Privacy Policy

1. What We Collect

To operate your account and the Web Shop, we collect and store:

• Account data: your chosen Account ID, encrypted password, and email address.
• Gameplay data: characters, inventory, guild membership, and general in-game activity tied to your account.
• Security data: IP address and login timestamps, used for fraud prevention, ban enforcement, and to protect against unauthorized access.
• Two-Factor Authentication: if you enable 2FA, a secret key is stored to verify your login codes. We never see or store the codes themselves.
• Purchase data: when you buy Cash Credits, Stripe processes your payment details directly — we only receive confirmation of the purchase (item, amount, and the account it was applied to). We never see or store your card number.

2. How We Use Your Data

• To create and maintain your account and game progress.
• To deliver purchased Cash Credits to the correct account.
• To detect and prevent cheating, fraud, and abuse.
• To communicate important account or service notices to the email you provide.

We do not sell your personal data to third parties.

3. Third-Party Services

• Stripe — handles payment processing for Web Shop purchases. See Stripe's Privacy Policy.
• Discord — our community server receives automated purchase notifications (account name, item, and amount) for transparency and support purposes.

4. Cookies & Sessions

We use a session cookie strictly to keep you logged in while you browse the dashboard and Web Shop. It is not used for advertising or cross-site tracking.

5. Data Retention

We retain account and gameplay data for as long as your account is active. If you'd like your account and associated data deleted, contact us using the details on our Contact page.

6. Data Security

Passwords are stored using one-way encryption, sessions are protected against common web attacks, and administrative access to purchase and account data is restricted to server staff. No online service can guarantee absolute security, but we take reasonable, industry-standard measures to protect your information.

7. Children's Privacy

Cabal Online and this service are intended for a general audience. If you believe a child has provided us personal information without appropriate consent, please contact us so we can address it.

8. Your Rights

Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal data. To make such a request, reach out via our Contact page.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.