Privacy Policy for the European Economic Area and United Kingdom

This notice supplements our general Privacy Policy and applies if you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom. It describes how Character Games Ltd (“Character Games”, “we”, “us”) processes personal data in connection with the Role Game mobile application (“Role Game”) and the Character Games website at charactergames.io, in line with the EU General Data Protection Regulation (EU GDPR), the UK GDPR, and the Data Protection Act 2018.

Data controller and contact

The data controller responsible for your personal data is Character Games Ltd. For privacy-related requests, including exercising your rights described below, contact us at support@charactergames.io.

What data we process and why

Depending on how you use Role Game or charactergames.io, we may process identifiers (such as account or device IDs), usage and technical data (for example logs, diagnostics, and cookie data as described in our Cookie Policy), and communications you send to support. We process personal data to provide and secure the app and website, analyse and improve performance, comply with law, and communicate with you where appropriate.

Legal bases (EEA/UK)

We rely on one or more of the following legal bases: performance of a contract with you; our legitimate interests (such as securing the service, understanding aggregate usage, and preventing fraud), balanced against your rights; compliance with legal obligations; and consent where required (for example for certain cookies or marketing, where you can withdraw consent at any time).

Recipients and processors

We may share personal data with trusted service providers (for example hosting, analytics, or payment partners) who process data on our instructions. We require them to protect your data appropriately. We may also disclose information where required by law or to protect rights and safety.

International transfers

If we transfer personal data outside the EEA or UK, we will ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or UK authorities, or other mechanisms permitted under applicable law.

Retention

We keep personal data only as long as necessary for the purposes described in this notice and our general Privacy Policy, unless a longer period is required by law. Criteria include the nature of the data, legal obligations, and whether retention is needed to resolve disputes or enforce agreements.

Your rights

Subject to applicable law, you may have the right to:

Access your personal data and receive certain information about processing;
Rectify inaccurate data or complete incomplete data;
Request erasure (“right to be forgotten”) in certain circumstances;
Restrict processing in certain circumstances;
Data portability for data you provided, where processing is based on contract or consent and is automated;
Object to processing based on legitimate interests or to direct marketing;
Withdraw consent where processing is based on consent, without affecting lawfulness of processing before withdrawal;
Lodge a complaint with a supervisory authority.

In the EEA you may contact your local data protection authority. In the UK you may contact the Information Commissioner’s Office (ICO): ico.org.uk

Automated decision-making

We do not use solely automated decision-making, including profiling, which produces legal or similarly significant effects concerning you, unless we inform you otherwise and provide a lawful basis.

Children

Role Game is not directed at children under the age where parental consent is required in your country. We do not knowingly collect personal data from such children.

Changes

We may update this notice from time to time. The updated version will be indicated by a revised “last updated” reference where we publish it. Material changes will be communicated as required by law.

This notice should be read together with our general Privacy Policy and our Cookie Policy.