PRIVACY
POLICY
What we collect, why we need it, how long we keep it, and how to request deletion.
REVISION OF 31 JULY 2026
DRAFT TRANSLATION · REQUIRES LEGAL REVIEW
1. WHO CONTROLS THE DATA
Vzukan World is operated by INSERT LEGAL ENTITY OR SOLE TRADER, at INSERT ADDRESS. Contact INSERT EMAIL about personal data.
The project is in pre-alpha. We collect only what is needed for accounts and the shared world and do not sell data to advertising networks.
2. DATA WE COLLECT
Registration data includes username, email, in-world name, and an irreversible password hash. The original password is never stored.
During play we store game state, security events, request IP address, request time, and response code.
We do not request your legal name, phone number, payment details, or identity documents.
3. WHY WE USE IT
- to provide sign-in and protect accounts;
- to preserve the shared game world;
- to detect password attacks, bots, and abuse;
- to answer requests;
- to diagnose service failures.
4. LEGAL BASIS
Account and game data are processed to perform our agreement. Security logs support the legitimate interest of protecting players and the service. Applicable basis: REVIEW WITH LEGAL COUNSEL.
5. COOKIES AND BROWSER STORAGE
Only strictly necessary cookies are used. There are no advertising, analytics, or tracking cookies.
You can delete them in browser settings; you will then need to sign in again.
| NAME | PURPOSE | DURATION |
|---|---|---|
| BLABLA_PLAYER_ACCESS | Access key for game services; unavailable to page scripts. | about 10 minutes |
| BLABLA_PLAYER_REFRESH | Renews sign-in without entering the password each time. | up to 30 days |
| BLABLA_PLAYER_ID | Allows sign-out to close the account-server session correctly. | up to 30 days |
| BLABLA_OAUTH_STATE / BLABLA_OAUTH_VERIFIER | Protect the sign-in flow against request substitution. | 10 minutes |
| JSESSIONID | Account-server session during sign-in. | until the browser closes |
| blabla:cookie-notice | Local-storage record that the cookie notice was read. | until site data is cleared |
6. WHO RECEIVES DATA
We do not share data with advertising networks, data brokers, or analytics services. Infrastructure is accessible to our hosting provider INSERT HOST AND COUNTRY.
Data may be disclosed in response to a lawful request by an authorized authority.
7. RETENTION
- account data and progress: while the account exists;
- security events: INSERT PERIOD;
- technical logs: INSERT PERIOD;
- after deletion, personal data is removed while anonymous traces in the shared world may remain.
8. YOUR RIGHTS
Write from the account email to INSERT EMAIL. Response period: INSERT PERIOD.
- request a copy of your data;
- correct inaccurate data;
- delete the account;
- object to specific processing;
- complain to your supervisory authority.
9. AGE
Accounts may be created from age INSERT AGE. Contact us if a younger child created an account so we can delete it and related data.
10. CHANGES
This policy changes with the service. Material changes will be announced on the website or by email.