Privacy Policy

1. Who we are

Oriented Pain Studio (“we”, “us” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and disclose personal information when you play our games and apps (distributed on platforms like Steam) or visit our website. By using our game or website, you consent to the practices described here. You affirm that you are 18 years of age or older; our game is not intended for children, and we do not knowingly collect data from minors.

2. What Data We Collect

A. Information You Provide Directly to Us: 

• Account Registration: Username, password, email address, date of birth (for age verification).
• Profile Information: Any optional information players add, like a bio or avatar.
• Communications with Us: Support tickets, emails you send us, feedback surveys.
• Forum & Community Posts: Any information you publicly post on your official forums or Discord server.

B. Information We Receive from Platform Partners (Steam, Epic Games, etc.):

When you launch our game through a platform like Steam or the Epic Games Store, we do not require you to create a separate login or password with us. Instead, we receive information from the platform to create and authenticate your in-game account. This information includes:

• • Platform Account ID: Your unique user ID for that platform (e.g., your SteamID64 or Epic Account ID).
  • Public Profile Information: Your public username or nickname on the platform.
  • Ownership & Entitlements: Confirmation that you own the game and any downloadable content (DLC) you have purchased.
  • Social Connections: We may receive access to your friends list on the platform to enable in-game social features, such as inviting friends to play with you.
  • Language and Region: Your configured language and country to provide you with the correct game version and experience.

For Payments: All purchases of the game or in-game items made through platforms like Steam or Epic Games are processed directly by those platforms. We receive confirmation of your transactions from them, but we do not receive or store your financial information, such as credit card numbers.

C. Information We Collect from Your In-Game Activity (MMORPG Specifics):

• Character Data: Character name, class, level, stats, inventory, quest progression, and other game-state data.
• In-Game Social Data: Your friends list, guild memberships and roles, block list, and any other social connections you make.
• In-Game Communications: Chat logs (public, private/whisper, party, and guild chat). You must state that you collect this, especially for moderation and safety purposes.
• Transaction History: Records of any real-money purchases (e.g., premium currency, subscriptions, cosmetics) and in-game economy transactions (e.g., using the auction house, player-to-player trades).

D. Information Collected Automatically (Technical Data):

• Gameplay Data & Telemetry: Your in-game actions, session duration, login/logout times, character location, and interactions with game systems. This is used for analytics, bug fixing, and improving the game.
• Device and Connection Information: IP address, device type, operating system, hardware specifications, game client version, and language settings.
• Crash Reports: Information about game crashes, including system specifications at the time of the crash.
• Anti-Cheat Data: Information about your device and running processes to detect and prevent cheating, hacking, or unauthorized software. Be transparent that you use an anti-cheat system.

3. How and Why We Use Your Information (Legal Basis)

We use the information we collect for the following purposes:

• To Provide and Operate the Game: Authenticating your account, saving your progress, enabling game features (like chat and guilds).
• To Ensure Safety, Security, and Fair Play: Moderating chat for toxic behavior, investigating scams, and banning players for cheating or violating rules. This is the justification for collecting logs and using anti-cheat tech.
• To Improve and Optimize the Game: Analyzing player behavior to fix bugs, balance gameplay, and develop new content.
• To Provide Customer Support: Accessing your account information to resolve issues you report.
• To Communicate With You: Sending important service announcements, security alerts, and (with your consent) marketing newsletters about new updates or events.
• For Customer Support: Your contact information (email) is used to respond to your support requests and to send you important notices or updates about the game.
• For Payment and Purchases: When you make in-game purchases (such as buying virtual currency), we process transactions via third-party payment providers (for example, Steam). We record only the fact of the transaction (item purchased, amount, date, and your player ID) to credit your account. We do not receive or store your full credit card or banking information. Payment details are handled securely by the payment platform.
• To Integrate with Platform Partners: We use your platform account information (e.g., from Steam or Epic) to link it to your in-game progress, authenticate your sessions, manage your ownership of the game and DLC, and enable platform-specific features like achievements and friend invitations.
• Legal Obligations: We may process and retain information as required to comply with legal obligations, such as tax or accounting requirements, and to defend our legal rights (for example, if we need to address disputes or enforce our Terms of Service).

