(Privacy and Personal Data Processing Policy)
This Privacy Policy (hereinafter referred to as the "Policy") defines the procedure for collecting, using, storing, transferring and otherwise processing the personal data of users of the online game Heroes of the Void (hereinafter referred to as the "Game", "Service") and related websites, mobile applications, game servers, forums, support services and other digital services.
The policy has been developed in accordance with applicable legislation on the protection of personal data, including, but not limited to:
By using the Game, creating an account, or otherwise interacting with the Service, the User acknowledges that they have read this Policy and agrees to the processing of their personal data in accordance with its terms.
If the User does not agree with this Policy, he/she is obliged to stop using the Game and related services.
This Policy is publicly available on the Company's official website at [https://heroesofthevoid.net/privacy] (or another permanent link). The version of the Policy accessible via this link is current and takes precedence over any local copies, including files distributed within the game client, unless they are updated.
The personal data operator is a legal entity or individual entrepreneur that develops, maintains, and operates the Heroes of the Void online game (hereinafter referred to as the “Company,” “Operator,” or “We”).
At the time of publication of this Policy, information about the Operator includes:
If the Company is required to appoint a Data Protection Officer (DPO) or an EU Representative, the relevant information will be published on the Company's official website. If a representative has not yet been appointed at the time of publication, the Company undertakes to appoint one within 30 days of the commencement of activities covered by the GDPR and publish the relevant information on the official website.
This Policy applies to the processing of personal data carried out using:
The policy applies regardless of the platform used, including: Windows; macOS; Linux; Android; iOS; Steam Deck; game consoles; cloud gaming services.
For the purposes of this Policy, the following definitions are used.
Any information relating directly or indirectly to an identified or identifiable natural person.
Any individual using the Game, regardless of the method of registration or platform used.
A set of information that allows the User to be identified in the Game and provides access to the game process.
Any information generated during the use of the Game, including characters, achievements, inventory, statistics, in-game currency, match history, rating, friends, guilds, settings, user preferences.
Any action or set of actions with personal data, including collection, recording, systematization, storage, clarification, usage, transmission, spreading, depersonalization, blocking, removal, destruction.
Any equipment used by the User to access the Game, including personal computers, laptops, mobile phones, tablets, game consoles and other compatible devices.
Small text files saved by a browser or application on the User's device and used to ensure the correct operation of services.
A set of software components (Software Development Kit) provided by third-party developers to implement certain functions of the Game, including analytics, authorization, payment processing, notifications, error detection, and fraud protection.
Any individual or legal entity processing personal data on behalf of the Operator.
An individual who independently determines the purposes and methods of processing personal data within the meaning of the GDPR and the UK GDPR.
The company processes personal data based on the following principles:
This Policy applies to registered users, unregistered visitors, participants in gaming events, buyers of in-game goods, newsletter subscribers, support service users, participants in testing programs (Alpha, Beta, Early Access), candidates for affiliate programs, streamers/content creators, and other persons interacting with Heroes of the Void services.
This Policy shall be interpreted in accordance with the legislation of the state of registration of the Company, taking into account mandatory provisions of international legislation on personal data protection applicable to a specific User.
The Company processes personal data only to the extent necessary to provide the User with the functionality of the Game, fulfill contractual obligations, comply with legal requirements, protect the legitimate interests of the Company, and ensure the security of the Service.
Includes: username, display game name (Nickname), unique account identifier, email address, password (secure hashed form), email confirmation info, interface language, country/region, registration date, last login date, account status, history of username changes, 2FA info, and account recovery details.
Includes: avatar, profile description, time zone, language of communication, preferred gaming region, social network links, friends list, blocked users list, privacy settings, user preferences.
Includes: characters, classes, levels, experience, skills, characteristics, inventory, achievements, ratings, statistics of victories/defeats, session history, tournament participation, event participation, match history, progress saves, configurations, clan/guild information.
Includes: purchased digital goods, in-game currency, subscriptions, premium accounts, Battle Pass, purchase history, refunds, cancelled transactions, transaction IDs. The company does not store full bank card numbers or CVV codes.
Includes: username, email address, text of appeal, attached files, error logs, screenshots, video recordings, correspondence with support staff, and request processing history.
When using the Game, the Company automatically receives technical information necessary for the functioning of the Service.
Device model, manufacturer, OS version, processor architecture, RAM, free disk space, screen resolution, graphics adapter parameters, driver version, device identifiers, advertising identifiers (Advertising ID, IDFA, GAID - with consent).
IP address, country/region of connection, Internet provider, approximate location determined by IP, ping delay, connection quality and breaks, connection type (Wi-Fi, mobile network, Ethernet).
Entry/exit date and time, IP address, game session identifier, platform used, error logs, authorization logs, network logs, system events, exception messages, unauthorized access attempts.
Level loading time, client performance, frame rate (FPS), CPU/RAM load, server response time, crash reports, failures, and game server performance.
The Company may receive information from third-party services (gaming platforms, authorization services, payment systems) including platform account ID, display name, avatar, friends list, interface language, and country.
The Company uses cookies, local browser storage, session storage, pixel tags, and SDKs to save authorization, store user settings, ensure security, prevent fraud, analyze service usage, and improve performance.
Processed to analyze duration of sessions, launch frequency, sequence of functions, interface usage statistics, popularity of game modes, bug fixing, game balancing, and infrastructure optimization.
