Privacy Policy

This Privacy Policy describes how Primal Defense LLC (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use Primal (the “Game”), our website at primalps.org, and related services. By using the Game you consent to the practices described here.

1. Information we collect

1.1 Account information

When you create an account we collect:

• Username and display name
• Email address, where you provide one
• Password, stored only in hashed form — we never store or see your plaintext password
• IP address at registration and at each login

1.2 Payment information

Purchases are handled by a third-party payment processor acting as the merchant of record. We never receive or store your full card number, bank details, or payment credentials. What reaches us is limited to:

• Transaction confirmation and order ID
• Purchase amount and currency
• The email address used at checkout, so we can deliver the purchase and support it
• Billing country or region, where the processor provides it

Your payment data is governed by the processor's own privacy policy and their PCI-DSS compliance.

1.3 Gameplay data

• Character data, skills, inventory, bank contents, and progress
• In-game chat and other player communications
• Purchase and in-game transaction history
• Playtime and session data

1.4 Technical data

We collect a limited amount of technical information for security and abuse prevention:

• IP address at login and registration
• Connection timestamps
• Server-side error and security logs

1.5 Cookies and browser storage

The public website does not set cookies and does not use browser storage to track you. Two narrow exceptions exist:

• Staff panel. Our internal administration panel, which is not accessible to players, uses browser local storage to remember interface state such as a selected filter.
• Checkout. Our payment processor may set its own cookies during checkout on their pages, governed by their policy, not ours.

2. How we use your information

• To create, maintain, and secure your account
• To process purchases and deliver what you bought
• To detect and prevent fraud, cheating, unauthorised access, and rule-breaking
• To provide support and answer your questions
• To tell you about important changes, including changes to these policies
• To meet legal and tax obligations

3. How we share your information

We do not sell your personal information. We share it only with:

• Our payment processor, solely to take payment and deliver your purchase
• Hosting and infrastructure providers, to run our servers and website
• Law enforcement or regulators, where required by law, court order, or to protect the safety of our users

4. How long we keep it

• Account data — for the life of the account, and up to 12 months after deletion or termination
• Permanently banned accounts — retained for at least 24 months to prevent ban evasion, and not deleted before that period ends
• Transaction records — at least 5 years, to meet financial and tax obligations
• Chat logs — up to 90 days for moderation
• Technical and security logs — up to 12 months

5. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted, subject to the retention periods above
• Object to or restrict certain processing
• Receive your data in a portable format

5.1 EEA and UK residents (GDPR)

You may withdraw consent at any time where processing relies on consent, lodge a complaint with your local data protection authority, and request data portability. Our legal bases for processing are performance of a contract (running the Game and fulfilling purchases) and legitimate interests (security, fraud prevention, and abuse prevention). We respond to data subject requests within 30 calendar days.

5.2 California residents (CCPA/CPRA)

You have the right to know what we collect and how it is used, to request deletion, to opt out of the sale or sharing of personal information for cross-context behavioural advertising — we do not sell or share personal information for advertising — and not to be discriminated against for exercising those rights. We respond within 45 days.

To exercise any of these rights, email stars@primalps.org from the address on your account, or tell us your in-game username so we can verify you.

6. International transfers

Our servers may be located in the United States or elsewhere. If you play from outside the United States, your data may be transferred to and processed in a country whose data protection laws differ from your own. For EEA and UK residents we rely on Standard Contractual Clauses or another approved transfer mechanism.

7. Security

We take reasonable technical and organisational measures, including:

• Encryption of data in transit (TLS)
• Hashed password storage
• Restricting access to personal data to authorised staff

No system is completely immune to compromise. If a security incident affects your data, we will notify you as required by law.

8. Minors

Primal is intended for players aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete the account and its data promptly. If you believe a minor has created an account, contact stars@primalps.org.

9. Third-party links

Our website and Game may link to third-party services such as Discord. We are not responsible for their privacy practices; please read their policies before sharing information with them.

10. Changes to this policy

We may update this policy. Material changes will be announced in game, on this website, or on our Discord, and the “Last updated” date above will change. Continued use after a change takes effect constitutes acceptance.

11. Contact

For privacy questions or data requests, contact stars@primalps.org.