Privacy Policy & Cookie Notice

1. Data Controller Information

Game Name: One Piece RPG

Data Controller: [Your Company/Name]

Contact Email: [your-email@domain.com]

Address: [Your Address]

ICO Registration Number: [If applicable]

2. What Personal Data We Collect

2.1 Account Information

Username: Your chosen game username
Email Address: For account recovery and notifications
Password: Encrypted and securely stored
Game Progress: Level, experience, items, achievements

2.2 Game Activity Data

Combat Records: Battle history and statistics
Crew Information: Crew membership and roles
Chat Messages: Global and crew chat logs
Training Sessions: AI training progress and costs

Island Operations

Island Operations are scheduled in-world events tied to the game’s mission clock. To run them fairly we process gameplay data including your affiliation (Pirate/Marine), position on the world grid during relevant windows, hold or qualification state for the featured locations, and—where alliance bonuses apply—a limited snapshot of alliance/crew roster identifiers needed to calculate in-game reward multipliers. We also record window outcomes, queued or claimed virtual rewards (for example in-game silver, gold, XP, stats, items, bounty, or reputation as designed for the feature), and history you can view in-game. These rewards are virtual only; they have no independent real-world cash value unless our terms say otherwise for a specific promotion.

2.3 Technical Data

IP Address: For security and abuse prevention
Browser Information: For compatibility and support
Session Data: Login status and preferences
Device Information: Screen resolution and capabilities

2.4 In-Game Financial & Membership Data

We process data relating to the game’s virtual economy and optional purchases recorded in our systems, including:

In-game bank transfers: Records of silver/gold (or equivalent) sent or received between accounts via the in-game bank feature
Premium memberships: Tier, purchase or grant date, expiry, duration, and virtual currency amounts associated with membership, where applicable

This data is used to operate balances, prevent abuse, resolve disputes, and meet record-keeping requirements where the law applies. It does not replace accounting records for real-world payments processed by banks or payment providers (those are governed by your agreements with those providers and our separate business records).

3. How We Use Your Personal Data

3.1 Legal Basis for Processing

We process your data based on the following legal grounds:

Contract: To provide the game service you requested
Legitimate Interest: To improve game performance and prevent fraud
Consent: For optional features like newsletters (if applicable)
Legal Obligation: To comply with UK laws and regulations
Legal claims: Where necessary, retaining a minimal subset of information to establish, exercise, or defend legal claims (including financial and transaction-related records, as described in the retention section)

3.2 Specific Purposes

Game Operation: Running the RPG game and features
Account Management: Login, security, and account recovery
Community Features: Crews, alliances, and chat systems
Support Services: Customer service and technical support
Security: Fraud prevention and abuse detection
Analytics: Game performance and user experience improvement

4. Cookie Policy & Usage

4.1 What Are Cookies?

Cookies are small text files stored on your device that help us provide and improve our services. They enable certain features and remember your preferences.

4.2 Types of Cookies We Use

Cookie Type	Purpose	Duration	Essential?
Session Cookies	Maintain your login status and game session	Session (until browser closes)	✅ Yes
Authentication Cookies	Remember your login credentials securely	30 days	✅ Yes
Preference Cookies	Remember your game settings and preferences	1 year	❌ No
Security Cookies	Protect against fraud and abuse	Session	✅ Yes

4.3 Third-Party Cookies

YouTube Cookies: When you view crew pages with embedded YouTube videos, YouTube may set cookies for:

Video recommendations and preferences
Analytics and viewing statistics
Ad personalization (if applicable)
Language and region settings

Note: We do not control YouTube's cookie usage. Please review YouTube's Cookie Policy for more information.

4.4 Managing Cookies

You can control and manage cookies through your browser settings:

Chrome: Settings → Privacy and Security → Cookies and other site data
Firefox: Options → Privacy & Security → Cookies and Site Data
Safari: Preferences → Privacy → Manage Website Data
Edge: Settings → Cookies and site permissions → Cookies

Important: Disabling essential cookies may prevent the game from functioning properly.

5. Data Sharing & Third Parties

5.1 We Do NOT Share Your Data With:

Advertisers or marketing companies
Data brokers or analytics companies
Social media platforms
Third-party game developers

5.2 Limited Data Sharing (When Required)

Legal Requirements: When required by UK law or court orders
Security: With law enforcement for fraud investigation
Service Providers: With hosting providers under strict data protection agreements

5.3 Third-Party Services

We use the following third-party services with appropriate safeguards:

YouTube: For video embedding in crew profiles (subject to YouTube's privacy policy)
Hosting Provider: For secure game hosting and data storage

6. Data Security & Protection

6.1 Security Measures

Encryption: All data transmitted using HTTPS/TLS encryption
Password Security: Passwords are hashed using industry-standard algorithms
Session Security: Secure session management with automatic timeouts
Access Control: Limited staff access to user data
Regular Updates: Security patches and system updates