In-game chat messages, personal messages, character/guild names, comments, forum posts, support requests, and reviews. Used solely for gameplay functionality, moderation, investigating rule violations, and fraud prevention.
The Company does not request or carry out targeted processing of special categories of personal data (racial/ethnic origin, political views, religious beliefs, health status, genetic/biometric data, sexual orientation).
The Company does not knowingly collect full bank card details, PIN/CVV codes, passwords to third-party services, personal files, phone book contacts, SMS contents, phone call recordings, or GPS geolocation without explicit consent.
Personal data is processed exclusively for legitimate, predetermined, and transparent purposes:
Under GDPR and UK GDPR, processing is carried out based on: Execution of the Agreement (Art. 6(1)(b)), Legitimate Interests of the Company (Art. 6(1)(f)), Fulfillment of Legal Obligations (Art. 6(1)(c)), and User Consent (Art. 6(1)(a)).
Automated processes are used for player matchmaking, server distribution, fraud detection, and cheat detection. Decisions with significant legal impact (e.g., permanent bans) provide the possibility of human review.
The Company may aggregate or anonymize data for analytics, performance research, statistical reports, and gameplay balancing.
The Company limits data collection to the necessary minimum, regularly reviews data lists, and deletes or anonymizes data once processing purposes are completed.
The Company does not sell personal data. Transfers occur only to trusted categories of recipients: cloud infrastructure providers, payment operators, email/push providers, analytical services, anti-cheat providers, legal/auditing consultants, and government authorities under lawful requests.
Carried out in compliance with GDPR/UK GDPR using Adequacy Decisions, Standard Contractual Clauses (SCC), International Data Transfer Agreements (IDTA), and supplementary technical measures (encryption, pseudonymization).
Personal data is retained no longer than necessary to achieve processing purposes, execute contracts, and fulfill legal requirements.
| Data Category | Approximate Retention Period |
|---|---|
| Account details | Until account deletion and expiration of mandatory retention periods |
| Game progress | Before deleting your account |
| Purchase history | In accordance with tax and accounting legislation |
| Security logs | Up to 24 months, unless a longer period is required to investigate the incident |
| Correspondence with support service | Up to 5 years after the closure of the appeal, unless a longer period is required by law |
| Backups | Before the completion of the established backup cycle |
The Company applies robust organizational and technical measures: access segregation (least privilege), employee training, TLS transmission encryption, encryption at rest, firewalls, intrusion detection/prevention systems, backups, and security monitoring.
Users have the right to information, right of access, right to rectification, right to erasure ("Right to be forgotten"), right to restrict processing, right to data portability, right to object, right to withdraw consent, and right to lodge a complaint with a supervisory authority.
To exercise rights, users may submit requests via customer support or email: support@heroesofthevoid.net. Requests are processed within statutory deadlines free of charge.
California residents have rights to know, delete, correct, opt-out of sale/sharing of personal information, limit the use of sensitive personal information, and non-discrimination.
The Company does not knowingly collect data from children under 13 without verifiable parental consent. Parents possess full rights to inspect, modify, or delete their children's data.
The Company ensures full compliance with the GDPR and UK GDPR for all users residing within the EEA and UK.
The Company never discriminates against users for exercising their data privacy rights.
SDKs are integrated for authorization, payments, analytics, push notifications, and anti-cheat, adhering strictly to privacy guidelines.
Used to evaluate game stability, client performance, and user interface efficiency, utilizing aggregated data whenever possible.
Automated anti-cheat systems safeguard fair play by monitoring unauthorized software, bot scripts, and client tampering.
Communications may be moderated to protect players from spam, toxicity, fraud, and violations of Community Rules.
Complies with Google Play User Data Policy and Data Safety Section requirements, maintaining transparency and security standards.
Complies with Apple App Store Review Guidelines and Privacy Nutrition Labels.
Updates become effective upon publication. Material changes will be communicated via in-game notices, email, or official website announcements.
For questions related to the processing of personal data, the User may contact the Company using the following contact information:
If the Company is required to appoint a Data Protection Officer (DPO) or representative in the European Economic Area or the United Kingdom, details of them will be published on the official website and made available upon the User's request.
This Policy is an integral part of the User Agreement (Terms of Service / EULA) governing the use of the Game.
If individual provisions of this Policy are deemed invalid or unenforceable, this shall not affect the validity of the remaining provisions.
In all matters not regulated by this Policy, the provisions of applicable law governing the activities of the Company and personal data processing shall apply.
| Category | Examples | Purpose of Processing |
|---|---|---|
| Identification data | Nickname, account ID, email address | Account creation and maintenance |
| Game data | Characters, achievements, statistics, inventory | Providing gameplay |
| Technical data | IP address, OS version, device model | Ensuring the operation and security of the Game |
| Transaction data | Purchase history, payment status | Contract execution and accounting |
| Customer support details | Appeals, attachments, correspondence | Reviewing requests and troubleshooting problems |
| Analytical data | Performance, error logs, telemetry | Improving the quality of the game |
| User-generated content | Chat messages, character names, comments | Providing communication functions and moderation |
| Data Category | Retention Period |
|---|---|
| Account | Until account deletion and expiration of mandatory retention periods |
| Game progress | Before deleting your account |
| Security logs | Up to 24 months, unless a longer period is required for the investigation |
| Financial documents | Within the periods established by applicable law |
| Support requests | Up to 5 years, but not less than the statute of limitations established by applicable law (usually 3 years), and not more than the period provided by archiving legislation |
| Backups | During the established backup cycle |