Privacy Policy

1. Introduction

Welcome to Castle Wars: Legacy, developed by Proclive. Your privacy is important to us, and this Privacy Policy explains how we collect, use, and protect your information when you play our game.

2. Information We Collect

We collect the following types of information:

• Account Data: If you register, we store your username, email address, and hashed password.
• Session Data: We store session-related data for in-game progress tracking, including game statistics, card inventory, and customization preferences.
• Referrer Information: We track referrer URLs to understand where players are coming from.
• Push Notification Subscriptions: If you opt in, we store your push notification subscription for game turn notifications.

3. Payment & Transaction Data

When you make a purchase, payments are processed by Revolut (Revolut Ltd, 7 Westferry Circus, London, E14 4HD, UK) acting as our payment processor.

• We do not store your credit card numbers, bank account details, or other payment credentials. This data is handled entirely by Revolut.
• We store transaction records including: transaction ID, purchase amount, coin quantity, VAT rate, buyer country, and fiscalization details (invoice number, JIR).
• Transaction records are retained for 11 years as required by Croatian tax law (Opći porezni zakon).
• Your country of residence is detected via your IP address (using the CF-IPCountry header from Cloudflare) for VAT calculation purposes. This information is stored with your transaction record.

4. How We Use Collected Data

The data we collect is used to:

• Provide and improve the gaming experience.
• Process and fulfill coin purchases.
• Generate fiscalized invoices as required by Croatian law.
• Send game notifications (if you opt in).
• Monitor traffic sources and game performance.

5. Data Sharing & Third Parties

We share data only with the following third parties, strictly as needed:

• Revolut: Payment processing. Subject to Revolut's Privacy Policy.
• Croatian Tax Administration (CIS): Fiscalized invoice data is transmitted to the Tax Administration as required by law.
• Cloudflare: Content delivery and DDoS protection. Subject to Cloudflare's Privacy Policy.

We do not sell your data to any third party.

6. Data Security

We take appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and secure session management.

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data (except records we must retain by law).
• Object to or restrict processing of your data.
• Data portability — receive your data in a structured format.

To exercise these rights, contact us at igor@proclive.io.

8. Data Retention

• Account data: Retained until you request deletion.
• Session data: Expires after 7 days of inactivity.
• Transaction records: Retained for 11 years (Croatian legal requirement).
• Push notification subscriptions: Retained until you unsubscribe.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be reflected on this page with an updated "Last Updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, contact us at: igor@proclive.io