Privacy Policy

1. Introduction

Netorbus RPG ("the Game", "we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data. By using the Game, you consent to the practices described in this policy.

2. Data We Collect

We collect the following categories of personal data:

Data Type	Purpose	Collected When
Username	Account identification, in-game display	Registration
Email address	Account authentication, password resets, important notifications	Registration
Password (hashed)	Account security	Registration
IP address	Security, fraud prevention, abuse detection	Each visit
Session data	Keeping you logged in, CSRF protection	Each visit
Game activity data	Game functionality, economy tracking, leaderboard	During gameplay
Chat messages	In-game communication, moderation	When you send messages
Profile biography, player/faction avatars and company images	Optional profile and community presentation; uploaded content may be visible to other players	When you edit a profile, faction or company and upload an image
Mobile API credentials, device identifiers and push notification tokens	Authenticate connected mobile devices, manage sessions and deliver device notifications	When an authorized mobile client signs in or registers a device
Payment transaction IDs	Purchase verification, support	When you make a purchase

When real-money checkout is enabled, payment instructions are provided by Coinbase Commerce, a third-party payment processor with its own privacy policy. Netorbus stores charge and transaction references, purchase details, status and the provider's webhook event data to fulfill purchases and resolve payment issues. Do not include payment credentials in chat or profile content.

Website activity measurement

We measure page routes, approximate active page time, browser-session identifiers, broad mobile/desktop category, referring domain and server response timing, plus the HTTP status and duration of game actions. Signed-in activity may be associated with your player ID. We do not record form contents, passwords, private messages or complete URL query strings in this activity dataset. For new web registrations, we may retain the first referring domain or the campaign labels utm_source, utm_medium and utm_campaign from that browser session with the player profile. Labels are limited to 100 letters, numbers, spaces, dots, underscores or hyphens; please do not include personal information in them. Historical and opted-out accounts are left unattributed. Browser-session identifiers are keyed hashes rather than raw session IDs; no additional analytics cookie is created.

This measurement excludes administrative pages, known automated agents and requests carrying Do Not Track or Global Privacy Control. These preferences do not disable operational account security, transactions or moderation records. Page and action detail is scheduled for removal after 90 days; daily player activity is retained for 365 days. Security and gameplay records follow their own retention requirements. Blocking scripts or closing a page can result in incomplete activity estimates.

3. How We Use Your Data

We use your personal data to:

• Provide, operate, and maintain the Game.
• Authenticate your identity and secure your account.
• Process transactions and deliver purchased items.
• Moderate in-game chat and enforce community rules.
• Detect and prevent cheating, fraud, and abuse.
• Send essential account-related communications (e.g., password resets).
• Improve and optimize the Game experience.

We do not sell your personal data to third parties. We do not send marketing emails.

4. Legal Basis for Processing (EU/EEA Users)

If you are located in the European Union or European Economic Area, we process your data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Contract performance: Processing necessary to provide the Game and your account (Article 6(1)(b)).
• Legitimate interests: Security, fraud prevention, and Game improvement (Article 6(1)(f)).
• Consent: For non-essential cookies (Article 6(1)(a)). See our Cookie Policy.

5. Data Sharing

We may share your data with:

• Coinbase Commerce: Payment processing. They receive only the data necessary to complete transactions.
• Hosting providers: Our web hosting infrastructure stores your data securely as part of operating the Game.
• Google reCAPTCHA: Enabled web registration sends a challenge token to our server for verification with Google. The browser loads Google's reCAPTCHA service, which processes browser and network information under Google's privacy policy.
• Fonts and asset delivery: Some pages load fonts and interface libraries from Google Fonts and public content delivery networks. Your browser contacts these providers to retrieve those files.
• Law enforcement: If required by law, court order, or to protect the safety of our users.

We do not share your data with advertisers or data brokers.

6. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain certain data for legal, security, or fraud-prevention purposes.

Game activity logs and economy data may be retained in anonymized form for analytical purposes.

7. Data Security

We take reasonable measures to protect your personal data, including:

• Passwords are hashed using industry-standard algorithms (bcrypt) — we never store plaintext passwords.
• CSRF protection on all forms.
• HTTPS encryption for data in transit.
• Access controls limiting who can view personal data.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a portable format.
• Restriction: Request that we limit processing of your data.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us via our Discord server or email support@netorbus.com. We will respond within 30 days.

9. Children's Privacy

The Game is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us data, please contact us immediately.

10. International Data Transfers

Your data may be stored and processed in countries outside your own. By using the Game, you consent to the transfer of your data to such countries. We ensure appropriate safeguards are in place for international data transfers as required by applicable law.

11. Third-Party Links

The Game may contain links to third-party websites (e.g., Discord, Coinbase). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the Game or via email. Continued use of the Game after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related inquiries, contact us through our Discord server or email us at support@netorbus.com.