Effective Date: 28 May 2025
Nexil Software LTD is the data controller for personal data processed via T-War.
Contact: [email protected]
| Category | Examples | Purpose | Legal basis (GDPR Art 6) | Retention* |
|---|---|---|---|---|
| Account | Email, username, password hash | Create and manage account | (b) contract | Until deletion + 6 yrs |
| Payment | Billing address, VAT ID, last 4 card digits (via Paddle) | Process payment and tax | (b) contract; (c) legal | 10 yrs |
| Gameplay | Match stats, achievements, chat logs | Provide service; anti-cheat | (b) contract; (f) legitimate interest | 2 yrs rolling |
| Marketing | Email opt-in, engagement data | Send offers | (a) consent | Until opt-out |
| Device | IP, browser UA, locale | Fraud prevention, localisation | (f) legitimate interest | 1 yr |
*Retention may be extended where required by law or for legal claims.
From you when you register or contact support.
Automatically via cookies and similar technologies (see Section 9).
From Paddle when you complete a purchase.
Game servers are hosted by Hetzner Online GmbH in Germany, which is ISO 27001 certified and GDPR-compliant. Any transfers outside the EEA rely on Standard Contractual Clauses plus supplementary measures.
We share data only with:
Paddle.com Market Ltd (payments, Merchant-of-Record).
Hetzner Online GmbH (hosting, Germany).
Self-hosted log aggregation (Germany, operated by us).
Authorities or legal advisers where required by law.
A full, current list is available on request.
We follow OWASP secure coding guidelines, enforce TLS 1.3, apply least-privilege access, perform regular penetration tests and store credentials with salted hashing.
Under GDPR you can request access, rectification, erasure, restriction, data portability or object to processing. Email [email protected] with proof of identity.
If unresolved you may complain to the Office of the Commissioner for Personal Data Protection (Cyprus).
California residents may invoke CCPA rights, including access, deletion and opt-out of sale, via the same contact.
T-War is not directed at children under 16. We do not knowingly process their data without parental consent.
We use (i) essential cookies for authentication and security, (ii) analytics cookies with controls available in settings, and (iii) marketing cookies only with prior consent.
Material changes will be announced by email or in-game banner 30 days in advance. The latest version is always available on our legal pages.
Last updated: 28 May 2025