Effective Date: 28 May 2025
Nexil Software LTD is the data controller for personal data processed via T-War.
Contact: [email protected]
| Category | Examples | Purpose | Legal basis (GDPR Art 6) | Retention* |
|---|---|---|---|---|
| Account | Email, username, password hash | Create & manage account | (b) contract | Until deletion + 6 yrs |
| Payment | Billing address, VAT ID, last 4 card digits (via Paddle) | Process payment & tax | (b) contract; (c) legal | 10 yrs |
| Gameplay | Match stats, achievements, chat logs | Provide service; anti-cheat | (b) contract; (f) legitimate interest | 2 yrs rolling |
| Marketing | Email-opt-in, engagement data | Send offers | (a) consent | Until opt-out |
| Device | IP, browser UA, locale | Fraud prevention, localisation | (f) legitimate interest | 1 yr |
*Retention may be extended where required by law or for legal claims.
• From you when you register or contact support.
• Automatically via cookies and similar tech (see § 9).
• From Paddle when you complete a purchase.
Game servers are hosted by Hetzner Online GmbH in Germany, which is ISO 27001 certified and fully GDPR-compliant. Any transfers outside the EEA rely on Standard Contractual Clauses plus supplementary measures.
We share data only with:
• Paddle.com Market Ltd (payments, MoR);
• Hetzner Online GmbH (hosting, Germany);
• Self-hosted log aggregation (Germany, operated by us);
• Authorities or legal advisers where required by law.
A full, current list is available on request.
We follow OWASP secure coding guidelines, enforce TLS 1.3, apply least-privilege access, perform regular penetration tests and store credentials with salted hashing.
Under GDPR you can request access, rectification, erasure, restriction, data portability or object to processing. Email [email protected] with proof of identity.
If unresolved you may complain to the Office of the Commissioner for Personal Data Protection (Cyprus).
California residents may invoke CCPA rights (access, deletion, opt-out of "sale") via the same contact.
T-War is not directed at children under 16. We do not knowingly process their data without parental consent.
We use (i) essential cookies for authentication/security, (ii) analytics cookies (opt-out available in settings), and (iii) marketing cookies only with prior consent (banner on first visit).
Material changes will be announced by email or in-game banner 30 days in advance. The latest version is always at https://t-war.co.il/legal/privacy.
Last updated: 28 May 2025