privacy policy

Guide for privacy policy

Privacy Policy - Legends of Hastinapur

Last Updated: January 5, 2026

Introduction

Legends of Hastinapur ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you play our game.

Information We Collect

Account Information

  • Username
  • Email address
  • Hashed password (we never store plaintext passwords)
  • Account creation date

Gameplay Data

  • Character names and progress (levels, skills, inventory)
  • Game actions and chat messages
  • Login history (timestamps, IP addresses)
  • In-game purchases and transactions

Technical Data

  • Device information (OS, browser)
  • Connection logs (IP address, session duration)
  • Error reports and crash logs

Optional Data

  • Payment information (processed via third-party providers, we do not store credit card details)

How We Use Your Information

  • Game Operation: To provide and improve game services
  • Security: To detect fraud, cheating, and abuse
  • Communication: To send important updates, promotional content (opt-out available)
  • Analytics: To understand player behavior and improve gameplay
  • Compliance: To comply with legal obligations

Data Sharing

We DO NOT sell your personal information.
We may share data with:
  • Service Providers: Cloudflare (hosting), Sentry (error tracking), payment processors
  • Legal Requirements: If required by law or to protect our rights
  • Business Transfers: In case of merger or acquisition

Your Rights (GDPR Compliance)

Right to Access

You can request a copy of all your personal data.
How: Email gdpr@loh.game or use the in-game /export_data command

Right to Deletion

You can request deletion of your account and data.
How: Email gdpr@loh.game or use the in-game /delete_account command
Note: We retain anonymized data for 90 days for analytics and legal compliance.

Right to Rectification

You can update your email address and password in account settings.

Right to Data Portability

Your data export (see Right to Access) is provided in JSON format for easy portability.

Data Retention

  • Active Accounts: Retained indefinitely
  • Inactive Accounts (no login for 2 years): May be deleted after notice
  • Deleted Accounts: Anonymized within 30 days, purged after 90 days
  • Backups: Retained for disaster recovery purposes (30-90 days)

Security Measures

We implement industry-standard security practices:
  • Encryption: All data in transit uses TLS/SSL
  • Password Security: Argon2id hashing
  • Access Control: Role-based permissions for staff
  • Monitoring: Real-time intrusion detection
  • Audits: Regular security reviews and penetration testing

Children's Privacy

Our game is intended for users aged 13+. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us immediately at privacy@loh.game.

Cookies and Tracking

We use cookies and similar technologies for:
  • Session Management: To keep you logged in
  • Analytics: To understand how you use the game (via Google Analytics)
  • Advertising: Third-party ads may use cookies (you can opt-out)
How to Manage: You can disable cookies in your browser settings, but this may affect functionality.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via:
  • Email to registered address
  • In-game notification
  • Notice on our website

Contact Us

For privacy questions, data requests, or concerns:

Supervisory Authority

If you are in the EU/EEA, you have the right to lodge a complaint with your national data protection authority.
By playing Legends of Hastinapur, you agree to this Privacy Policy.