Privacy Policy for Realm of Dungeons
§1. General Provisions
This Privacy Policy governs the processing of personal data in the Realm of Dungeons application (hereinafter "Application") operated by Krzysztof Zaleski (hereinafter "Administrator")[1][3]. The Policy constitutes an integral part of the Terms of Use and complies with EU General Data Protection Regulation (GDPR) requirements[2][3].
§2. Data Controller
The Administrator of your personal data is:
Krzysztof Zaleski
Contact email: webzaleski@gmail.com[1][4]
§3. Data Collection and Processing
3.1 Types of Processed Data
The Application collects and processes:
Account Data: Username and password (hashed using bcrypt library)[5]
Gameplay Data: Character statistics, inventory, and progression
Technical Data: IP address, device information, and session cookies[1][4]
Local Storage: Session maintenance data stored directly on user devices[5]
3.2 Legal Basis
Data processing occurs under Article 6(1)(b) GDPR for service performance[1][3]. Session storage is essential for application functionality[5].
§4. Data Security Measures
The Administrator implements technical safeguards including:
Password Hashing: BCrypt algorithm with salt rounds for credential protection[5]
Network Security: TLS encryption for data in transit
Access Controls: Role-based server access restrictions
Regular Audits: Security vulnerability assessments every 90 days[4]
§5. Data Storage and Retention
Server Storage: User accounts and character data persisted in private databases until account deletion[5]
Device Storage: Session tokens automatically cleared after 30 days inactivity[5]
Backups: Encrypted daily backups retained for 90 days[4]
§6. User Rights
Under GDPR, users may:
Access: Request full data export in machine-readable format
Rectification: Update account information through application settings
Erasure: Delete account and associated data permanently
Restriction: Temporarily freeze account processing
Portability: Obtain game progress data for transfer[3][4]
Exercise rights via email to webzaleski@gmail.com with "GDPR Request" in subject[1][4].
§7. Third-Party Services
The Application uses:
Website analytics and marketing: Optional Google Analytics (when configured) and Facebook Pixel load only after consent to their respective categories. These services may process device, page view, and interaction data.
Hosting: EU-based servers with GDPR-compliant providers[4]
Payment Processors: External services handling financial transactions separately[2]
§8. Cookies and Local Storage
The Application utilizes:
Session Cookies: Authentication tokens valid until browser closure[1]
Local Storage: Persistent game settings and preferences[5]
Website consent: Your cookie preferences are remembered in local storage for 180 days. Optional analytics and marketing cookies are disabled until you accept their category.
Change website consent at any time using Cookie Settings in the footer. See the Cookie Policy for details. Application session settings can also be managed through your browser.
§9. Policy Updates
Users will receive email notification of material changes 30 days prior to effect[4]. Continued use constitutes acceptance of revised terms[1].