We rely on various legal bases to process your data, including your consent (for optional features like marketing), performance of a contract (providing the game services), and our legitimate interests (improving the game and preventing fraud), as applicable.

4. Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We only share your data in the limited ways described below:

• Service Providers: We work with trusted third-party service providers who help us operate the game and website. This includes analytics providers (for tracking game performance), email or hosting providers (for sending newsletters and storing data), and cloud service providers. For example, we use a cloud storage provider (such as Amazon Web Services) to store support inquiries and other data. These providers are contractually obligated to protect your data and use it only for the services they provide to us.
• Payment Processors: For in-game purchases, we share transaction details with payment processors (such as the Steam platform) so that payments can be completed and recorded. These processors handle your financial data, and we do not have access to your payment card information.
• Game Platform: If you play via a platform like Steam, we may share necessary information with that platform (for example, your Steam ID) to enable login and other platform services. The platform may also share data with us according to its own privacy policy.
• Legal and Safety: We may disclose personal information if required to comply with laws or legal processes (such as responding to subpoenas or court orders), or to protect the rights, property, or safety of Oriented Pain Studio, our users, or others. We may also disclose data to law enforcement if it could prevent serious wrongdoing.
• Business Transfers: If Oriented Pain Studio is involved in a merger, acquisition, or sale of assets, personal data may be transferred to the new owners, who will be bound by this policy. We will notify you (for example, via the game or email) if such a change in control occurs.
• Disclosure with your consent: Lastly, we may also share information about you to third parties when you have consented to it.

Apart from the situations above, we may also share aggregated or anonymized data (which cannot reasonably be used to identify you) with third parties for analysis or marketing purposes. We maintain that any sharing of personal data is done only with parties that follow strict data protection agreements and only as needed for legitimate business purposes

5. Third-Party Service Providers

We use third-party providers to support our services. These providers may process your data only as necessary for their roles:

Service	Purpose	Privacy Policy
Steam	Game distribution, account linking, in-game purchases	Steam Privacy Policy
Unity Technologies (Vivox)	In-game voice and text communication	Unity Privacy Policy
AWS (Amazon Web Services)	Game server hosting, database storage, player authentication, cloud data storage, game analytics	AWS Privacy Policy
Easy Anti-Cheat	Anti-cheat and player integrity protection	EAC Privacy Policy

6. In-Game Purchases and Virtual Currency

Our game offers in-game purchases of virtual currency or items. Payments are handled through the platform’s payment system (for example, Steam Wallet). We only collect transaction records (what you purchased, how much you spent, and on which account) in order to provide the virtual goods to your account. We do not collect or store your credit card or bank information; this is handled by the payment processor. All purchases are final, subject to the refund policy of the platform.

7. Data Retention

We keep your personal information only as long as needed for the purposes outlined above or as required by law. For example, we retain your account data and gameplay records for as long as your account is active to allow you to continue playing. If you close your account or request deletion, we will promptly erase your personal data from our active systems.

However, certain information may be retained for a longer period if required by law or for legitimate business reasons. For instance, we may retain transaction and tax records for accounting purposes, or keep logs for fraud prevention, even after an account is closed. We regularly review our stored data and delete information that is no longer needed. You can always contact us to request deletion of your data; we will comply unless we have a legal reason to keep some of it (e.g. financial records or dispute evidence).

8. Security Measures

We take the security of your personal data seriously. We use industry-standard technical and organizational measures to protect your information. For example, data transmissions are encrypted, and our systems are secured against unauthorized access. Access to personal data is limited to authorized staff and service providers who need it to perform their duties.

