Effective Date: 28 May 2025
Nexil Software LTD is the data controller for personal data processed via T-War.
Contact: [email protected]
| Category | Examples | Purpose | Legal basis (GDPR Art 6) | Retention* |
|---|---|---|---|---|
| Account | Email, username, password hash | Create and manage account | (b) contract | Until deletion + 6 yrs |
| Account attribution | Campaign source, UTM parameters, click ID, landing path | Attribute account registrations and measure campaign effectiveness | (f) legitimate interest | Until account deletion |
| Payment | Billing address, VAT ID, last 4 card digits (via Paddle) | Process payment and tax | (b) contract; (c) legal | 10 yrs |
| Gameplay | Match stats, achievements, chat logs | Provide service; anti-cheat | (b) contract; (f) legitimate interest | 2 yrs rolling |
| Marketing | Default email subscription status, unsubscribe token, engagement data | Send game updates, reminders, and offers; manage unsubscribe requests | (a) consent; (f) legitimate interest where permitted | Until opt-out |
| Device | IP, browser UA, locale | Fraud prevention, localisation | (f) legitimate interest | 1 yr |
*Retention may be extended where required by law or for legal claims.
From you when you register or contact support.
When you register with a password, Google, or Facebook, campaign-source data from tagged URLs in the current signup flow may be sent with the registration request and associated with the resulting account.
When you register, your account is subscribed to T-War marketing and reminder emails by default. You can unsubscribe at any time from the email footer or your account settings.
Automatically via cookies and similar technologies (see Section 9).
From Paddle when you complete a purchase.
Game servers are hosted by Hetzner Online GmbH in Germany, which is ISO 27001 certified and GDPR-compliant. Any transfers outside the EEA rely on Standard Contractual Clauses plus supplementary measures.
We share data only with:
Paddle.com Market Ltd (payments, Merchant-of-Record).
Hetzner Online GmbH (hosting, Germany).
Cloudflare, Inc. (registration security and bot protection).
Self-hosted log aggregation (Germany, operated by us).
Authorities or legal advisers where required by law.
A full, current list is available on request.
We follow OWASP secure coding guidelines, enforce TLS 1.3, apply least-privilege access, perform regular penetration tests and store credentials with salted hashing.
Under GDPR you can request access, rectification, erasure, restriction, data portability or object to processing. Email [email protected] with proof of identity.
You can opt out of marketing emails at any time using the unsubscribe link in any marketing email or the marketing email preference in your account settings.
If unresolved you may complain to the Office of the Commissioner for Personal Data Protection (Cyprus).
California residents may invoke CCPA rights, including access, deletion and opt-out of sale, via the same contact.
T-War is not directed at children under 16. We do not knowingly process their data without parental consent.
We use (i) essential cookies for authentication and security, (ii) analytics cookies with controls available in settings, and (iii) marketing cookies only with prior consent.
Campaign-source data held temporarily in the current signup flow is submitted with a registration or new social-login request to attribute the resulting account. It is not stored in a marketing cookie or persistent browser storage. Marketing cookies and scripts remain consent-based.
Material changes will be announced by email or in-game banner 30 days in advance. The latest version is always available on our legal pages.
Last updated: 23 July 2026