PRIVACY POLICY

Last Updated: December 1, 2025

  1. Introduction

Vortex Cannon Entertainment (“we,” “us,” or “our”) is committed to protecting the privacy and security of our players and users (“you” or “user”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website vortexcannon.org, play our games, or use our services.

We process your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

  1. Data Controller

The Data Controller responsible for your personal information is:

Vortex Cannon Entertainment
Email: DPO@vortexcannon.org

If you have any questions regarding this Privacy Policy, please contact our Data Protection Officer (DPO) at the email address above.

  1. Information We Collect

We collect information in the following ways:

  1. Information You Provide to Us
  • Account Data: Email address, username, password, date of birth (to verify age), and gender.
  • Communications: Information sent to our Customer Support (names, emails, case history) or posted on our forums.
  • Transaction Data: While we do not store full credit card numbers, we keep records of your purchase history, subscription details, and refund requests.
  1. Information Collected Automatically
  • Activity Data: IP address, browser type, operating system, access times, and region.
  • Game Data: Game progress, statistics, unlocks, in-game interactions, and history.
  • Device Data: Hardware model, operating system version, and unique device identifiers.
  1. Information from Third Parties
  • Social Networks: If you link your account to third parties (e.g., Facebook, Google, Twitch), we may receive your public profile information (name, email) in accordance with their policies.
  1. How and Why We Use Your Data (Legal Basis)

Under GDPR, we rely on the following legal bases to process your data:

Purpose Data Categories Legal Basis
Service Provision: To provide games, create accounts, and manage subscriptions. Account Data, Game Data, Device Data Contractual Necessity (We need this to provide the service you requested).
Customer Support: To resolve technical issues and answer queries. Communications, Activity Data Legitimate Interest (Improving our service) or Contractual Necessity.
Security & Fair Play: To prevent fraud, cheating, and banning abusive accounts. Activity Data, IP Address, Account Data Legitimate Interest (Protecting the integrity of our games).
Payments: To process transactions and handle taxes. Transaction Data Legal Obligation (Tax laws) & Contractual Necessity.
Marketing & Analytics: To send newsletters or analyze user behavior. Email, Activity Data, Cookies Consent (You can withdraw this at any time).
  1. Data Retention

We retain your personal data only as long as necessary:

  • Active Accounts: For the duration of your account’s existence.
  • Customer Support Logs: Up to 2 years to ensure issue resolution.
  • Server/Activity Logs: Between 30 days and 90 days for security and debugging.
  • Transaction Records: Up to 5 years as required by tax and accounting laws.
  • Deleted Accounts: Upon request, we will delete your personal data within 30 days, unless retention is required by law (e.g., for tax purposes).
  1. Sharing of Information

We do not sell your personal data. However, we may share data with trusted third parties strictly for the purposes of providing our services:

  • Service Providers: Hosting services (to run our servers), customer support tools, and email delivery services.
  • Payment Processors: Third-party payment gateways (e.g., PayPal, Stripe) process payments. We do not store your financial details on our servers.
  • Legal Authorities: If required by law, regulation, or legal process (e.g., a court order), or to protect the rights and safety of Vortex Cannon Entertainment and our users.
  1. International Data Transfers

Our servers and database may be located in the European Union (EU). If you are accessing our services from outside the EU, your information may be transferred to, stored, and processed in the EU.

If we transfer data outside the European Economic Area (EEA) to a country not ensuring an adequate level of protection, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data remains protected.

  1. Your Rights

Under the GDPR, you have the following rights:

  1. Right to Access: Request a copy of the personal data we hold about you.
  2. Right to Rectification: Correct inaccurate or incomplete data via your account settings.
  3. Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data (subject to legal retention periods).
  4. Right to Restrict Processing: Ask us to limit the use of your data in certain situations.
  5. Right to Object: Object to processing based on legitimate interests or direct marketing.
  6. Right to Data Portability: Request your data in a structured, commonly used, and machine-readable format.
  7. Right to Withdraw Consent: If we process data based on consent (e.g., cookies), you can withdraw it at any time.

To exercise these rights, please contact us at DPO@vortexcannon.org. We will respond within 30 days.

  1. Cookies and Tracking Technologies

We use cookies to improve your experience, manage sessions, and analyze traffic.

  • Essential Cookies: Required for the site to function (e.g., login status).
  • Analytics Cookies: Help us understand how visitors use the site.

You can control cookies through your browser settings or our “Cookie Settings” banner.

  1. Security

We implement appropriate technical and organizational measures (encryption, access controls) to protect your personal data. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

  1. Age Limitation

Our services are strictly for users aged 18 and over. We do not knowingly collect data from individuals under 18. If we become aware that a minor has provided us with personal data, we will delete it immediately.

  1. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority in your country of residence (e.g., the Data Protection Authority in your EU member state).

  1. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this page will indicate when changes were made. We encourage you to review this policy periodically.