9. Your Rights

Under GDPR (for EU/EEA users): You have the right to access and manage your personal data that we hold. This includes the right to request a copy of your data and to know how we process it (for example, the purposes of processing, categories of data, recipients, and retention period). You also have the right to correct inaccurate data or to have your data erased if it is no longer needed, as permitted by law. Additionally, you may request that we restrict or object to certain processing activities (for example, direct marketing), or request data portability (transferring your data to another service). To exercise these rights, please contact us as described below. We will respond to your request within the timeframes required by law.

Under CCPA/CPRA (for California residents): In addition to the above, California law gives residents the right to request details about their personal information we collect and share. You can ask: (1) What we have collected – for example, the categories of personal information (such as identifiers, contact info, etc.), sources of that data, business purposes for collection, and categories of third parties we’ve shared it with; (2) Access to data – up to two times per year, you may request the specific pieces of personal data we have collected about you in the past 12 months; (3) Deletion – you may request that we delete your personal information from our records, subject to certain exceptions; and (4) Opt-out of sale/sharing – although we do not sell or share personal information for marketing, California law grants you the right to opt out if we ever change this policy. You also have the right not to be discriminated against for exercising these rights. If you are a California resident and wish to make a request under CCPA/CPRA, please follow the instructions in the “Contact Us” section below.

Other Rights: Depending on your jurisdiction, you may have additional rights (for example, the right to lodge a complaint with a data protection authority). We respect these rights and will assist you as required by law.

10. California Privacy Rights

As required by California law, this section lists the categories of personal information we collect from players and the purposes for which we use it. The categories we collect include:

• Account & Contact Information: (username, login credentials, email) – Used to create and manage your game account, authenticate you, and communicate important updates or support.

• Gameplay & Device Data: (game events, progress, device model/OS) – Used to analyze and improve gameplay, balance features, and ensure the game runs well on your device.

• Crash Reports: (error logs, technical details when the game crashes) – Used to diagnose bugs and improve game stability.

• User-Generated Content: (website comments, forum posts) – Used to moderate content, respond to feedback, and improve community features.

• Purchase Records: (items bought, transaction details) – Used to process in-game transactions, issue receipts or refunds, and manage your purchase history.

We do not sell or share any personal information with advertisers or third parties for marketing.

As a California resident, you have the following rights under the CCPA/CPRA:

• Access: You can request a copy of your personal information and details about how we use it.

• Deletion: You can ask us to delete your personal information (subject to legal exceptions)

• Correction: You can request correction of any inaccurate personal information we hold about you.

• Opt-Out: You can opt out of the sale or sharing of your personal information – although we do not sell or share any data for advertising, you have this right by law.

• Non-Discrimination: You have the right not to be denied the game, charged a different price, or otherwise penalized for exercising these rights.

How to exercise your rights: Send an email to law@orientedpainstudio.com with your request (for example, “California Privacy Request” in the subject line). We will verify your identity and respond within the time required by law (typically within 45 days). Because our game operates exclusively online, providing an email is sufficient to submit these requests.

Sources: California law requires disclosing personal information categories and purposes and informing consumers of their rights. The rights above are derived from CCPA/CPRA provisions.

11. Children’s Privacy (COPPA Compliance)

Our games and website are intended for adult audiences (18+). In compliance with COPPA (the Children’s Online Privacy Protection Act), we do not knowingly collect any personal information from children under 13. We also do not encourage use by minors under 18. If we learn that we have collected personal information from a child under 13 without parental consent, we will promptly delete that information. If you believe we might have information from a child under 13, please contact us immediately so we can take appropriate action.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the “Last updated” date above and post the new version on our website. We encourage you to review this Policy periodically. If the changes are significant, we may provide additional notice (for example, in the game or via email) as required by law. Your continued use of our game or website after changes are posted means you accept the revised Policy.

13. How to Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us:

• Email: law@orientedpainstudio.com (for privacy inquiries and requests)

When contacting us, please provide enough information to identify yourself and your request (for example, your account name or registered email). We will verify your identity before responding. We aim to respond to requests within the timeframes required by applicable law.

Thank you for trusting Oriented Pain Studio with your personal information. We are committed to protecting your privacy and providing a secure gaming experience.