privacy
创建于 差异永不过期
Privacy Policy for War Era
Privacy Policy - War Era
Effective Date: 22/01/2024
Effective Date: 28-09-2026
Welcome to War Era ("we," "us," "our"). We are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use our online game War Era ("Service").
Welcome to War Era ("War Era", "we", "us", "our"). This Privacy Policy explains how WAR ERA SARL collects, uses, discloses, retains and protects personal data in connection with War Era, including the game, our websites, public API, account and support systems, and other related services that we operate (collectively, the "Service").
1. Information We Collect
It also applies to personal data that War Era processes through our official Discord community or other third-party services where War Era determines the purpose and means of that processing. Third-party platforms may separately process personal data under their own privacy policies.
Account Information: When you create an account through Google, we receive your Google profile information including your name and email address.
This Policy explains your rights under Regulation (EU) 2016/679 (the "GDPR"), the French Data Protection Act (Loi Informatique et Libertés), and other applicable data-protection law.
Gameplay Data: We collect information about your gameplay, including your in-game actions, progress, and preferences.
2. Use of Information
1. Who we are
The information we collect is used to provide, maintain, and improve our Service, including personalizing your gaming experience.
War Era is operated by WAR ERA SARL, a company registered in France, with its registered office at 173 rue de Courcelles, 75017 Paris, France. Our company registration details are available on our Legal Notice.
We may use your email address to send you Service-related notices.
3. Sharing of Information
WAR ERA SARL is the data controller for the personal data described in this Policy. This means that, where we act as controller, we determine why and how that personal data is processed.
With Google: As you use Google to create your account, relevant information is shared with Google in accordance with their terms and privacy policy.
Our main establishment is in France. The Commission Nationale de l'Informatique et des Libertés ("CNIL") is the French supervisory authority responsible for data protection. Your right to complain to the CNIL or another competent supervisory authority is described in Section 10.
Legal Compliance: We may disclose your information if required by law or if we believe in good faith that such action is necessary to comply with legal processes or protect the rights, property, or safety of War Era or its users.
4. Data Security
For questions about this Policy, the processing of your personal data, or the exercise of your data-protection rights, contact us at contact@warera.io.
We implement appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure, or destruction of data.
2. Information we collect
However, no method of transmission over the Internet, or method of electronic storage, is 100% secure.
5. Your Rights
2.1 Account and authentication information: To create and access a War Era account, you provide an email address and use one of the authentication methods that we make available.
You have the right to access, update, or delete your information. If you wish to exercise these rights, please contact us at the details provided in the Terms of Use.
If you sign in using an email verification code, we process your email address and authentication information necessary to issue and verify that code.
6. Third-Party Services
If you use Google Sign-In, we receive your email address and Google user identifier from Google.
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties.
If you use Discord to sign in, we receive your email address, Discord user identifier and current Discord avatar from Discord.
7. Changes to This Privacy Policy
Google and Discord also process personal data independently in accordance with their own privacy policies when you use their services.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
We may also record information necessary to maintain and secure your account, such as your War Era account identifier, account creation date, last connection date and authentication status.
8. Contact Us / Data Controller
2.2 Phone verification: In certain situations, such as confirming Family Group eligibility, investigating suspected account sharing or multi-accounting, or addressing another account-integrity concern, we may ask you to verify your account using a mobile phone number.
War Era
We use Twilio Lookup to determine whether a phone number is eligible for verification, and Twilio Verify to deliver and confirm the verification code.
173 Rue de Courcelles, 75017 Paris, France
Email: contact@warera.io
If you have any questions about this Privacy Policy, please contact us at the address above.
Twilio Verify also uses fraud-prevention functionality, including Verify Fraud Guard. Fraud Guard analyses verification traffic for patterns associated with SMS fraud and may automatically prevent a verification message from being sent where Twilio identifies the request as suspicious.