6.2 Data Retention Policy

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

                            📅 Data Retention Periods
                            Active Account Data: Retained while your account is active and for 3 years after last login
Inactive Accounts: Accounts inactive for 3+ years may be automatically deleted
Deleted Accounts (general): When you complete account deletion (see below), your playable account, profile, and most gameplay data are removed from the live game database. A short cooling-off period applies before removal is final; you may cancel deletion during that period in Settings.
Financial snapshots after account deletion: A strictly limited copy of certain in-game financial records (for example in-game bank transfer lines and premium membership history linked to your account) may be retained in separate internal archive tables that are not part of your active profile. These snapshots may include the numeric user id that existed at the time of deletion, counterpart user ids where shown on the original transfer, amounts, and timestamps. We retain these only where permitted by law (for example legal obligation, or where necessary for the establishment, exercise, or defence of legal claims), and typically for up to 7 years in line with our general approach to transaction-related records, unless a longer or shorter period is required by law or no longer justified. You can request more detail or object by contacting us (see Your Rights).
Game Logs & Combat History: Retained for 12 months for security and game balance purposes
Island Operations: Window results, payout or claim records, and related gameplay snapshots are kept for as long as needed to operate the feature, prevent abuse, and resolve disputes, in line with other gameplay and in-game economy records in this policy
Chat Messages: Retained for 6 months for moderation and community safety
IP Address Logs: Retained for 90 days for security and fraud prevention
Admin Action Logs: Retained for 7 years for audit and compliance purposes
Transaction Records: Retained for 7 years for financial compliance
Trade History: Retained for 3 years for game functionality and dispute resolution
Marketplace History: Retained for 3 years for transaction records and game balance
Currency Exchange History: Retained for 3 years for transaction records
Error Logs: Retained for 30 days for system maintenance
User Reports: Retained for 2 years for moderation purposes
Cookie Data: Session cookies expire when browser is closed; consent cookies retained for 1 year
Password reset tokens: Deleted immediately after use or within 1 hour if unused (account recovery)

                        

6.2.1 Automatic Data Cleanup

We automatically clean up old data according to the retention periods above. This includes:

Removing expired session data
Cleaning up old combat logs after 12 months
Removing chat messages after 6 months
Deleting IP address logs after 90 days
Removing inactive user accounts after 3 years of inactivity
Deleting trade history older than 3 years
Deleting marketplace and exchange history older than 3 years

6.2.2 Data Minimization

We follow the principle of data minimization, only collecting and retaining data that is necessary for the game's operation and legal compliance. When data is no longer needed, it is securely deleted.

6.2.3 Account deletion (how to request and what we keep)

You may request deletion of your account from the game’s Settings page (Account settings). You will be asked to confirm your password. Deletion is scheduled after a waiting period (for example seven days in production, or a shorter period in testing); during that time you can cancel deletion in the same section.

After the waiting period, your account can no longer be used, and the live game data associated with your account is removed in line with our technical processes (including related clean-up so the account can be purged from our main users database). As explained above, a limited financial archive may still be kept under the legal bases and retention period described in this policy. This is not a complete anonymous wipe of every historical reference everywhere (for example backups may persist for a limited time depending on our hosting practices); we apply reasonable measures to align backups and restores with this policy.

If you use a real-money payment method outside our database (for example a card processor), invoices and receipts may be held by that provider or in our accounting systems under their own retention rules.

7. Your Data Protection Rights

Under UK data protection law, you have the following rights:

                            🔐 Your Rights Summary
                            Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data (“right to be forgotten”). This right is not absolute: UK law allows us to retain certain information where we have a valid reason (such as legal obligation or legal claims), including the limited financial archives described in this policy.
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a portable format
Right to Object: Object to certain types of processing
Right to Withdraw Consent: Withdraw consent for optional features
Right to Complain: Lodge a complaint with the ICO

                        

7.1 How to Exercise Your Rights

To exercise any of these rights, contact us at: [your-email@domain.com]

We will respond to your request within 30 days and may request additional information to verify your identity.

7.1.1 Account deletion in the game

To delete your game account, sign in and use Settings → Delete account (open Settings). For questions about what remains in financial archives after deletion, or to challenge retention, contact us using the email above.

7.2 Right to Complain

If you believe we have not handled your data properly, you have the right to complain to the Information Commissioner's Office (ICO):

ICO Website: https://ico.org.uk

ICO Helpline: 0303 123 1113

8. Children's Privacy

Age Requirement: Our game is intended for users aged 13 and above.

8.1 If You Are Under 13:

Do not create an account or provide personal information
Ask a parent or guardian for permission
Have a parent or guardian contact us if you want to play

8.2 If You Are a Parent/Guardian:

Monitor your child's online activity
Contact us immediately if you believe your child has provided personal information
We will promptly delete any data from users under 13

9. International Data Transfers

Data Location: Your data is stored and processed within the United Kingdom.

9.1 No International Transfers

We do not transfer your data outside the UK
All data processing occurs within UK jurisdiction
We comply with UK data protection standards

9.2 Third-Party Services

Some third-party services (like YouTube) may process data outside the UK. These services have their own privacy policies and data transfer mechanisms.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. When we do:

We will notify you of significant changes via email or in-game notification
We will update the "Last Updated" date at the top of this page
Continued use of the game after changes constitutes acceptance
You can review the current policy at any time on this page

10.1 Significant Changes Include:

Changes to how we collect or use your data
New third-party services or data sharing
Changes to your rights or how to exercise them
Changes to data retention periods
Changes to account deletion, cooling-off periods, or post-deletion financial archiving