PRIVACY POLICY

1. Information we collect

Account information: email address, password hash and authentication identifiers, sign-in events, and account status.

Profile and gameplay information: handle, character details you provide, bio, district, progression, inventory, ventures, crews, forum and mail content, market and casino activity, court records, moderation history and gameplay events.

Purchase information: product bought, amount, currency, status, subscription state, refunds, reversals and provider transaction identifiers. Payments are taken by Paddle; we never receive your full card number.

Support information: the messages you send, your reply address, category and timestamps.

Technical and security information: IP address, device and browser information, session identifiers, timestamps, error logs and abuse-detection signals such as linked sessions used to detect multi-accounting and fraud.

We do not intentionally collect special category data. Please do not send it to us.

2. How and why we use it

• To create and operate your account and deliver the game, progression, markets, forums, crews and courts — necessary to perform our contract with you.
• To process purchases, subscriptions, refunds and payment disputes — contract and legal obligation.
• To keep the game fair and safe: anti-cheat, multi-account detection, fraud prevention, moderation and enforcement — our legitimate interest in protecting players and game integrity.
• To provide support and respond to your requests — contract and legitimate interest.
• To maintain, secure, debug and improve the service, including aggregated usage analysis — legitimate interest.
• To send service and transactional messages such as sign-in, password reset, receipts and important notices — contract and legitimate interest.
• To comply with legal obligations and to establish, exercise or defend legal claims.

Where we rely on consent — for example any optional marketing email — you can withdraw it at any time.

3. Automated decisions

Automated systems may flag accounts for review, for example where sessions appear linked or activity looks like cheating or fraud. Significant enforcement decisions involve human review, and you can ask for a decision to be reconsidered through Support.

4. Sharing

We share information only as needed with: our hosting, database, authentication and email infrastructure providers; Paddle, our payment reseller and merchant of record; and professional advisers. We may disclose information where required by law, to enforce our terms, to protect players or our rights, or in connection with a merger, acquisition or business transfer. We do not sell personal information and we do not share it for cross-context behavioural advertising.

5. Public information

Your handle, profile bio, standings, forum posts, market listings, crew membership and certain public game records are visible to other players. Do not post personal information in public areas of the game.

6. Cookies and similar technologies

We use strictly necessary cookies and local storage to keep you signed in, maintain your session, remember preferences and protect against abuse. We do not use advertising or cross-site tracking cookies. Blocking essential storage will prevent sign-in from working.

7. International transfers

Our providers may process information outside your country, including in the United States. Where information leaves the UK or EEA we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

8. Retention

We keep account and gameplay information while your account is active. After closure we delete or anonymise information within a reasonable period, except records we must keep longer for tax and financial reporting (typically up to seven years), fraud and ban-evasion prevention, security logs (typically up to twelve months), and the resolution of disputes or legal claims.

9. Your rights

Depending on where you live, you may request access to your information, correction, deletion, restriction or objection to processing, portability, and withdrawal of consent. UK and EEA residents may complain to their supervisory authority, including the UK Information Commissioner's Office. Submit requests through Support; we may need to verify your identity and will respond within the time the law allows. We will not discriminate against you for exercising your rights.

10. Children

Earned is not directed at young children and accounts must be held by someone able to agree to our Terms of Use. If you believe a child has provided us with personal information, contact Support and we will delete it.

11. Security

We use encryption in transit, hashed credentials, access controls and server-side authorisation rules designed to protect your information. No online service can guarantee absolute security. Report suspected security issues or account compromise to Support immediately.

12. Changes and contact

We will update this policy as the service changes and will note the effective date below. For any privacy question or request, contact Earned Game Online through Support.