Privacy Policy
This Policy explains what data the L2Relic Administration processes about Users, for what purposes and on what legal grounds, who the data may be shared with, and what rights Users have.
1. General
1.1. Data is processed by the L2Relic Administration β the team that manages the l2relic.com domain and operates the game server. For all data protection matters, contact: https://t.me/l2_relic.
1.2. This Policy applies to the website https://l2relic.com, all of its subdomains (user account area, forum, auxiliary services) and the project's game server.
1.3. This Policy forms an integral part of the Terms of Use. By using the Website and the Server, the User confirms that they have read this Policy. If the User disagrees with it, use of the Services must stop.
1.4. The Administration follows the principle of data minimisation: only data that is necessary to provide the Services is requested. The project does not require a real name, phone number, identity documents or any other information that would identify the User.
1.5. The Administration does not verify the accuracy of data provided by the User, except where this is necessary to perform obligations towards the User or to investigate breaches.
2. Data processed
2.1. Data provided by the User:
- the login and email address supplied at registration;
- the password β stored solely as an irreversible cryptographic hash and not available to the Administration in plain text;
- game character names, clan and alliance names;
- contact identifiers voluntarily shared when contacting support (Discord, Telegram and similar);
- the content of support requests, including attachments and screenshots.
2.2. Data collected automatically:
- IP address and the approximate region derived from it;
- browser and operating system type and version, language settings;
- date, time and duration of connections to the Website and the Server;
- server and game logs: logins, character actions, trading operations, in-game chat messages β to the extent needed to investigate complaints, detect prohibited software and multi-accounting, and restore data after failures;
- a technical device identifier (HWID) generated by game client protection tools, where such tools are used on the project;
- cookies and similar technologies (Section 5).
2.3. Payment data. When Paid Services are purchased, the Administration receives from the payment provider only the transaction identifier and status, the amount, the currency and the payment method. Full card numbers, security codes and bank account details are neither collected nor stored by the Administration β they are processed by the payment provider as an independent controller under its own policy.
2.4. The Administration does not request or deliberately collect special categories of data (health, religious or political views, biometrics and similar). Users should not disclose such information in support requests or public sections.
3. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Creating and maintaining the Account, providing access to the Services | Login, email, password hash, character data | Performance of a contract (the Terms of Use) |
| Communication with the User: access recovery, service notices, responses to requests | Email, content of requests, contact identifiers | Performance of a contract |
| Security: protection against account compromise, attacks and fraud; detection of rule breaches and prohibited software | IP address, logs, HWID, technical data | Legitimate interest in protecting the project and its Users |
| Processing payments for Paid Services and keeping records of transactions | Transaction identifier, amount, status | Performance of a contract; compliance with legal obligations |
| Improving the Website and the Server, statistics | Anonymised and aggregated data, analytics cookies | Consent (for optional cookies) or legitimate interest |
| Newsletters and project announcements | Consent, withdrawable at any time | |
| Handling disputes and defending rights | Logs, correspondence, payment records | Legitimate interest; establishment and defence of legal claims |
3.1. Processing is carried out with regard to the requirements of the EU General Data Protection Regulation (GDPR) and other applicable data protection law.
3.2. No automated decision-making producing legal effects is carried out. Anti-cheat systems may trigger a suspension automatically; the User may contest it and have the request reviewed by a human.
4. Retention periods
4.1. Account data is retained for as long as the Account exists and for up to 12 months after its deletion or the last activity β to prevent circumvention of bans and to resolve possible disputes.
4.2. Game and server logs are retained for up to 6 months; backups for up to 30 days, after which they are overwritten.
4.3. Records of payment transactions are retained for the period required by applicable law for accounting purposes.
4.4. Support correspondence is retained for up to 24 months after the request is closed.
4.5. Once these periods expire, data is deleted or anonymised.
5. Cookies and analytics
5.1. The Website uses strictly necessary cookies for authentication, session persistence, language settings and protection against automated requests. The Website cannot function without them.
