Privacy Policy

1. Data Controller Identity

For the purposes of the General Data Protection Regulation (“GDPR”), UK Data Protection Act, and applicable global data privacy statutes, the Data Controller responsible for personal data processed through this Website and associated services is:

2. Personal Data We Collect

We adhere to data minimization principles. We only collect personal information that is strictly necessary to deliver, protect, and optimize our services.

3. Cookies & Local Storage Technologies

We utilize essential client-side storage technologies to deliver core interactive features:

• Session Storage (rivals_intro_played): Records whether you have already viewed the cinematic logo sequence during your active browser session, preventing repetitive playback.
• Local Storage (rivals_cookie_consent): Stores your explicit privacy preference choices regarding optional analytics and marketing categories.

No non-essential third-party tracking or advertising cookies are loaded until you grant express consent through our Cookie Preferences control.

4. Legal Bases for Processing (GDPR Art. 6)

We process personal data only when substantiated by recognized legal grounds under GDPR Art. 6:

• Performance of Contract (Art. 6(1)(b)): To deliver requested game content, manage account credentials, and facilitate customer support.
• Legitimate Interests (Art. 6(1)(f)): To maintain infrastructure security, mitigate cheating and exploits, prevent server degradation, and analyze aggregated platform stability.
• Consent (Art. 6(1)(a)): For optional marketing updates, newsletter notifications, and optional analytical measurement technologies.

5. Data Sharing & Processors

We do not sell, rent, or trade your personal data to data brokers or advertisers. Data is shared exclusively with vetted technical service providers acting under binding Data Processing Agreements (“DPAs”):

• Edge hosting and CDN providers for resilient static content distribution.
• Authentication and mobile store partners (Apple Game Center, Google Play Services).
• Email delivery infrastructure for transactional support communications.

6. International Data Transfers

Because our servers and operations span international regions, your information may be processed in jurisdictions outside the European Economic Area (“EEA”). Where transfers occur, we implement Standard Contractual Clauses (“SCCs”) approved by the European Commission to ensure adequate data protection safeguards.

7. Data Retention Criteria

We retain personal data only for as long as strictly required to fulfill the operational purpose for which it was gathered, resolve disputes, comply with financial audit requirements, or enforce our Terms of Service. Server access logs are rotated and deleted on a standard 30-day automated cycle.

8. Technical Security Safeguards

We employ robust technical and organizational measures, including TLS 1.3 encryption in transit, strict firewalls, isolated staging environments, and principle-of-least-privilege access controls to protect your data from unauthorized interception or loss.

9. Your GDPR & CCPA Data Rights

Depending on your jurisdiction, you possess statutory rights regarding your personal information:

• Right of Access: Request copies of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate personal records.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data.
• Right to Restrict or Object: Restrict processing or object to processing based on legitimate interests.
• Right to Data Portability: Obtain your personal data in a structured, machine-readable format.

To exercise any of these rights, contact our privacy team at [email protected].

10. Children's Privacy (COPPA & GDPR Art. 8)

Rivals Reborn does not knowingly solicit or collect personal data from children under 13 (or under 16 in applicable EU jurisdictions) without verified parental consent. If we become aware that personal data has been submitted by a child without parental consent, we will promptly delete such records.

11. Privacy Contact & Updates

For privacy inquiries, data deletion requests, or questions regarding our compliance practices: