Policy

Our Adventurer's Privacy Covenant

Welcome back, dear Adventurer!

In the marvelous universe crafted for you by NORHEN LIMITED (hereinafter referred to as "we," "us," "the Company," or "the loyal guardians of your data"), we are not only dedicated to providing you with endless fun and the freedom to explore, but we also consider the defense of your personal information and privacy rights a paramount and sacred mission. We understand that trust is the magical bond connecting you to our world, and every piece of data entrusted to us represents your confidence in us.

This comprehensive and detailed "Our Adventurer's Privacy Covenant" (hereinafter referred to as "this Privacy Covenant") is our response to that trust. It will serve as your guide on this adventure, explaining in the clearest and most transparent way how we collect, use, store, share, and protect your personal information. This is not just our promise; it is the manifestation of our commitment to "Privacy by Design," a philosophy where the protection of your privacy is integrated into every line of code and every design decision from the very inception of our game world.

This Privacy Covenant is an inseparable and vital part of "Our Game World Covenant." When you choose to download, install, access, or in any way use our Services, you signify that you have carefully read, fully understood, and agreed to our processing of your personal information in accordance with all the terms of this Privacy Covenant.

Now, let us unroll this detailed scroll together and delve into how we, as the loyal guardians of your data, jointly safeguard every precious footprint you leave in the digital world.

Data Guardian Information:

Company Name: NORHEN LIMITED

Registered Address: Suite 1805, 44a Frances Street, Newtownards County Down, BT237DN

Contact Email for Data Protection Matters: [email protected]

Chapter One: Your Adventurer's Logbook - The Information We Collect and Why

As you leave your mark in our meticulously constructed world, we need to record some necessary "logbook entries" to ensure your journey is smooth, personalized, and full of enjoyment. This information is the foundation upon which we provide you with our excellent service. Let's take a detailed look at what these logbook entries contain.

1.1 Logbook Entries You Actively Provide (Information You, as an Adventurer, Grant Us Directly)

This is the information you consciously and proactively share with us as you interact with our world.

For creating and completing your identity profile, which is the foundation of your presence in our world, we collect certain details. Core information includes what we typically request when you create your "Adventurer's Profile," or game account. This consists of a unique nickname, your call sign in the game world, a valid email address, and the password you set for your account. Your email address is a vital bridge connecting you to us, used not only for account verification but also as the key to regaining control of your account should you forget your password. Optional information may also be provided to flesh out your adventurer persona. You might choose to provide extra details like uploading an avatar that represents your personality, writing a short personal bio, or selecting your preferred language. This information is entirely voluntary and helps you better present yourself within the community and allows other adventurers to get to know you.

We keep records of your communications with us because we value your feedback. For customer support, when you contact our "Council of World Guardians," our customer support team, via our official email [email protected], we save your contact information and the full content of your communication. This applies whether you are reporting a game bug hidden deep in a dense forest, asking a question about game mechanics, or sharing a brilliant suggestion to make our world better. These records help us track the progress of issues, understand your needs, and ultimately enhance the game experience for all adventurers. For community engagement and surveys, if you participate in our surveys, community events, or player interviews, all the information and opinions you provide will be carefully stored and used as a vital reference for improving our world.

Your creative spark, which is your User-Generated Content or UGC, is the lifeblood of our world's vitality. This includes but is not limited to messages you send in public chat channels, guides or stories you publish on game forums, the manifesto you write for your guild, or personalized signatures and map layouts you design within the game. An important reminder is that you must remember this content you choose to make public is, by its nature, "public." This means any other adventurer in the game world can see, copy, or use this information. Therefore, please think carefully before sharing any content that might involve your personal or others' privacy. We encourage creative expression, but we never want it to cause you unnecessary trouble.

1.2 Logbook Entries Recorded Automatically During Your Adventure (Information We Collect via Technical Means)

As you immerse yourself in our Services, our world's "All-Knowing Crystal," our back-end systems and analytics tools, automatically records some technical and behavioral information about you. This is crucial for us to optimize performance, ensure security, and enhance your experience.

Regarding your adventure gear, which is your device and software information, we collect various details. For hardware and systems, we gather information about the device you use for your adventure, such as the device model like an iPhone 14 Pro or Samsung Galaxy S23, its operating system and version like iOS 16 or Android 13, CPU/GPU model, screen resolution, and memory size. Just as a blacksmith needs to know a warrior's physique to forge the best-fitting armor, we need to understand your device's capabilities to present you with the smoothest and most stunning graphics and to quickly locate and fix crashes or lags caused by specific devices. For unique identifiers, we collect your device's unique identifiers, such as advertising identifiers like IDFA or AAID/GAID. These anonymous identifiers are the basis for distinguishing between different players, analyzing user behavior, and providing personalized services, including advertising, without obtaining your real identity. For network information, we record your network type, such as WiFi, 4G, or 5G, which helps us optimize data transmission strategies based on your network conditions to reduce your waiting time.

We also track your adventure's footprints, which is your gameplay and usage data. For core progress, we meticulously record all your key activities in the game, including your progress such as completed quests and levels reached, character level, achievements earned, the in-game items you possess and changes in their quantity, your interaction history with other players like friend additions or guild joins/leaves, and the frequency and duration of your logins. For behavioral analysis, we also analyze deeper behavioral data, such as your average time spent in each game scene, your patterns of clicking UI elements, and your success and failure rates when facing different challenges. This is like a map depicting your adventuring style, helping us understand which designs are successful and where there might be confusion or obstacles, allowing for targeted improvements.

We determine your approximate coordinates on the world map, which is your general location information. The type of information we use is not precise GPS data. We only infer your general geographical area, such as country, province, or city, by analyzing your IP address. The purpose of this is several-fold. First, it is to provide faster network connections for players in different regions globally through a Content Delivery Network or CDN. Second, it is to display content or events specific to your region, such as decorations that match local culture during certain holidays. Third, it is for security analysis, such as detecting if your account logs in from two distant locations in a short period, which could indicate a security risk. Lastly, it is for macro-level statistical analysis to understand the global distribution of our players.

We use magic beacons and digital breadcrumbs, which are Cookies and similar technologies. For a technical explanation, our website and game services may use Cookies, which are small text files stored on your device, and similar technologies like pixel tags and web beacons. You can think of them as "digital breadcrumbs" you scatter in a forest to avoid getting lost. There are different types and uses for these technologies. Essential Cookies are necessary for our services to function properly, for instance, by keeping you logged in or remembering your basic preference settings. Without them, our world would not operate correctly. Performance and Analytics Cookies help us collect anonymous, aggregated data to understand how players interact with our services, such as which features are most popular and how fast our website loads. This helps us optimize performance. Functional Cookies can remember your specific choices, like language preferences, to provide a more personalized experience. Advertising and Marketing Cookies are placed by our advertising partners to show you ads that may be relevant to your interests when you visit other websites or apps. You have control over these. You can manage or disable most Cookies through your browser or device settings, but please be aware that disabling essential Cookies may severely impact your user experience.

1.3 Messages from Our Allies (Information We Obtain from Third-Party Partners)

In certain situations, to provide richer functionality, we also indirectly receive information about you from trusted partners, our "allies."

We may receive third-party platform account information. If you choose to log into our game using an account from a third-party social platform like Google, Apple Game Center, or Facebook, it offers a convenient option. When you authorize this action, the platform will display a permission window clearly informing you which parts of your public profile we will access. This typically includes your nickname, avatar, and a unique identifier associated with that account. The scope of information we obtain depends entirely on your privacy settings on that platform and the permissions granted to us by that platform.

We receive confirmation letters from payment processing partners. When you make a purchase in the game to acquire value-added services, the entire payment process is handled directly by a secure third-party payment platform like the Apple App Store or Google Play Store. We absolutely do not collect, process, or store any of your sensitive financial information, such as full credit card numbers or bank account details. After the payment is complete, we only receive a "confirmation letter" from our payment partner, which contains a notice that the transaction was successful, a transaction ID for verification, and the specific items you purchased, so we can accurately deliver them to your account.

We obtain insight reports from data analytics and advertising partners. We collaborate with professional third-party data analytics services like Firebase Analytics and advertising networks. These partners use their technological tools to collect the aforementioned device and usage data and provide us with anonymous, aggregated statistical reports. These reports help us understand the macro-level behavior patterns of our player base and evaluate the effectiveness of our marketing campaigns.

Chapter Two: The Alchemist's Workshop - How We Use Your Information

We take the various "adventurer's logbook" entries we've collected and bring them to our highly confidential "Alchemist's Workshop." Through meticulous and precise "alchemy," which is our data processing and analysis, we transform this information into a valuable resource for enhancing your experience. Our purposes for using this information are entirely legitimate and transparent.

We use information to build and maintain your adventure world, which is our core service operation. This includes identity verification and management to create, verify, and manage your "Adventurer's Profile," ensuring you are the sole master of your account. It also includes service delivery to provide the game features and value-added services you request, for example, accurately adding a new item to your inventory after you purchase it. Cross-device synchronization is another use; if you play on multiple devices, we use your account information to seamlessly sync your game progress, so your adventure is never interrupted. We also send important communications related to service operations, such as significant updates to our terms or privacy policy, announcements of planned server maintenance, urgent security alerts, and account recovery assistance. Such information is crucial for protecting your rights and is generally not something you can unsubscribe from.

We work to optimize and personalize your adventure experience to improve game quality. This involves data-driven improvements by deeply analyzing anonymous, aggregated player data and game trends, we gain insights into the collective preferences of our players. This helps us make smarter decisions, such as adjusting the difficulty of a certain level, designing more popular characters, developing new game modes, or fixing underlying issues that most affect player experience. We also perform troubleshooting and bug fixing by using the device information and error logs you provide, our technical team can act like seasoned detectives to quickly locate and fix the root causes of game crashes or anomalies. We sometimes conduct A/B testing to find the best solutions. For example, we might show a small group of players a new interface layout (option A) and another group a different one (option B), then analyze the data to determine which option is more popular and efficient. This is a scientific method for improving our world. We also provide personalized content recommendations based on your game history and preferences, we may recommend in-game activities, challenges, or friends you might be interested in. Our goal is to make every login a new and pleasant surprise.

We provide community support and security to maintain world order. Efficient customer service is achieved because your communication records help our support team quickly understand the context of your issues, thereby providing more accurate and effective assistance. We manage the community environment by actively or passively monitoring public communications within the game, such as chat channels, and use a combination of automated tools and manual review to identify and address violations of our "Game World Covenant," such as cheating, fraud, abuse, or harassment. This is to protect the vast majority of honest adventurers and maintain a fair, safe, and friendly community. We also ensure security protection by analyzing IP addresses, login patterns, and other information to prevent and detect unauthorized access, account theft, and other security threats, protecting our services, systems, and the digital property of all players.

We will keep in touch with you, but only with your explicit consent. For marketing and promotions, only after obtaining your explicit consent will we send you information about our game news, new feature introductions, special event notifications, and promotional offers we think you might be interested in, via email or other channels. We promise never to abuse this permission. You can easily opt-out of receiving such marketing communications at any time by clicking the unsubscribe link in our emails or through in-game settings.

We will also use information to fulfill our legal and compliance obligations. In certain situations, we may need to process your data to comply with applicable laws and regulations, or to respond to legally binding court orders, subpoenas, or lawful requests from government agencies.

Chapter Three: The Emissary's Journey - How We Share Your Information

We solemnly promise that we will never sell your personal information to any third party. We understand the value of your data and will only share your "adventurer's logbook" with our "emissaries," our partners, in the following limited and necessary circumstances, and with the utmost prudence.

We share information with other adventurers in the world. This is essential for building a vibrant community. Your game nickname, avatar, game level, achievements, guild affiliation, and the chat content you post in public channels will be visible to other players in the game. This is to promote social interaction, allowing you to make friends, form teams, and face challenges together.

We share information with our trusted service providers. To keep our world running efficiently, we engage several professional third-party companies to assist us. These "emissaries" include cloud service providers who host our game servers and databases, such as Amazon Web Services or Google Cloud Platform. They also include data analytics service providers who help us process and analyze vast amounts of anonymous game data. We also use customer support tool providers who give us efficient ticketing systems and communication platforms, and payment processors who securely handle your purchase transactions. We have entered into strict data processing agreements with all these service providers. They can only access and process your information for the purposes we specify and according to our instructions, and they are legally and contractually obligated to maintain its strict confidentiality and security.