While a War Era phone-verification attempt is active, we temporarily retain the phone number in encrypted form for the purpose of completing that verification.
After the verification succeeds or the verification attempt ends, War Era deletes the phone number itself.
If verification succeeds, War Era instead generates and retains a keyed, one-way fingerprint derived from the verified number. The fingerprint is intended to allow us to determine whether the same verified number has previously been associated with another account without retaining the number itself.
We also retain the country associated with the verified number for account-integrity purposes. The phone-verification country and verification information are available only internally to authorised staff and are not displayed publicly or exposed through the public API.
The retained fingerprint does not contain the phone number in directly readable form, is not designed to be reversible, and is used only for comparison and account-integrity purposes.
Where you ask us to exercise a right concerning verification information held by Twilio and identification of the relevant Twilio record requires the original phone number, we may ask you to provide that number again for that limited purpose. We can compare it against the fingerprint already held by War Era without retaining the number after that process is complete.
Twilio generally acts on our instructions when providing Lookup and Verify services, but it may also process certain service, communications-usage and fraud-prevention data for its own purposes as an independent controller, including platform security, fraud and abuse prevention and compliance with its legal obligations. Further information is available in Twilio's privacy documentation.
2.3 Gameplay, profile and user-generated content: We process information generated through your use of the game and its features.
Depending on the feature, this may include:
- Your username, avatar, public profile description and account identifier;
- Account creation and activity dates;
- Country and in-game affiliations;
- Game progress, level, experience and skill information;
- Equipment, cosmetic items and other game assets;
- Rankings, statistics, achievements and similar competitive information;
- Premium or Supporter-related game status and counts where these form part of gameplay or public statistics;
- Military Unit, Party, government or other in-game roles;
- Actions performed in the game and timestamps associated with those actions;
- Transactions and transfers involving in-game resources;
- Preferences and game settings; and
- Content that you create or submit, including articles, chat messages, banners, descriptions and other user-generated content.
Some gameplay and profile information is intentionally visible to other players or available through our public API because War Era is a multiplayer game. Section 4 explains what information may be publicly available.
Official images hosted by War Era, including player avatars and approved game or shop content, are stored using infrastructure operated for the Service.
User-generated content may also contain images hosted through approved external providers. Section 5 explains the effect of loading externally hosted content.
2.4 Technical, connection and device data: We process technical and connection information necessary to operate, secure and protect the Service. This may include:
- IP address;
- Connection and request timestamps;
- Device category;
- Operating-system information;
- Browser type or family;
- Information transmitted as part of ordinary requests to the Service;
- Security and session cookies or similar identifiers;
- Login and account-connection information; and
- Device or browser fingerprint signals generated from a limited combination of technical information.
Our device/browser fingerprint does not attempt to uniquely identify a physical device using every characteristic available from it. It is generated from a limited set of technical signals and may therefore produce the same or a similar fingerprint for different users using similar devices, browsers, network configurations or privacy tools.
A fingerprint match is therefore treated as a security signal rather than conclusive proof that two accounts belong to the same person.
We also use security and session identifiers, including cookies used for account security and anti-abuse purposes, to identify patterns such as the same browser or session being used across multiple accounts, suspected account switching, multi-accounting, automated use, botting, scripting, ban evasion and other circumvention of the Service's rules.
Shared IP addresses and fingerprint similarities can occur for legitimate reasons, including shared networks, similar devices, VPN services, carrier infrastructure and privacy services such as relay networks. We therefore do not treat an IP-address match or ordinary fingerprint similarity alone as conclusive proof of a violation.
We do not use this technical profiling for advertising, behavioural marketing or cross-site advertising profiles.
2.5 Support, complaints and moderation data: If you contact us for support, submit a complaint, appeal a moderation decision or otherwise communicate with War Era, we process the information necessary to handle that interaction.
Support may currently be provided through:
- Email;
- Our self-hosted Chatwoot support inbox;
- Our in-game support and reporting systems; and
- Our official Discord community.
