Privacy Policy

Last updated: 2026-10-16

This policy explains how HB RPG ("the game", "we") handles your personal data when you play at https://play.horiabodeanu.ro. We keep it short because we collect very little.

Who is responsible

The controller of your data is the HB RPG team (Romania). Contact: the ✉ Feedback button in the game (Log → Feedback).

What we collect

• Your Google account ID and email address, when you sign in with Google. We do not receive your Google password, contacts or anything else. We do not use your Google name or photo.
• Your hero's name (which you choose) and your game progress: skills, items, gold, position in the world, settings.
• Things you send us: chat messages (shown live to nearby players; we do not keep a chat history, except the lines attached to a report), reports about other players, feedback and bug reports.
• Moderation records: mutes, bans, warnings and their reasons.
• Technical data: when you last played, gameplay statistics (for example XP earned per hour, used to balance the game), anti-cheat logs (for example impossible movement speed) and JavaScript error reports from your browser (error message, game version, browser type).
• Our hosting provider may process your IP address in short-lived server logs, for security.

Why we use it (legal basis)

• To give you an account and run the game you asked to play: performance of a contract (GDPR Art. 6(1)(b)).
• To keep the game fair and safe (anti-cheat, moderation, security, fixing bugs, balancing): our legitimate interest (Art. 6(1)(f)).
• To comply with the law (for example answering a lawful request from an authority): legal obligation (Art. 6(1)(c)).

We do not sell your data, we do not show ads, and we do not use analytics or tracking cookies.

Cookies and local storage

The game stores a sign-in token and your settings (sound, controls, map) in your browser's local storage. This is strictly necessary for the game to work, so no consent banner is needed. The game page loads Google's sign-in script only on the sign-in screen. Fonts are served from our own server.

Who receives it

• Our hosting provider (cyber_Folks, a VPS in the European Union) stores the server and the database.
• Google verifies your sign-in (Google's own privacy policy applies to your Google account).
• Other players see your hero's name, appearance, level and chat messages.

We do not transfer your data outside the European Economic Area ourselves. Google may process sign-in data under its own safeguards.

How long we keep it

• Account and hero: until you delete your account. Accounts not used for 24 months are deleted automatically.
• Deleted accounts: removed 30 days after you ask (so you can change your mind). If an account is banned, we keep only the bare Google ID so the ban cannot be bypassed.
• Reports and their attached chat lines: up to 12 months after they are resolved. Feedback: up to 12 months.
• Moderation records: up to 24 months.
• Gameplay statistics and anti-cheat logs: 180 days. Browser error reports: 90 days.
• Backups follow the same rules and expire within a few weeks.

Your rights

You can ask to access, correct, delete, restrict or object to the processing of your data, and to receive it in a portable format. In the game: ⚙ Settings → Your account → Download my data (a JSON file) or Delete my account. For anything else, contact us at the ✉ Feedback button in the game (Log → Feedback); we answer within one month.

You also have the right to complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro), or to the authority in your EU country.

Children

The game is for players 16 and older. If you are younger, please do not create an account. If we learn that a player is under 16, we delete the account.

Changes

If we change this policy in a way that matters, we will announce it in the game and on the news page.