Data Controller

The controller of personal data is OldCores (sole proprietorship, registered in Poland). Business details are provided on the website and available upon request via support@oldcores.com.

This privacy policy explains what data we collect, why we collect it, and how we process it. It applies to visitors, users, and account holders worldwide.

OldCores respects the privacy rights of all users and is aware of the importance of protecting stored personal data. Substantial organisational and technical measures have been taken to ensure the security of all personal data that is collected. This privacy policy explains in detail which information is collected and for which purposes it can be processed and used. OldCores collects, processes and uses personal data for the conclusion and execution of a user's service agreement with OldCores. Personal data comprises stock data such as a user's name and address, as well as usage data such as account number, password, hardware details and IP address.

Legal Bases (GDPR)

1. Contract performance: account creation, game access, delivery of digital content and support.
2. Legal obligation: accounting, tax, and compliance requirements where applicable.
3. Legitimate interests: security, fraud prevention, service improvement, and analytics.
4. Consent: marketing communications and non-essential cookies where required.

OldCores collects the usage data that is automatically determined and transmitted by web browsers or any other client software whenever OldCores's websites (OldCores, any other of OldCores's websites) or one of OldCores's other online services is used. Such usage data includes, but is not limited to, IP address, browser version, access time, information on the type and the aim of requests and data about hardware and software of the user's computer system. It is saved in protocol files, with some of the information being stored in anonymous form. Among other purposes, this data is used by OldCores for the compilation of anonymous statistical surveys on the use of their online services and for the error analysis and the optimisation of their service.

OldCores uses, among other things, cookies to collect, process and use usage data in order to allow, for instance, the management of accounts and of personal settings, the participation in the discussion forum, and the use of further personalised services.

We use Cloudflare services, including Turnstile, to protect this site and its forms from abuse. Cloudflare may process information such as IP addresses, user agent details, challenge results, and interaction data to detect malicious traffic. This data is handled under Cloudflare's Privacy Policy and is used solely for security, fraud prevention, and service reliability.

Payments are processed by Stripe Managed Payments, which acts as the Merchant of Record. Stripe processes payment data, billing information, and related identifiers in order to complete transactions and comply with legal obligations.

Recipients and Processors

1. Cloudflare (security, anti-abuse, and performance services).
2. Stripe (payment processing and tax calculation as Merchant of Record).
3. Google Ads (advertising measurement and attribution, where enabled).
4. Hosting and infrastructure providers required to operate the service.

OldCores collects, processes and uses stock and usage data, to the extent that is necessary in individual cases, if it is required to reveal and to stop fraudulent behaviour or any other form of using OldCores's services which violates legal regulations or the service agreement. In particular, OldCores reserves the right to log, process and use information such as the time and the content of conversations and expressions of opinion that take place in their online services if there are complaints, reports or other credible indications of behaviour that violates legal regulations or the service agreement, for example the serious insulting of other users. This regulation extends to all parts of OldCores's online service, including, but not limited to, guild channels, private channels and private messages.

OldCores collects, processes and uses personal data in connection with complaints and requests to their user support in order to comply with requests in as efficient and satisfactory a manner as possible. Data that is collected for such purposes includes, but is not limited to, the email address, the date of the contact and its content. Also, OldCores processes and uses this data to compile anonymous statistical surveys for the optimisation of their customer support.

OldCores collects, processes and uses personal data for the purpose of conducting marketing actions such as the sending of emails that contain general information or promotional content, provided that the user agreed to receiving such emails separately during the account creation process. Every user can unsubscribe from receiving this kind of information at any time. This can be done by directly clicking on the unsubscribe link in any received newsletter. Also, OldCores processes and uses personal data to compile anonymous statistical surveys for the purpose of improving their range of services.

OldCores displays character names to all visitors on all of OldCores's websites as well as to all users in their online services in connection with certain game activities of a user in order to allow other users to selectively contact this user. This occurs, for example, when the user uses characters online, when they act as parts of character associations, or possibly when they are registered in high score lists. Furthermore, OldCores generally makes usage data of characters, for example the time of its most recent use or information on its death, available to all visitors on all of OldCores's websites as well as to all users in OldCores's online services. OldCores makes information, such as the record of rule violations or the list of defeated characters, available to certain other users, who have a supervisory role among the community of users.