We share information with our advertising partners. To keep our casual game free for a wide audience, we may integrate advertising into the game. For this, we partner with several advertising networks. The information shared includes allowing them to collect your device identifiers like IDFA or GAID, your IP address, and some non-personally identifiable game behavior data. The purpose of this sharing is for them to deliver ads and track their performance, to ensure you do not repeatedly see the same ad, and to use algorithmic analysis to show you more relevant and personalized ads, thus improving the advertising experience and avoiding irrelevant interruptions. You always have control over personalized advertising, as detailed in Chapter Four.

We may share information for legal requirements or to protect vital interests. To comply with the law, we may disclose information when we receive a legally binding request, such as a court subpoena or search warrant, or when we believe in good faith that disclosure is necessary to comply with applicable laws and regulations. To protect rights, we may disclose information when we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, or to protect the rights, property, or personal safety of our company, our users, and the public.

We may share information during a business transfer. If NORHEN LIMITED undergoes a major corporate change, such as a merger, acquisition, reorganization, bankruptcy, or sale of all or part of its assets, your personal information may be transferred as part of the company's assets to the new owner or successor entity. In such cases, we will notify you via an announcement or email and will use commercially reasonable efforts to ensure that the new data controller continues to adhere to the commitments made in this Privacy Covenant.

We will only share information after obtaining your explicit consent. Beyond all the situations described above, if we wish to share your personal information with any other third party, we will provide you with a clear explanation beforehand and seek your explicit, active consent. We will never engage in any unplanned sharing without your permission.

Chapter Four: Your Sovereign Decree - Your Rights and Choices Over Your Personal Information

As the ruler of your data kingdom, you have absolute sovereignty over your "adventurer's logbook." Under applicable data protection laws, including the General Data Protection Regulation or GDPR, you are entitled to a series of rights.

You have the Right to be Informed. You have the right to be clearly informed about how we process your data through this Privacy Covenant.

You have the Right of Access. You have the right to confirm with us at any time whether we are processing your personal data and to request a copy of the personal information we hold about you, which is your "adventurer's logbook."

You have the Right to Rectification. If you find that the information we have on record about you is inaccurate or incomplete, for example, if you have changed your contact email, you have the right to request that we correct it immediately.

You have the Right to Erasure, also known as the "Right to be Forgotten." Under specific conditions, you have the right to request that we permanently delete your personal data. These conditions include when the data is no longer necessary for the purposes for which it was collected, you withdraw your consent, you object to our processing and we have no overriding legitimate grounds to continue, or the data has been unlawfully processed. Please note that exercising this right usually means your game account and all its progress and items will be permanently erased in an irreversible process.

You have the Right to Object. You have the right to object to our processing of your personal data based on our legitimate interests or for public interest. In particular, you have an unconditional right to object at any time to our use of your data for direct marketing purposes.

You have the Right to Restrict Processing. In certain circumstances, for instance, if you are contesting the accuracy of the data or you object to its deletion but want us to stop using it, you have the right to request that we "archive" your data, meaning we pause its processing and only store it.

You have the Right to Data Portability. For data that you have provided to us and that we process by automated means based on your consent or for the performance of a contract, you have the right to request that we provide it to you in a structured, commonly used, and machine-readable format, such as a CSV file, and you have the right to transmit that data to another service provider without hindrance from us.

You have Rights related to automated decision-making. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We commit that we will not make such fully automated decisions that have a significant impact on you.

To exercise your sovereign decree and any of the rights listed above, or if you have any questions or concerns about your privacy, please send your request to our data guardian team via our official data protection contact email: [email protected]. Please describe your request as clearly as possible in your email. To protect your account security, we may need to take reasonable steps to verify your identity before processing your request, such as asking you to confirm the email address associated with your account. We promise to respond within one month of receiving your request, though this may be extended in complex cases.

You can manage your choices to customize your experience. For marketing communications, you can opt-out of receiving our marketing messages at any time by clicking the "Unsubscribe" link at the bottom of any marketing email we send. For personalized advertising, you can limit ad tracking through your mobile device's system settings to opt-out of personalized ads. On an iOS device, you can go to Settings > Privacy & Security > Tracking and turn off tracking requests for apps. On an Android device, you can usually go to Settings > Google > Ads and select "Delete advertising ID." For push notifications, we may send you game updates or event reminders via push notifications. You can choose whether to receive them when you first launch the game and can turn this feature on or off for our app at any time in your device's system settings.