5.2. Analytics cookies may additionally be used to measure traffic and usability. They are set only with the User's consent, given through the consent banner, and can be withdrawn at any time.
5.3. Third-party web analytics services may be used to collect visit statistics. Such services process data under their own privacy policies. The current list of services in use is available in the cookie settings banner.
5.4. The User may restrict or block cookies in their browser settings. This may render parts of the Website inoperable.
6. Sharing with third parties
6.1. The Administration does not sell Users' personal data and does not share it with third parties for advertising purposes.
6.2. Data may be shared with the following categories of recipients, acting on the Administration's instructions and bound by confidentiality obligations:
- providers of server rental, hosting and backup services;
- DDoS protection providers and content delivery networks;
- payment providers and aggregators processing payments for Paid Services;
- email delivery services;
- web analytics services;
- community platforms (forum, messengers), where the User uses them to contact the Administration.
6.3. Data may also be disclosed:
- upon a reasoned request from competent authorities under the procedure established by law;
- where necessary to protect the rights and legitimate interests of the Administration or third parties in the event of a breach of the Terms of Use;
- upon transfer of the project to another owner, provided that the acquirer assumes the obligations under this Policy;
- with the User's explicit consent.
7. International transfers
7.1. The project's server infrastructure and certain contractors may be located outside the European Economic Area.
7.2. Where data is transferred to such countries, the Administration ensures appropriate safeguards, including the use of the European Commission's Standard Contractual Clauses or working with recipients in countries recognised as providing an adequate level of protection.
8. User rights
8.1. The User has the right to:
- obtain confirmation that processing is taking place and a copy of their data;
- request rectification of inaccurate or incomplete data;
- request erasure of data, where the Administration has no lawful grounds for continued retention;
- request restriction of processing;
- receive their data in a structured, machine-readable format;
- object to processing based on legitimate interest, including marketing communications;
- withdraw consent previously given β withdrawal does not affect the lawfulness of processing before it was received;
- lodge a complaint with the data protection supervisory authority of their place of residence.
8.2. Requests are sent to https://t.me/l2_relic from the telegram linked to the Account. A response is provided within one month; where a request is complex, the period may be extended with notice to the User.
8.3. The Administration may request additional information to confirm that the request comes from the Account holder.
8.4. Deletion of the Account ends access to the Services and results in the loss of all game progress without compensation. Certain data may be retained to the extent necessary to comply with legal obligations and to defend legal claims.
9. Security
9.1. The Administration applies organisational and technical safeguards: encrypted connections (HTTPS), storage of passwords as hashes, access controls on databases, backups, and logging of administrator actions.
9.2. Absolute security of data transmission over the internet cannot be guaranteed. In the event of a failure, an attack or other circumstances beyond the Administration's reasonable control, access by third parties cannot be excluded.
9.3. Where a breach is detected that poses a high risk to Users' rights, the Administration will notify the affected Users and, where such an obligation applies, the supervisory authority within the periods established by law.
9.4. Users must use a unique password, protect access to their email account and never share their credentials with third parties.
10. Minors
10.1. The Services are not intended for children under 16. Registration by minors is permitted only with the consent of a legal representative.
10.2. If the Administration becomes aware that a child's data has been obtained without such consent, it will be deleted. A legal representative may contact https://t.me/l2_relic to request deletion.
11. Third-party links
11.1. The Website may contain links to external resources: forums, server monitoring sites, social networks and payment pages. This Policy does not apply to them, and the Administration is not responsible for their content or data practices.
12. Changes to this Policy
12.1. This Policy takes effect upon publication on the Website and remains in force indefinitely until replaced by a new version.
12.2. The Administration may amend this Policy. A new version is published at a permanent address on the Website; Users are additionally notified of material changes on the Website or by email.
12.3. Continued use of the Services after changes are published constitutes acceptance of the new version.
13. Contact
For any data protection matter, including exercising the rights set out in Section 8: https://t.me/l2_relic or the contact form on the Website.
mellivora