Privacy Policy

Privacy Policy (GDPR)

IMPORTANT: This Privacy Policy explains how ingame.go.ro (“we”, “our website”) processes personal data when you use our forum and related game-hosting services (“Hosting Bots”). If you do not agree with this policy, please do not use the website and related services.

Controller (Website Operator): The operator of this website is the data controller for processing described here. Our contact details are available in the website Legal Notice / Contact page.

Scope: This policy covers website visits, account registration, forum usage, support interactions, purchases (including PayPal), and gameplay on our Hosting Bots.

1) Overview of data protection

Personal data means any information relating to an identified or identifiable natural person (e.g., account data, IP address, payment-related identifiers). Some data is provided directly by you (e.g., registration), while other data is collected automatically for security and service functionality (e.g., server logs).

2) What data we collect

• Account & profile data: username, email address, password hash, profile settings, linked game accounts (if you choose to link them), and other information you optionally add to your profile.
• Forum content: posts, comments, private messages (where applicable), reports, and moderation logs related to your activity.
• Support communications: information you provide in support topics/requests, including attachments/logs you choose to submit.
• Technical data / server logs: IP address, browser type/version, operating system, referrer URL, host/device identifiers, date/time of requests, and error/security logs.
• Hosting Bots (game services): IP address used to connect, in-game nickname, battle.net realm/server, game identifiers, match participation, and game statistics (e.g., results and performance metrics). This data is used to generate player profiles and maintain fair play and service integrity.
• Payments (PayPal / manual): transaction identifiers, payment status, amount, currency, and payer details provided by the payment provider (e.g., name/email as provided by PayPal). We do not store full card data.
• Cookies & similar technologies: necessary cookies for session/security and, depending on your settings/consent, optional cookies for analytics/third-party services.

3) Why we use your data (purposes) and legal bases

We process personal data only where we have a legal basis under GDPR, including:

• Account creation and service delivery (forum access, subscriptions, Hosting Bots access) – contract (GDPR Art. 6(1)(b)).
• Security, abuse prevention, fraud prevention, dispute handling (anti-cheat, anti-spam, DDoS protection, moderation, logging) – legitimate interests (GDPR Art. 6(1)(f)).
• Payments and accounting-related records – contract (Art. 6(1)(b)) and/or legal obligations where applicable (Art. 6(1)(c)).
• Optional cookies/analytics (if enabled) – consent (Art. 6(1)(a)) where required.

4) Cookies

Cookies are small text files stored on your device. We use cookies to keep you logged in, protect the website, and provide core functionality. You can configure your browser to block or delete cookies, but some site features may stop working.

Cloudflare cookies (security/CDN): We use Cloudflare to protect and accelerate our website. Depending on enabled Cloudflare features, Cloudflare may set necessary cookies to help detect and mitigate malicious traffic. For example, if Cloudflare Bot products (e.g., Bot Management / Bot Fight Mode) are enabled, Cloudflare may place the __cf_bm cookie, which is necessary for bot protection and typically expires after a short period of inactivity.

For more details about Cloudflare cookies, see Cloudflare documentation and policies.

5) Cloudflare (processor) and international transfers

We use Cloudflare as a service provider for CDN, security and performance. In this context, Cloudflare may process personal data such as IP addresses and request metadata as our processor to provide these services. Cloudflare provides a Customer Data Processing Addendum (DPA) and Standard Contractual Clauses (SCCs) for international data transfers where applicable.

6) Payments, PayPal and disputes

If you pay via PayPal, PayPal processes the payment under its own policies. We receive transaction-related information necessary to confirm your purchase and deliver the service (e.g., transaction ID, payment status, amount/currency, and payer details as provided by PayPal).

Disputes/chargebacks: If a dispute/claim/chargeback is opened, we may share relevant service-delivery evidence (activation time, linked game accounts, usage logs, and support history) with the payment provider to resolve the dispute and prevent fraud.

7) Who we share data with (recipients)

• Service providers (processors): hosting/server providers, Cloudflare (CDN/security), email delivery services (if used), and other providers strictly required to operate the site.
• Payment providers: PayPal (and/or other providers you choose) for payment processing and dispute handling.
• Legal/authority disclosures: where required by law or to protect rights, safety, and prevent fraud/abuse.

Data retention

We keep personal data only as long as necessary for the purposes described in this policy:

• Account data: retained while your account is active and thereafter as needed for security, moderation, or legal claims, unless deletion is requested and legally possible.
• Server/security logs: retained for a limited period necessary for security and troubleshooting, then deleted or anonymized, unless required for investigations or legal claims.
• Hosting Bots data/statistics: may be retained long-term to maintain player profiles, match history, rankings, and fair play enforcement. Where feasible, we may anonymize/pseudonymize certain identifiers upon request while preserving aggregated statistics.
• Payment records: retained as required for accounting, contractual, and dispute purposes.

9) Your rights under GDPR

Depending on your situation, you may have the right to request: access, rectification, erasure, restriction, objection, and data portability, as well as the right to withdraw consent (where processing is based on consent). To exercise your rights, contact us using the details in the Legal Notice / Contact page.

10) Security

We use technical and organizational measures to protect data, including HTTPS (SSL/TLS) encryption in transit. Please note that no method of transmission over the Internet is 100% secure.

11) Changes to this policy

We may update this Privacy Policy from time to time. The latest version is effective upon publication on this page.