Privacy Policy

Data controller

The data controller for this service is the team running the Polski Mega Serwer (PMS). For questions about personal data protection, please contact us by email at [email protected].

The administrator has not appointed a Data Protection Officer.

What data we process

Your in-game account login and password, used only to verify your login on the website. The website does not create a separate account or password, it uses the same credentials as the game.

A session cookie containing only a random token with no personal data, used to keep you logged in for up to 14 days.

Your IP address, processed temporarily and only to limit the number of login attempts (protection against brute-force attacks). The IP address is not stored in the database or kept permanently.

Public player and gang profile data (e.g. nickname, stats, level, gang membership, playtime), sourced from the game server database and also visible directly in-game.

Shop purchase history (transaction number, purchased package name, price and currency, purchase date, refund status), linked to the player's account. Payment data itself (e.g. email address, card details) is not stored by us, it is held only by our payment provider, Tebex.

Purposes of processing

Enabling login and access to your own profile on the website.

Preventing abuse, including trial-and-error password guessing attempts.

Displaying public stats, rankings, and player/gang profiles as a core function of the service.

Maintaining a purchase history visible to the player in their account panel, and handling complaints and refunds related to purchased services.

Legal basis for processing

Processing of login and session data is carried out to provide the service requested by the user (GDPR Article 6(1)(b)).

Processing of the IP address to limit login attempts is based on the administrator's legitimate interest in the security of player accounts (GDPR Article 6(1)(f)).

Displaying public player and gang stats and profiles is based on the administrator's legitimate interest in providing the service's core community feature (GDPR Article 6(1)(f)).

Processing of purchase data is carried out to perform the sales contract concluded with the player (GDPR Article 6(1)(b)).

Data retention period

A login session expires automatically after 14 days and is then deleted from the database.

Login attempt data (IP address) is stored temporarily, only in server memory, and deleted automatically after a few minutes.

Player and gang profile data is stored for as long as the player's account exists on the game server.

Purchase data is stored for as long as the player's account exists on the game server, to allow access to purchase history and to handle any complaints.

Data recipients

Data may be processed by technical infrastructure providers (hosting, protection against network attacks), only to the extent necessary to keep the service running.

The service does not sell or share personal data with third parties for marketing purposes.

Because the service uses Cloudflare, data may be temporarily processed on servers located outside the European Economic Area, with appropriate safeguards in line with the GDPR.

Purchases in the server shop are processed by an external payment provider, Tebex Limited (United Kingdom). During checkout, the user is redirected to Tebex's payment page, where they provide the data required to complete the transaction (e.g. email address, payment details) directly to Tebex, which acts as a separate data controller for that stage. Tebex's own data processing practices are described in its privacy policy: https://checkout.tebex.io/privacy.

Cookies

The service uses only one, essential cookie used to keep a logged-in user's session active. No analytics, advertising, or tracking cookies are used.

Your rights

Every user has the right to access their data, rectify it, delete it, restrict its processing, transfer it (data portability), and object to its processing.

Users also have the right to file a complaint with the President of the Personal Data Protection Office (UODO).