PRIVACY POLICY

Ebon Crucible ("we," "us," or "our") operates the game Ebon Crucible and the website eboncrucible.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

1. Information We Collect

Account Information

When you create an account, we collect:

• Username (chosen by you)
• Email address
• Hashed password (we never store plaintext passwords)

Gameplay Data

We automatically collect data related to your use of the Service:

• Match history, win/loss records, and ELO ratings
• Class selections, ability usage, and match statistics
• Account level, experience points, and progression data
• In-game currency balances (Crucible Coins)
• Cosmetic inventory and equipped items
• Friends list and social interactions
• Chat messages (global, duel, and direct messages)

Payment Information

If you make purchases, payment processing is handled by Stripe. We do not store credit card numbers or full payment details. We receive and store transaction records including purchase amount and items purchased.

Technical Data

• IP address and approximate geographic location
• Browser type and version
• Operating system and platform (web, Steam, mobile)
• Connection timestamps and session duration

Local Storage

We use browser localStorage to store authentication tokens, audio/graphics preferences, and UI settings on your device. This data does not leave your device unless required for authentication.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Match you with opponents of similar skill (matchmaking)
• Track rankings, leaderboards, and competitive statistics
• Process in-game purchases and manage your inventory
• Enable social features (friends, chat, spectating)
• Detect and prevent cheating, abuse, and unauthorized access
• Send service-related communications (password resets, critical updates)

3. How We Share Your Information

We do not sell your personal information. We may share information with:

• Other players: Your username, match statistics, rankings, and equipped cosmetics are visible to other players as part of normal gameplay.
• Service providers: We use Amazon Web Services (AWS) for authentication (Cognito) and data storage (DynamoDB), and Stripe for payment processing. These providers process data on our behalf under their respective privacy policies.
• Legal compliance: We may disclose information if required by law, legal process, or to protect the rights, safety, or property of our users or the public.

4. Data Storage and Security

Your data is stored on Amazon Web Services infrastructure in the United States (us-east-1 region). We implement reasonable security measures including encrypted connections (TLS/SSL), token-based authentication, and access controls. However, no method of electronic storage is 100% secure.

5. Data Retention

We retain your account data for as long as your account is active. Match history and statistical data may be retained indefinitely for leaderboard and ranking integrity. If you request account deletion, we will delete your personal information within 30 days, though anonymized aggregate statistics may be retained.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated personal data
• Export your data in a portable format
• Object to certain processing of your data

To exercise these rights, contact us at the email address below.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us.

8. International Data Transfers

If you are located outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

9. Third-Party Services

The Service may integrate with third-party platforms including Steam (Valve Corporation). When you use the Service through Steam, Valve's privacy policy also applies to data collected through their platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Opt-Out and Data Controls

You have the following opt-out options:

• Account deletion: Submit a request via our contact form (select "Account Deletion Request"). We will delete your account and personal data within 30 days.
• Data export: Request a copy of your data via our contact form (select "Privacy / Data Request").
• Marketing communications: We do not send marketing emails. All communications are service-related only.
• Cookies/localStorage: You can clear localStorage through your browser settings. Note that this will sign you out and reset your preferences.
• Do Not Track: We honor Do Not Track browser signals. When detected, we limit data collection to what is necessary for the Service to function.

12. GDPR Rights (EEA/UK Users)

If you are in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation:

• Legal basis: We process your data based on legitimate interest (providing the Service), contractual necessity (your account), and consent (optional features).
• Right to erasure: Request deletion of your personal data via our contact form.
• Right to restriction: Request that we limit processing of your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interest.
• Right to lodge a complaint: You have the right to file a complaint with your local data protection authority.

We will respond to all data rights requests within 30 days.

13. CCPA Rights (California Users)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

To exercise these rights, use our contact form and select "Privacy / Data Request."

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights:

Contact form: eboncrucible.com/contact
Website: eboncrucible.com