Support records may include your account identifier, username, email address where applicable, Discord information where you contact us through Discord, the content of messages, attachments you provide, relevant transaction information, and other information necessary to investigate or respond to your request.
We also process moderation and enforcement records, which may include:
- Warnings, mutes, restrictions, fines, suspensions and bans;
- The date and duration of the sanction;
- The reason for the decision;
- The amount of an in-game fine where applicable;
- Evidence and account activity relevant to an investigation;
- Appeals and their outcome; and
- Records of actions taken by authorised staff.
Access to non-public support and moderation information is restricted according to staff role.
2.6 Payment data: If you make a purchase, payment processing is provided through Stripe.
War Era does not receive or store your complete payment-card number.
Depending on the transaction, War Era may receive or retain information such as your Stripe customer or payment identifier, transaction identifier, billing country, customer name, email address associated with the payment, card brand and last four digits, purchase amount and date, applicable tax information, subscription and payment status, and refund, dispute or chargeback information.
Access to this information within War Era is restricted to authorised personnel whose role requires it, including for billing, accounting, payment support, fraud prevention or dispute handling.
Purchases are optional and are not required to create a basic War Era account or play the free parts of the Service.
2.7 Push-notification data: Where push notifications are enabled, we use Firebase Cloud Messaging, a Google service, to deliver notifications associated with your account.
For this purpose, we process a notification token associated with your War Era account together with your notification preferences and information necessary to determine which notification should be sent.
You can disable particular notifications or all push notifications through the available settings and your device settings.
2.8 Age and parent or guardian information: We process an age bracket during registration so that we can apply the account rules and safeguards appropriate to your age.
The intended age brackets are:
- Under 15;
- 15 to 17; and
- 18 or older.
We do not need to retain your full date of birth for this purpose.
If you indicate that you are under 15, access to the Service requires the applicable parent or legal-guardian approval process. For that process, we collect the parent or guardian's email address, the name associated with that email and a record of their approval.
Where a user under 18 makes a purchase for which parent or legal-guardian authorisation is required, we may also process the parent or guardian's name and email address in order to request and document that authorisation. Where appropriate, the email used for the purchase-authorisation process is checked against the guardian information already provided for the account.
Parent and guardian information is used only for age-related account administration, authorisation, safeguarding, legal compliance and related evidence purposes.
2.9 Information you must provide: An email address, authentication information and your age bracket are required to create and maintain a War Era account. Without this information, we cannot create your account or provide the Service.
Phone verification information is required only where phone verification is requested under our Terms of Use for account-integrity, Family Group or related purposes. If required verification is not completed, the account may be subject to the restrictions or suspension described in our Terms of Use.
Parent or guardian information is required only where the age or purchase-authorisation rules described in Section 2.8 apply. Without the required approval, we may be unable to create or continue the relevant account access or complete the relevant purchase.
Other information, such as a public profile description or user-generated content that you choose to create, is optional unless we clearly tell you otherwise when the information is requested.
3. Why we process your data and our legal bases
We process personal data only where we have an applicable legal basis. The basis depends on the purpose for which the data is being used.
Providing and administering the Service: We process account, authentication, gameplay and profile information to create and maintain your account, authenticate you, provide game functionality, save progress, display account-specific information and otherwise provide the Service you request.
Legal basis: Article 6(1)(b) GDPR, processing necessary for the performance of our contract with you or to take steps at your request before entering into that contract.
Account authentication and OTP delivery: We process your email address and authentication information to authenticate access to your account and, where email authentication is used, to send and validate one-time verification codes.
Legal basis: Article 6(1)(b) GDPR.
Service communications: We use your contact information to send communications necessary for the operation of your account or the Service, such as security information, account notices, purchase information, changes affecting the Service and legally required notices.
