This Privacy Policy describes how Pvpenforced ("we", "us", "the server") collects, uses, stores, and protects information when you create an account, play on our game server, visit our website (pvpenforced.com), or buy coins in our store.

By using the website or the game server, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, please do not use the service.

Last updated: September 29, 2026.

We collect only the information that is strictly necessary to operate the game server, process purchases, and protect the community from abuse.

Account data

• Account number (numeric, 5–10 digits) and password (stored as a one-way SHA-1 hash)
• E-mail address (used for account recovery and order confirmations)
• Country (self-declared at registration)
• Character names, level, vocation, equipment, deaths, and other in-game statistics

Technical data

• IP address used to connect to the game server and to the website
• Timestamps of logins, logouts and character actions
• Browser user-agent and basic request metadata (logged by the web server)

Payment data

• When you pay by card, the card data is collected and processed directly by Stripe. We never see or store full card numbers.
• We keep a local record of each successful purchase (account number, amount, payment method, transaction ID) for accounting purposes.

We use the collected information for the following purposes only:

• To create and maintain your account and characters on the game server.
• To process purchases and credit Pvpenforced Coins to your account.
• To send transactional e-mails (account recovery, purchase confirmations).
• To detect and prevent cheating, bot use, multi-accounting abuse, payment fraud, and other violations of the server rules.
• To display in-game statistics (highscores, online list, character pages, top fraggers, character bazaar) — these are public by design on this server.

We do not sell, rent, or trade your personal data with third parties for marketing purposes.

The website uses a minimal set of cookies:

• Session cookies — required to keep you logged in while you browse the account panel. They are deleted when you close the browser or log out.
• Cloudflare cookies — set by our CDN provider for security purposes (DDoS protection, bot mitigation). See Cloudflare's own privacy policy below.

We do not use Google Analytics, Facebook Pixel, advertising trackers, or any third-party behavioural profiling.

To operate the website and process payments we rely on the following providers. Each of them has its own privacy policy that applies in addition to ours:

• Cloudflare — CDN, DNS, TLS termination, and DDoS protection for the website and game server. (Cloudflare Privacy Policy)
• Stripe — Credit/debit card payment processing. (Stripe Privacy Policy)
• Brevo (Sendinblue) — Transactional e-mail delivery (account recovery, order receipts). (Brevo Privacy Policy)

We keep your data for as long as your account exists. If your account is deleted — either by you, or automatically due to long inactivity — we keep only the minimum information required for fraud prevention and accounting (purchase records, banned IPs, aggregated statistics).

Web server access logs are rotated and discarded after 30 days.

Purchase records are kept for as long as required by the applicable accounting laws.

Under Brazilian LGPD and, where applicable, the European GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or outdated data.
• Request the deletion of your account and associated personal data (in-game characters and public records may be retained in anonymised form).
• Withdraw consent for processing where consent is the legal basis.
• Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, contact us at the e-mail below. We will reply within a reasonable time frame.

We follow industry-standard practices to protect your data: TLS 1.3 on all website traffic, restricted server access, regular backups, and segregation between the public web layer and the database.

However, no system is 100% secure. You are responsible for keeping your account password confidential. Never share it with anyone, including server staff — we will never ask for your password.

Pvpenforced is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under that age. If you believe a minor has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or third-party services. The "Last updated" date at the top of this page indicates when the latest revision was published. We encourage you to review this page periodically.

For any privacy-related question, request, or complaint, please contact us at:

[email protected]