Privacy Policy

1. Data controller

The controller of personal data within the meaning of Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” is:

• [full name of the company or full name of the sole trader]
• Tax ID (INN): [INN], registration number (OGRN/OGRNIP): [OGRN/OGRNIP]
• Registered address: [address]
• Contact email: [email protected]

If the controller is an individual or a sole trader, the details required by law must be provided. The details may also be requested at the email above.

2. Definitions

• Service — the Osirius project website, launcher, game server, account area and related functions.
• User — a person visiting the site, creating an account or using the Service.
• Personal data — any information relating directly or indirectly to the User.
• Processing — any operation involving personal data, including collection, recording, storage, use, transfer and deletion.

3. Data we process

3.1. Data you provide

• email address, login and password in encrypted form;
• nickname, avatar and other profile information you choose to provide;
• support messages and attachments;
• payment identifiers and the purpose of a voluntary contribution. The controller does not store full bank card details; they are processed by the payment provider;
• consents and their withdrawal, and the dates of requests.

3.2. Data collected automatically

• IP address, browser, device and operating system type;
• date and time of access, requested page address and referrer;
• launcher technical logs: version, launch errors, download and file verification progress;
• account identifier and game events needed for security, moderation and account recovery.

We do not collect biometric data, special categories of personal data or criminal record data. Please do not send passport details or full card details to support unless specifically required.

4. Purposes and legal bases

We do not use data for automated decision-making that produces legal effects without separate notice.

5. Cookies and technical data

The site does not set advertising or analytics cookies and does not share data with advertising networks. Technical cookies or localStorage may be used for the interface, settings and abuse prevention. Server logs may contain IP addresses and user agents for security and diagnostics.

If analytics or advertising services are added in the future, this Policy will be updated and, where required, a separate consent request will be shown.

6. Payments

Voluntary contributions may be processed by third-party payment services. Those services process payment data under their own rules and privacy policies. The controller receives the transaction identifier, amount, status and purpose — only to the extent needed for accounting, support and refunds.

Never send bank card details in messages. A transaction identifier and date are sufficient to check a payment.

7. Sharing and processors

We do not sell personal data. Data may be shared with:

• hosting and infrastructure providers — to host the site and servers;
• payment providers — to process and refund payments;
• support and email services — only to the extent needed to respond;
• authorised authorities — upon a lawful request;
• a successor — in the event of a reorganisation, subject to the same purposes.

Processors are bound by confidentiality and data protection obligations. Transfers outside the Russian Federation are made only on a lawful basis and, where required, with your consent.

8. Retention periods

• account data — until account deletion, then up to 30 days for technical completion;
• support requests — up to 3 years from the last request;
• payment documents — for the periods required by accounting and tax law;
• server and security logs — normally up to 90 days, unless a longer period is needed for an incident investigation;
• consents and withdrawals — for the processing period and the period needed to evidence compliance.

When a period expires, data is deleted or anonymised unless the law requires further storage.

9. Your rights

You have the right to:

• request information about the processing of your data and access it;
• request correction of inaccurate data;
• request deletion or restriction of processing where there is no lawful basis for further storage;
• withdraw consent (this may make it impossible to use the account);
• object to processing for specific purposes;
• contact Roskomnadzor or a court if you believe your rights have been violated.

Send requests to [email protected] from the email linked to your account, or include enough information to identify you. We respond within the period required by law, usually within 10 business days. To protect data, we may ask for reasonable identity confirmation.

10. Data security

We use organisational and technical measures: access restrictions, encrypted transmission channels, backups, administrative action logging and vulnerability control. However, no method of transmission or storage guarantees absolute security.

In the event of an incident that creates a risk to users’ rights, we take containment measures and notify the competent authorities and affected users where required by law.

11. Minors

The Service is intended for users aged 18 and over. We do not knowingly collect data from children. If you believe that a minor’s data was provided to us without the consent of a legal representative, email [email protected] and we will delete it after verification.

12. Changes to this Policy

We may update this Policy when the law or Service functionality changes. A new revision is published on this page with a new date. If changes materially affect your rights, we will try to notify you by an available method.

13. Contact

For personal data, account deletion and consent withdrawal:

• Email: [email protected]
• Controller: [controller name]
• Address: [address]