ARENA WAR

Privacy policy

Last updated:

This policy explains which personal data the Arena War game (arena-war.com) processes, why, and what your rights are under the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data controller

TWK, sole proprietorship (micro-enterprise) of Mr Cyril Talbot
Registered office: 1 rue Marguerin, 75014 Paris, France
SIREN: 943 932 434 — registered with the Paris RCS
VAT not applicable, art. 293 B of the French Tax Code (CGI)
Email: contact@arena-war.com

Data processed

  • Account: email address, display name, password (stored only as a bcrypt hash, never in clear text), creation date, role (player or administrator).
  • Progression and gameplay: XP and level, kills per weapon, owned and equipped skins, attachments, challenges, battle-pass progress, titles, XP boosts, friends list and party.
  • Ranked mode: ranking, match history, rounds and eliminations, match recordings (replay: positions, shots, chat messages), reports sent or received, anti-cheat indicators, sanctions.
  • Purchases: Stripe customer id, payment and subscription references, purchased item, amount, status (paid, refunded, disputed), and proof of withdrawal waiver (date, item, IP address).
  • Technical data: IP address (used in memory to limit concurrent connections, and recorded on purchase as proof of consent), technical server and host logs.
  • Guest players: only the chosen display name for the duration of the match, with no account.

Bank card data is entered directly with Stripe and is never received or stored by TWK. The game uses no advertising, audience measurement or commercial profiling.

Purposes and legal bases

  • Account creation and management, game operation, progression, friends: performance of a contract (game terms of use).
  • Sale of digital content, VIP subscription, invoices, refunds and disputes: performance of a contract and legal obligations (accounting and tax).
  • Proof of withdrawal waiver: legal obligation and legitimate interest (evidence in case of dispute).
  • Security, anti-cheat and fraud prevention, moderation, logs: legitimate interest in a fair and safe game.

Recipients and processors

Data is intended for TWK only. It is hosted in France by OVH SAS (host). Payments are processed by Stripe (Stripe Payments Europe Ltd), which acts as an independent controller for payment data; Stripe may transfer data outside the European Union with GDPR safeguards (standard contractual clauses, EU–US data privacy framework). See Stripe's privacy policy. Display name, level, equipped skins and chat messages are visible to other players. No data is sold.

Retention periods

  • Account and progression: for as long as the account exists; erasure within one month of a deletion request.
  • Ranked match recordings: 14 days (180 days if the match is subject to a report or anti-cheat alert).
  • Purchase data, invoices and waiver proofs: 10 years (accounting obligations, article L123-22 of the Commercial Code), in archive.
  • Technical logs: 12 months maximum.

Your rights

You have rights of access, rectification, erasure, restriction, objection (for processing based on legitimate interest), portability, and the right to define instructions on the fate of your data after death. To exercise them, write to contact@arena-war.com from your account email address; a reply will be given within one month.

You may lodge a complaint with the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

Minors

A minor under 15 may create an account and make purchases only with the consent of their legal representative (article 45 of the French Data Protection Act).

Security

Hashed passwords (bcrypt), signed sessions (JWT tokens), encrypted connection (HTTPS), restricted and logged admin access.

Cookies and local storage

See the cookies and local storage page.