Privacy Policy

01Who we are

[Legal entity name] operates War Beyond and is responsible for your personal data. This policy explains what we collect, why, and the choices you have.

02Data we collect

• Account data: username, e-mail address and a password verifier. Your password is stretched on your own device (Argon2id) and only a keyed hash of that result is stored, so we never see or keep your password. Your account is shared by every War Beyond server.
• Game data: your pilot, company, items, progress, statistics, clan membership, chat messages, mail and trade history. Each game server keeps its own game data; premium status, bans and similar game rules belong to that server.
• Saved sign-in: if you choose “remember me”, a sign-in token (valid for 30 days) is stored on your device, encrypted for your Windows user on PC. Your password is never stored on the device.
• Technical data: IP address, device and operating system, game and launcher version, performance reports and error logs.
• Purchase data: transaction references from payment providers. We never receive your full card details.

03How we use your data

• To create and secure your account and to run the game.
• To prevent cheating, fraud and abuse, and to enforce the rules.
• To fix bugs, improve performance and balance the game.
• To answer support requests and send important service messages.

04Legal bases

We process data to perform our contract with you, to meet legal obligations, for our legitimate interests such as security and anti-cheat, and with your consent where required (for example optional cookies). This applies under the GDPR and the Turkish KVKK.

05Sharing

We share data only with providers who help us run the Service, such as hosting, content delivery and the account service (Cloudflare, which stores account data in its Workers and D1 services), the e-mail provider that delivers password reset codes (Resend), payment processors and app stores, and when the law requires it. We do not sell your personal data.

06Retention

We keep account data while your account exists. When you delete your account, your username, e-mail address and password verifier are removed from the account service at once, and every game server replaces your sign-in name with an anonymous one. Remaining game data is removed or anonymised, except where the law requires us to keep records for longer (for example tax or fraud prevention). Password reset codes expire after 30 minutes; deletion records used to inform the game servers are kept for 30 days.

07Your rights

You can delete your account yourself; you will be asked for your password, and the deletion cannot be undone. You can also ask to access, correct, delete or export your data, object to processing or withdraw consent. Contact privacy@warbeyond.com. You can also complain to your data protection authority.

08Children

War Beyond is not intended for children under 13. If we learn that a child under 13 has created an account, we delete it.

09Security

Passwords never leave your device in readable form: they are stretched with Argon2id before sending and stored only as a keyed hash. Traffic is encrypted, game servers accept only short-lived signed sign-in tickets, repeated failed sign-ins are slowed down, and access to personal data is restricted to staff who need it.

10International transfers

Our providers may process data outside your country. Where this happens we use appropriate safeguards such as standard contractual clauses.

11Cookies

This website only uses cookies that are needed for it to work. If analytics are added later, they will only run with your consent.

12Changes and contact

We will announce material changes to this policy in advance. Questions: privacy@warbeyond.com