Data controller
The publisher of the website, reachable at contact@o-ro.org. Full identity is provided on request, as stated in the legal notice.
Data collected
The service collects the following data:
- Account: username, email address, password stored in encrypted form.
- Connection: IP address, date and time of connections to the website and the game.
- Hardware identifier (HWID): a technical fingerprint of your machine, generated by the game launcher. It is used to enforce the one-client-per-machine rule and to limit abusive multi-accounting.
- Game data: characters, progression, inventory, in-game transactions, public chat logs.
- Payments: the payment provider processes card and account details itself, which the publisher never sees. The website stores the amount, date, transaction identifier and the payer's email address.
- Audience measurement: pages viewed and referrer, in aggregate form.
Purposes and legal bases
- Providing the service and managing accounts: performance of the contract.
- Security, anti-cheat and prevention of abusive multi-accounting, including HWID: the publisher's legitimate interest in keeping the game fair.
- Processing payments and keeping records: performance of the contract and legal obligations.
- Improving the service and measuring audience: legitimate interest.
Recipients
Data is never sold, rented, or shared for advertising purposes.
It is accessible to the publisher and the server administration team, and to strictly necessary providers: the host, and the payment provider for transaction data only.
Retention
- Account and game data: for as long as the account exists, then deleted or anonymised on request.
- Connection logs and IP addresses: one year at most.
- Payment records: for the period required by accounting and tax obligations.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. These rights are exercised by email at contact@o-ro.org, or from your player area for account deletion.
Proof of identity may be requested if there is any doubt, so that a third party cannot obtain your data.
You may also lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, France.
Cookies
The website sets a session cookie, strictly necessary to keep you logged in, and a cookie storing your chosen language. No advertising cookies or third-party trackers are used.