Privacy Policy
Last updated: 2026-10-17
This policy explains how Crownpupil LTD ("we") processes personal data when you play Crownpupil at https://crownpupil.site. We are the data controller. Contact: support@crownpupil.site, 13 road street.
1. What we collect
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Player name, password (stored only as a salted hash), email address | To create and secure your account and contact you about it | Contract (Art. 6(1)(b)) |
| Game data: cities, armies, messages, chat, alliance activity | To run the Game | Contract |
| IP address and login times | Security, preventing abuse and multi-accounting | Legitimate interest (Art. 6(1)(f)) |
| Billing details you enter at checkout (name, email, address, country, optional company, VAT number and phone) and purchase records | To process payments, issue invoices and meet accounting and tax obligations | Contract; legal obligation (Art. 6(1)(c)) |
| Acceptance of these Terms (date and version) | To show that you agreed | Legal obligation / legitimate interest |
We do not use your data for advertising and we do not sell it.
2. Payment providers
Payments are handled by our payment service provider(s) (Card Payment). When you pay, you enter your card or bank details on their page. They receive your billing details and the purchase amount and process them under their own privacy policies. We receive a confirmation and a payment reference, never your full card number.
3. Who else sees your data
- Other players see your player name, cities, alliance and anything you post in chat or mail.
- Our hosting provider stores the servers (Hetzner Online GmbH, Germany), and our network provider (Cloudflare) passes traffic to them. Both act as processors under data processing agreements.
- Authorities, where the law requires it.
Some providers may process data outside the EEA. When they do, this is covered by European Commission adequacy decisions or standard contractual clauses.
4. How long we keep it
- Account and game data: while your account exists, and up to 90 days after it is closed or the world ends.
- Security logs: up to 90 days.
- Invoices and purchase records: as long as accounting law requires (in Latvia usually 5 years; up to 10 years for some records).
5. Your rights
You can ask for access to, correction of, deletion of or a copy of your data, and you can object to or restrict processing. Write to support@crownpupil.site. You may also complain to your data protection authority; in Latvia this is the Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv).
6. Children
The Game is not intended for children under 16 without parental consent. If you believe a child has given us data without consent, contact us and we will delete it.
7. Cookies
See our Cookie Notice.
8. Changes
We will post changes here and, if they are significant, tell you in the Game or by email.