Chapter Five: The Guardian's Shield - Data Security, Retention, and International Transfers

5.1 Security Measures: Our Shield

We have deployed the robust "Guardian's Shield," a comprehensive set of industry-standard technical and organizational security measures to protect your information from unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include the following. On a technical level, we use encryption for sensitive data in transit and at rest, such as using TLS and AES-256 encryption standards. We deploy firewalls and intrusion detection and prevention systems. We also practice pseudonymization or anonymization of data and enforce strict access controls to ensure that only authorized personnel can access your data based on the principle of least privilege. On an organizational level, we have established and enforce internal data protection policies. We provide regular, mandatory data protection and security training for all employees who have access to your data. We also have strict data processing agreements with all third parties that handle our data. Despite our best efforts, please understand that no method of transmission over the internet or method of electronic storage is one hundred percent secure. Therefore, we cannot guarantee its absolute security. However, we promise that in the event of any data breach, we will immediately activate our emergency response plan and notify you and the relevant regulatory authorities as required by law.

5.2 Data Retention: The Imprint of Time

We will only retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Covenant, unless a longer retention period is required or permitted by law. Our criteria for determining retention periods include the following. We will retain your core account information and game progress as long as your account is active. For customer support records, we may retain them for a period after the issue is resolved to facilitate tracking and analysis. For anonymized data used for analytics, we may retain it for a long period to study long-term game development trends. When the retention period expires, or when we no longer need your data for the stated purposes, we will take secure measures to permanently delete or completely anonymize it.

5.3 Crossing World Borders: International Data Transfers

NORHEN LIMITED is headquartered in Northern Ireland, United Kingdom. To provide a seamless service to adventurers around the globe, your personal information may be transferred to, processed, and stored on servers located outside of your country or region, such as on the servers of our cloud service providers in the United States or the European Union. The data protection laws in these countries may differ from those in your jurisdiction. In such cases, we will ensure that appropriate legal safeguards are in place to protect your data. For example, we will rely on mechanisms recognized under the UK General Data Protection Regulation (UK GDPR), such as entering into "Standard Contractual Clauses" (SCCs) or ensuring the recipient is in a country that has been deemed to have an "adequate" level of data protection by the UK government. Wherever your information is processed, we promise it will receive a level of protection consistent with that described in this Privacy Covenant.

Chapter Six: A Sacred Trust - Privacy Protection for Children

Our game world is primarily designed for adult adventurers and teenagers who have reached the legal age of consent. Our services are not directed at children under the age of 13, or another applicable age in your jurisdiction. We do not knowingly or intentionally collect or solicit any personal information from anyone we know to be a child.

We strongly advise parents and legal guardians to monitor and guide their children's online activities. If you are a parent or guardian and discover that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. We will promptly verify the situation and take all necessary steps to remove the relevant information from our systems.

Chapter Seven: The Evolving Covenant - Changes to This Privacy Covenant

Our game world is constantly growing, and the relevant laws and regulations are always evolving. Therefore, this Privacy Covenant may also be amended and updated from time to time.

For any minor, non-substantive changes, we may simply update the "Last Updated" date on this page. For any material changes that could significantly affect your rights and obligations, we promise to notify you in a more prominent way in advance. This may include an in-game pop-up announcement, a system push notification, or a dedicated email sent to your registered email address. We encourage you to review this Privacy Covenant periodically to stay informed about our latest privacy practices. Your continued use of our services after the changes have been posted and have taken effect will signify your reading, understanding, and acceptance of the revised Privacy Covenant.

We once again sincerely thank you for taking the valuable time to read this detailed "Our Adventurer's Privacy Covenant" in its entirety. Protecting your privacy is our most solemn and serious commitment to you.

Now, please set down this scroll and continue your magnificent adventure! We will remain behind the scenes, serving as your most loyal data guardians, protecting you every step of the way.

NORHEN LIMITED

Suite 1805, 44a Frances Street, Newtownards County Down, BT237DN

[email protected]