Privacy Policy

How We Handle Your Data

Last updated: 2026-06-28

This Privacy Policy explains what personal data Atavia ("we", "us") collects when you use the Atavia website and game service, why we collect it, and the rights you have over it. We aim to collect only what we need to run the game.

1. Who We Are

Atavia operates Atavia and is the controller of the personal data described here. If you have any questions or want to exercise your rights, contact us at privacy@atavia.

2. Data We Collect

  • Account information — the email address and account name you register with, and an encrypted password.
  • Technical data — your IP address, login times, and basic device/browser information, recorded in server logs.
  • Game data — your characters, progress, in-game activity, messages on public boards, and similar data created while you play.
  • Cookies & local storage — small amounts of data stored in your browser to keep you logged in and remember session preferences (see section 4).

3. Why We Use Your Data & Lawful Basis

  • To provide the Service — creating and running your account and characters (lawful basis: performance of a contract).
  • To keep the game fair and secure — detecting cheating, abuse, and unauthorised access (lawful basis: our legitimate interests).
  • To communicate with you — for example account recovery or important service notices (contract / legitimate interests).
  • To comply with the law — where we are legally required to retain or disclose information (legal obligation).

4. Cookies & Local Storage

We use strictly necessary cookies and browser local storage to keep you signed in and to operate the website. We do not use them for third-party advertising. A cookie-consent banner may be added in the future if we introduce non-essential cookies.

5. Data Retention

We keep your account data for as long as your account exists. If you delete your account, we remove or anonymise your personal data within a reasonable period, except where we must keep certain information to comply with legal obligations or to resolve disputes and enforce our Terms.

6. Sharing Your Data

We do not sell your personal data. We share it only with service providers that help us run Atavia — such as hosting and email providers — and only to the extent they need it to provide their service to us. We may also disclose data where required by law.

7. Your Rights

If you are in the EU/EEA, the GDPR gives you the right to access the personal data we hold about you, have inaccurate data corrected, have your data erased, restrict or object to certain processing, and receive your data in a portable format. To exercise any of these rights, contact us at privacy@atavia. You also have the right to lodge a complaint with your local data-protection supervisory authority.

8. Data Security

We take reasonable technical and organisational measures to protect your data, including encrypting passwords and restricting access to systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children's Privacy

Atavia is not directed at children below the minimum age of digital consent in their country. If you believe a child has provided us with personal data without appropriate consent, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for significant changes, announce them on the website.

11. Contact

For any privacy questions or requests, contact us at privacy@atavia.