In so far as the transfer of data to third parties is not explicitly allowed by law, OldCores passes on personal data, to the extent that is necessary, to law enforcement and supervisory authorities for the purpose of preventing dangers to the national or public security as well as for the prosecution of criminal offences. passes on the name, address and, to the extent that is necessary in individual cases, further personal data of users to its partner companies, for example for the purpose of handling payment transactions or to provide other services in the framework of the users' service agreement with OldCores. Third parties may possibly be based in countries outside of the European Union, but they are bound to protect personal data to the same extent as OldCores. OldCores will not, aside from the aforementioned cases, pass on personal data to third parties, and solely employees of OldCores have access to personal data in order to fulfil the tasks specified above.

International Transfers

Some of our service providers may process data outside the European Economic Area. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent legal mechanisms.

Retention

We retain personal data only as long as necessary for the purposes described above, including account maintenance, compliance obligations, and dispute handling. When data is no longer needed, we delete or anonymize it.

OldCores processes IP addresses to measure the effectiveness of ad campaigns, track game progress and improve the gaming experience for new players. The purpose is to identify players who join via an ad campaign. However, this data will not be used to send individual advertisements or promotional emails to these players. Therefore, the IP address at the time of software download is compared to the IP address at the time of account registration. If they match, the account is associated with details such as the ad partner's name and campaign ID for billing purposes. This practice aligns with OldCores's legitimate interest according to Art. 6 para. 1 lit. f GDPR.

To increase the number of players, OldCores uses advertising campaigns on its partners' websites, among other things. This allows OldCores to identify new players who have created an account through an advertisement and to measure the effectiveness of the campaigns. Only when an account has been created, the so-called Click-ID is passed on to OldCores's external advertising partners. This Click-ID is not personally identifiable, but may be combined with other information by OldCores's partners:

1. Google Ads: https://safety.google/privacy/ads-and-data/

Since OldCores provides its products free of charge to every player, the Click-ID is an important part of the revenue. The legal basis is therefore Article 6 para. 1 lit. b of the GDPR and is part of the account creation process. OldCores may change this privacy policy at any time. OldCores will notify all users about the changes by placing a prominent notice on the website of OldCores. The changed privacy policy will take effect 30 days after it has been officially announced. It will fully apply to any user who has not revoked his or her declaration of consent within this period of time. All users are required to review this policy at regular intervals to keep themselves informed about any changes.

Cookies

We only use essential cookies, to keep you signed in and to provide core functionality. We do not use analytics or advertising cookies.

To measure which links and campaigns bring visitors, we record the page you arrive on, the campaign parameters of the link (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the domain of the referring website, your country as determined by Cloudflare and the type of your device (desktop, tablet or mobile) derived from your browser's user agent. We also count client downloads and Discord invitations opened from our website together with the same campaign information. When you create an account, the same information is stored with it, and we use it to measure how many accounts from each campaign confirm their email, play the game and make purchases. We do not store your IP address or any identifier on your device for this purpose, and the data is only used for aggregated statistics. The legal basis is our legitimate interest in measuring the effectiveness of our promotion (Art. 6 para. 1 lit. f GDPR).

Your Rights

Users have the right of access to their personal data being processed by OldCores (Art. 15 GDPR) as well as the right to rectify (Art. 16 GDPR) or erase (Art. 17 GDPR) these personal data. Furthermore they have the right to restriction of processing (Art. 18 GDPR), the right to object to processing of personal data (Art. 21 GDPR) and the right to data portability (Art. 20 DSGVO). Users can exercise these rights by sending an email to support@oldcores.com. If users revoke their declaration of consent to the processing of their personal data, their accounts at OldCores will be blocked, and OldCores's personalised services will no longer be available via these accounts.

If you are in the EEA, you also have the right to lodge a complaint with your local supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO).

Users who have any questions about this privacy policy or about the processing of their personal data can also contact OldCores's data protection officer, email: support@oldcores.com.