1. Information We Collect

When you use Black Sea Mafia we may collect:

• Account information: username, email address, hashed password
• Gameplay data: character stats, actions, transactions, and session logs
• Technical data: IP address, browser type, device information, and timestamps
• Payment data: processed securely through Stripe — we never store full card details

2. How We Use Your Data

We use collected data to:

• Provide and improve the game experience
• Process purchases and manage your account
• Enforce our Terms of Service and anti-cheat systems
• Communicate important service updates
• Generate anonymous, aggregated analytics

3. Cookies & Tracking

We use essential cookies to maintain your session and authentication state. We may use anonymous analytics tools to understand how the game is used. We do not sell personal data or use third-party advertising trackers.

4. Third-Party Services

We share data only with service providers necessary to operate the platform, including hosting (Google Cloud Platform), payment processing (Stripe), and frontend delivery (Vercel). Each provider is bound by their own privacy policies and data-processing agreements.

5. Data Retention

Account data is retained for as long as your account is active. Gameplay data from completed seasons is retained for Hall of Fame and historical records. If you delete your account, personal data is removed within 30 days, except where retention is required by law.

6. Data Security

We protect your data with industry-standard measures including encrypted connections (TLS), hashed passwords, and access controls on internal systems. No system is completely secure, but we take reasonable measures to protect your information.

7. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data. You may also have the right to restrict or object to certain processing. To exercise any of these rights, contact us at contact@blackseamafia.com.

8. Children's Privacy

Black Sea Mafia is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If we learn that we have collected data from a child under 16, we will delete that data promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via in-game notification or email. Continued use after changes constitutes acceptance.