Privacy Policy
WEVIUM is the controller of the personal data processed through WEVIUM and its games. Contact: support@wevium.com.
What we collect
- Account: username, email address, password (stored only as a salted scrypt hash), display name and colour.
- Play: game progress and saves, your heroes and their looks, match statistics, the memberships and items you own.
- Purchases: the item bought, amount, date and the payment reference (a Stripe reference, or a blockchain transaction). Card details are handled by Stripe and never reach our servers.
- Wallet (optional): the public address you link in a game, its $REIGN balance and the token transfers you make to us. Blockchains are public by design.
- Technical: IP address and request logs for security and abuse prevention, kept up to 30 days.
Why and on what basis
- To provide the Service and your purchases (performance of contract).
- To keep the Service secure, prevent cheating and fraud (legitimate interests).
- To keep payment and tax records (legal obligation, usually 10 years for accounting records).
- To send account emails such as password resets (performance of contract). We do not send marketing emails without your consent.
Sharing
We use processors bound by contract: our hosting provider (servers in the EU), Stripe (payments), Brevo (transactional email) and public blockchain RPC and price services when you link a wallet. We do not sell your data and do not use advertising trackers.
Cookies and storage
We store your sign-in token and preferences in your browser's local storage. These are strictly necessary for the Service; we use no analytics or advertising cookies.
Retention
Account data is kept while your account is open and deleted within 30 days of a deletion request, except records we must keep by law (payments) and anonymous statistics.
Your rights
You can access, correct, export or delete your data, object to processing and restrict it, by writing to support@wevium.com. You can also complain to your data protection authority (in France, the CNIL). Children under 13 may not create accounts; if you believe a child has, contact us and we will delete it.
Transfers
Some processors (such as Stripe) may process data outside the EU under the European Commission's standard contractual clauses or an adequacy decision.