Privacy Policy

2. What Personal Data We Collect

We only collect personal data that is necessary for providing and improving our Services. This may include:

• Contact Data: name and email address (e.g., for purchases or messages via the contact form).
• Account Data (optional): username, login credentials, and saved game progress if you create an account.
• Transaction Data: purchase and order details (processed via third-party providers like Stripe).
• Billing Data: billing address provided at checkout, used only for issuing invoices and fulfilling legal and tax requirements. We do not sell, forward, or use this data for marketing purposes.
• Technical Data: IP address, browser type, device data, and website usage data.
• Communication Data: messages submitted via our Contact Us form or customer support.

We do not collect:

• GPS location data
• Screenshots or data from Google Maps
• Sensitive personal data (e.g., racial or ethnic origin, religious beliefs, health information)

3. How We Use Your Data

We use your personal data for the following purposes:

• To process your order and deliver your game access code
• To enable account features like saving progress (optional)
• To provide customer support and respond to inquiries
• To analyze and improve the Website's performance and security
• To meet legal obligations and protect our rights

Uploaded Photos Use

Users may optionally upload team photos as part of their experience. Uploading a photo is entirely voluntary and not required to play.

By uploading a team photo, participants agree that Exicity may publish and use such photos for the company's commercial purposes. Consent can be withdrawn at any time by contacting exicitygames@gmail.com, in which case Exicity will cease any further use and remove the photo from public platforms within a reasonable time.

Users may also request deletion of their uploaded photos at any time, and we will promptly remove them from our systems.

4. Legal Basis for Processing (GDPR)

We process your data under the following legal bases (Article 6 GDPR):

• Performance of a contract (e.g., game delivery and access)
• Your consent (e.g., sending messages via the contact form)
• Our legitimate interest (e.g., ensuring platform functionality)
• Legal obligations (e.g., transaction recordkeeping)

5. Data Sharing & Third Parties

We do not sell your personal data.

However, we may share it with trusted third-party providers strictly to deliver our Services, such as:

• Payment processors (e.g., Stripe) – for secure processing of payments.
• Hosting and cloud service providers – to operate and maintain our Website.
• Email and customer support platforms – to communicate with you and handle inquiries.

In addition, billing data (your billing address) may be shared only when required by law with tax authorities or regulators for compliance with accounting and tax obligations.

All partners are required to follow GDPR-compliant practices.

6. International Data Transfers

If any service providers are located outside the EEA, we ensure adequate safeguards are in place (e.g., Standard Contractual Clauses) to protect your data.

7. Data Security

We take appropriate technical and organizational security measures, including:

• HTTPS encryption
• Secure server infrastructure
• Access controls and monitoring

Please note that no method of data transmission over the internet is 100% secure.

8. Data Retention

We retain personal data only as long as needed to:

• Complete your order and provide services
• Maintain optional user accounts
• Fulfill legal obligations

You may request deletion of your data at any time by contacting us at exicitygames@gmail.com.

9. Cookies

We use cookies to improve functionality and analyze usage patterns. These do not store sensitive personal data.

You can disable cookies via your browser settings.

10. Your Rights Under GDPR

You have the right to:

• Request access to your personal data
• Request correction or deletion
• Restrict or object to processing
• Withdraw consent at any time
• File a complaint with your local data protection authority

To exercise your rights, contact us at: exicitygames@gmail.com

11. Children's Privacy

Exicity is not intended for children under 16. We do not knowingly collect personal data from minors. If you believe we have done so, contact us and we will delete the data.

12. Changes to This Privacy Policy

We may update this policy as needed. Any changes will be posted on this page with a new "Last updated" date.

If significant changes occur, we may notify you via the Website or email (if provided).

13. Contact Us

For questions, requests, or concerns about this Privacy Policy or your data, contact us at:

exicitygames@gmail.com