltd.), processing of card, Google Pay and Apple Pay payments.
- E-mail service provider: sending confirmations and system e-mails.
How long we keep it
Account data is kept for as long as the account exists. After the account is deleted we remove it, except for payment records, which we must keep under accounting law. Security logs are kept for a matter of months.
Cookies
The website uses only strictly necessary and functional cookies: login, cart contents and language choice, plus cookies of the Stripe payment gateway during checkout. We use no analytics or advertising tools, we do not track you across websites and we pass nothing to ad networks. You can change your choice at any time in the cookie settings in the website footer.
Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing. Just write to [email protected]. If you believe we handle your data improperly, you may lodge a complaint with the Czech Office for Personal Data Protection.
Children
The server is not intended for children under 15. If we find out that we processed a child’s data without the consent of a legal guardian, we will delete the account and the data.