Legal basis: Article 6(1)(b) GDPR where the communication is necessary to administer the Service or our contract with you, and Article 6(1)(c) GDPR where communication is necessary to comply with a legal obligation.
Age-related account administration and parent or guardian approval: We process your age bracket to determine which account rules and safeguards apply.
Where parent or legal-guardian approval is required to create or use an account or authorise a purchase, we process the guardian information necessary to obtain and document that approval.
Legal basis: Article 6(1)(b) GDPR where this processing is necessary to administer eligibility for or performance of the Service or transaction, and Article 6(1)(c) GDPR where a specific legal obligation requires the processing.
Where a particular processing operation relies specifically on consent under Article 6(1)(a) GDPR, the rules applicable to the consent of minors also apply. In France, a minor aged 15 or older may provide their own consent for the direct offer of information-society services where Article 8 GDPR applies. For a child under 15, the consent requirements provided by applicable French law apply.
Phone verification and account-integrity checks: We use phone verification, the resulting one-way fingerprint and related verification information to confirm account eligibility, identify repeated use of the same verified number, investigate suspected multi-accounting or account sharing, administer Family Group rules and protect the integrity of the Service.
Legal basis: Article 6(1)(f) GDPR, our legitimate interests in preventing fraud, abuse, account circumvention and unfair use of the Service and in protecting War Era and its players.
We limit this processing by deleting the phone number itself after verification, retaining only the keyed one-way fingerprint and necessary country information, restricting access to authorised staff and providing review mechanisms where verification affects an account.
Security, anti-abuse and platform integrity: We process IP addresses, connection information, security/session identifiers, request-derived device and browser information, fingerprints and related technical signals to:
- Secure accounts and authentication;
- Detect and prevent unauthorised access;
- Detect suspected multi-accounting or prohibited account sharing;
- Detect bots, scripts and other prohibited automation;
- Detect cheating, circumvention and other abuse;
- Investigate ban evasion or attempts to bypass enforcement;
- Identify repeated or coordinated abuse affecting other users or the game economy; and
- Protect the availability, integrity and security of the Service.
Legal basis: Article 6(1)(f) GDPR, our legitimate interests in protecting the Service, enforcing its integrity rules, preventing fraud and abuse, and protecting users from conduct that would undermine fair or secure use of the Service.
In assessing those interests, we take into account that technical signals can have innocent explanations. Shared IP addresses, similar device fingerprints, VPNs, mobile networks, relay services and other shared infrastructure are therefore not all given the same evidentiary weight.
Access to detailed technical information is restricted according to staff role, and relevant identifiers are masked in ordinary staff tools where full access is not required.
Profiling and automated analysis: The account-integrity systems described above use automated analysis of technical signals to identify relationships or patterns between accounts. This constitutes profiling within the meaning of Article 4(4) GDPR.
At a high level, the system compares technical and security signals such as session information, connection information and limited device/browser characteristics in order to identify patterns consistent with account sharing, multi-accounting, automation or circumvention.
A matching IP address or ordinary fingerprint similarity is not treated as proof that two accounts are controlled by the same person.
Some stronger security signals may trigger an automatic protective restriction or suspension. Users can contest that measure, provide relevant context and request human review through our support channels. A reviewer considers the relevant information and can lift or modify the measure.
War Era does not rely solely on an IP-address match or ordinary device-fingerprint match to make a final determination that you violated the Terms.
War Era does not use solely automated processing to make a final decision permanently terminating an account without the opportunity for the review and safeguards required by applicable law.
Where a decision is based solely on automated processing and produces legal effects or similarly significantly affects you, War Era will provide the information and safeguards required by applicable law, including, where applicable, the ability to obtain human intervention, express your point of view and contest the decision.
Cookies and similar technologies used for security: Certain security and session mechanisms use cookies or similar technologies to operate account sessions and identify behaviour associated with circumvention or abuse.
The GDPR legal basis described above is separate from the rules governing the storage of or access to information on a user's device.
