Privacy Policy

This Privacy Policy explains how Xongsoft Studios ("we", "us", "our"), the operator of RaiderZ (the "Service"), collects, uses, shares and protects your personal information, and the rights you have over it. If you do not agree with this policy, please do not use the Service.

1. Who we are (Controller)

The data controller responsible for your personal information is Xongsoft Studios. For any privacy matter — including data-protection requests — you can reach us at [email protected].

2. Information we collect

• Account data — name, login, e-mail address and password (stored hashed).
• Technical data — IP address, browser/user-agent, and security event logs (e.g. login attempts) used to protect the Service.
• Gameplay data — characters, progress, items, statistics and playtime tied to your account.
• Communications — messages you send us for support.
• Payment data — purchases are handled by our payment providers (PayPal, Wise and Pix); we do not store full card numbers.

3. How and why we use your information

We process personal information to: create and manage your account; authenticate logins and secure the Service; provide and maintain gameplay; respond to support requests; comply with legal obligations; and prevent fraud and abuse.

Legal bases (EEA/UK): performance of a contract (providing the Service), our legitimate interests (security and fraud prevention), compliance with legal obligations, and your consent where required (e.g. non-essential cookies).

4. Cookies and similar technologies

We use a strictly necessary session cookie to keep you signed in. With your consent, we also use analytics cookies (Google Analytics) to measure traffic, and marketing cookies from Google, Meta and Microsoft to promote the game and measure advertising campaigns.

Non-essential cookies are set only after you opt in through our cookie banner. You can change or withdraw your choice at any time via the "Cookie settings" link in the footer, or through your browser settings.

5. How we share information

We do not sell your personal information. We share it only with: service providers who process data on our behalf (e.g. OVH for dedicated-server hosting, Gmail (Google) for e-mail delivery, and PayPal, Wise and Pix for payments) under contract; and authorities when required by law.

6. International data transfers

Your information may be processed in countries other than your own, including Canada (where our game server is hosted). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions for such transfers.

7. Data retention

We keep your account data for as long as your account exists. Accounts are not deleted automatically — we retain them indefinitely unless you ask us to delete yours by e-mailing [email protected]. On request we delete or anonymize your data, except where we must keep certain information to meet legal, security or accounting obligations.

8. Security

We use technical and organizational measures (including password hashing, access controls and rate limiting) to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

The Service is intended for users aged 18 and over and is not directed to anyone under 18. We do not knowingly collect personal information from people under that age. If you believe someone under 18 has provided us data, contact us and we will delete it.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, restrict or object to the processing of your personal information, and to withdraw consent. To exercise these rights, e-mail [email protected]. We will respond within the period required by applicable law and will not discriminate against you for exercising your rights.

European Economic Area & United Kingdom (GDPR)

You have the rights described above and the right to lodge a complaint with your local supervisory authority. Where processing is based on consent, you may withdraw it at any time.

California, United States (CCPA/CPRA)

You may request the categories and specific pieces of personal information we collect, request deletion or correction, and opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. You may designate an authorized agent to act on your behalf.

South Korea (PIPA)

You may request access to, correction, deletion and suspension of processing of your personal information, and withdraw consent. We process and retain personal information in accordance with the Personal Information Protection Act.

Philippines (Data Privacy Act of 2012)

You have the rights to be informed, to access, to object, to rectification, to erasure or blocking, and to data portability, and you may file a complaint with the National Privacy Commission. You can reach us about data-protection matters at [email protected].

Brazil & South America (LGPD and local laws)

Under Brazil's LGPD (and comparable South American laws) you may confirm the existence of processing, access, correct, anonymize, port or delete your data, and obtain information about sharing. Requests can be sent to [email protected].

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced on the Service, and the "Last updated" date above will be revised.

12. Contact

Questions about this policy or your data? Contact us at [email protected].