Where a cookie or similar technology is strictly necessary to provide a service expressly requested by the user or falls within another applicable exemption under Article 82 of the French Data Protection Act, it may be used without consent.
Where a cookie or similar technology does not qualify for an applicable exemption, War Era will obtain any consent required by Article 82 before storing or accessing that information.
War Era does not use these technologies for behavioural advertising.
Moderation and enforcement: We process gameplay information, reports, communications, moderation records and relevant technical evidence to investigate possible violations, enforce our Terms of Use and Community Guidelines, maintain consistent moderation, handle appeals and protect users and staff.
Legal basis: Article 6(1)(f) GDPR, our legitimate interests in operating a safe, fair and enforceable multiplayer service, and Article 6(1)(b) where processing is necessary to administer contractual account rules and provide the Service.
Public game profiles and gameplay information: War Era is a multiplayer game. Certain profile and gameplay information is made visible to other users as part of ordinary game functionality.
Legal basis: Article 6(1)(b) GDPR where making the information visible is necessary to provide the multiplayer or competitive feature requested by the user.
Certain additional public rankings, statistics and community information are processed on the basis of Article 6(1)(f) GDPR, reflecting our legitimate interest in operating transparent multiplayer, ranking and community systems, subject to data minimisation and the interests and rights of users.
This may include purchase-related gameplay statistics, such as Gems purchased, Supporter Plan months, gifts sent or boxes opened, where these statistics are used in public rankings or other competitive features. These rankings do not display your payment-card details or other non-public payment information.
Users may request exclusion from purchase-related rankings by contacting us at contact@warera.io. Where a user is excluded, the exclusion also applies to the corresponding public ranking information made available through the public API.
Section 4 explains the categories of information that may be public or accessible through the public API.
Public moderation outcomes: We may display limited information concerning certain moderation outcomes, such as the type of sanction, its date, duration, remaining duration, the general category of the rule concerned and any applicable in-game fine.
We do this to provide transparency about rule enforcement, allow game systems and other players to understand account restrictions that affect interaction, support consistent enforcement and reduce the need to identify individual staff members responsible for moderation decisions.
Legal basis: Article 6(1)(f) GDPR, our legitimate interests in transparent and consistent community moderation, enforcement of the Service's rules and protection of users and staff.
Non-public evidence, technical data and internal moderation information are not made public merely because a sanction is displayed.
Support, complaints and appeals: We process support correspondence and account information to answer requests, resolve technical or account problems, administer purchases, handle complaints and appeals and maintain appropriate records of those interactions.
Legal basis: Article 6(1)(b) GDPR where the processing is necessary to provide contractual support or administer the Service, and Article 6(1)(f) GDPR where it is necessary for complaint handling, dispute management, maintaining appropriate evidence or protecting War Era's or a user's legitimate interests.
Push notifications: Where you enable push notifications, we process the notification token, account information and notification preferences necessary to deliver the notifications you have chosen to receive.
Legal basis: Article 6(1)(b) GDPR, where this is necessary to provide the notification functionality you have chosen to use.
You can disable individual notification types or all push notifications through the available settings or your device.
GIFs and externally hosted user content: Where a feature displays a GIF or another externally hosted image, your device connects to the relevant host in order to retrieve that content. The external host therefore receives technical information necessary to provide the requested file, such as your IP address and the URL or resource being requested.
For Klipy GIF functionality, War Era does not send your War Era account identifier or preference profile to Klipy as part of the image request.
Legal basis: Article 6(1)(b) GDPR where the connection is necessary to provide content or functionality requested through the Service.
Section 5 identifies the external services currently approved for this purpose.
Website analytics: We use a self-hosted deployment of Umami to produce aggregate statistics concerning use of our website.
Our Umami configuration does not use advertising cookies, does not create cross-site profiles and is not used to identify individual visitors for marketing purposes.
Legal basis: Article 6(1)(f) GDPR, our legitimate