Privacy Policy

This Privacy Policy describes how ImSolo.pro ("the Company", "We", "Us", or "Our") collects, uses, stores, shares, and protects Your personal data when You use our website, web games, mobile games, servers, Discord bot, and related services (collectively, the "Service"). It also explains Your rights under the General Data Protection Regulation (GDPR) and other applicable European Union privacy laws.

By accessing or using the Service, You acknowledge that You have read and understood this Privacy Policy. If You do not agree with any part of this policy, You should discontinue using the Service.

1. Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service, authenticated via a Third-Party Social Media Service (Discord or Google).
• Company (referred to as either "the Company", "We", "Us", or "Our" in this Agreement) refers to ImSolo.pro.
• Cookies are small files that are placed on Your computer, mobile device, or any other device by a website, containing the details of Your browsing history on that website among its many uses.
• Country refers to: Germany (where the website domain is hosted) and France (primary service processing location), within the European Union.
• Data Controller means the natural or legal person who determines the purposes and means of the processing of Personal Data. For this Service, ImSolo.pro is the Data Controller.
• Data Processor means any natural or legal person who processes Personal Data on behalf of the Data Controller.
• Device means any device that can access the Service, such as a computer, mobile phone, or digital tablet.
• GDPR refers to the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council.
• Personal Data is any information that relates to an identified or identifiable individual, as defined under Article 4(1) of the GDPR.
• Service refers to the Website, web game, mobile game, game servers, Discord bot, and all related gaming services.
• Service Provider means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service, or to assist the Company in analyzing how the Service is used.
• Third-party Social Media Service refers to any website or social network through which a User can log in or create an account to use the Service (specifically Google and Discord).
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit, game session data, or server diagnostic information).
• Website refers to ImSolo.pro, accessible from https://imsolo.pro.
• You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

2. Data Controller

ImSolo.pro acts as the Data Controller for all Personal Data collected through the Service. For all inquiries regarding data processing, please contact us at contact.imsolo.pro@gmail.com.

3. Collecting and Using Your Personal Data

Types of Data Collected

A. Account & Identity Data (provided by You or Your OAuth provider)

When You create an account via Discord or Google OAuth2, We collect the following data from Your third-party provider profile:

• Unique Account Identifier: Your Discord or Google ID, used as unique identifier for your game account;
• Username: Your Discord or Google display name;
• Email Address: The email associated with Your OAuth account (used for account identification and transactional communications);
• Avatar: Your profile picture URL from Discord or Google.

B. Game Progression & Activity Data

As You play and interact with the Service, We automatically collect and store gameplay progression data, including but not limited to:

• Account level, experience points (XP), and coin balance;
• Highest scores, total eaten mass, and survival statistics;
• Owned skins, skin pieces, equipped skins, and cosmetic inventories;
• Active boosters (XP boosters, bot boosters) and potion slot data;
• Season pass progress, adventure progress, and quest completion data;
• League tier, league XP, weekly league standings, and prestige level;
• League Shop purchase history and item limits;
• Daily login streaks, free coin claim timestamps, and bonus claim timestamps;
• Album collection progress and event participation data.

C. Transaction & Payment Data

When You make purchases (subscriptions, coin packs, adventure tokens), We store:

• Order IDs and transaction IDs from payment processors;
• Item SKU (product identifier), item type, and amount granted;
• Order amount and currency code;
• Stripe Customer ID and Stripe Subscription ID (for subscribers);
• Subscription plan, status (active, canceled, expired, past_due), billing cycle dates, paid-through date, and cancellation timestamps;
• Last invoice ID and last payment timestamp.

We do not store sensitive financial credentials such as credit card numbers, CVV codes, or bank account details. All payment processing is handled securely by our authorized third-party processors (Stripe and Xsolla).

D. Usage Data & Technical Data

Usage Data is collected automatically when using the Service. This may include:

• Your Device's Internet Protocol address (IP address);
• Browser type, browser version, and user agent string;
• The pages of our Service that You visit, the time and date of Your visit, and the time spent on those pages;
• Unique device identifiers and mobile device information (device type, mobile device unique ID);
• Session tokens (UUID) assigned upon login for authentication;
• Last login timestamps and account creation timestamps;
• Other diagnostic data and server performance logs.

E. Anti-Cheat & Moderation Data

To maintain fair play, enforce our Code of Conduct, and protect the integrity of the game environment, We collect and store the following data when anti-cheat or moderation actions are triggered:

• IP Addresses: The IP address of the device used at the time of a ban or moderation event;
• User Agent: The browser or client user agent string, created and assigned automatically by your browser, used to identify the type of client used to access our services;
• Ban Reason & Timestamp: The reason for the moderation action and when it occurred;
• Associated User ID: Your game account ID linked to the moderation event.

F. Survey & Offer Wall Data (BitLabs)

We integrate a third-party offer wall and survey provider, BitLabs, which allows players to earn in-game rewards by completing surveys and offers. When You interact with the BitLabs survey wall, We receive and store the following callback data:

• Your User ID (to credit rewards to the correct account);
• Reward amount and earning value;
• Transaction ID, event type (reward, offer, chargeback), state, and reason;
• A verification hash for callback integrity.

Your interactions with BitLabs surveys and offers are also subject to BitLabs' own Privacy Policy. We encourage You to review it before participating in surveys.

G. Information from Third-Party Social Media Services

The Company allows You to create an account and log in to use the Service through the following Third-party Social Media Services:

• Google (via Google OAuth2)
• Discord (via Discord OAuth2)

If You decide to register through or otherwise grant us access to a Third-Party Social Media Service, We collect Personal Data that is already associated with Your account, as described in Section 3A above (unique ID, username, avatar, and email address). The OAuth scopes We request are limited to "identify" and "email" for Discord, and equivalent basic profile scopes for Google.

We do not receive or store Your third-party account password, and We do not access Your friends lists, private messages, or any data beyond the minimal profile information described above.

H. Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. The technologies We use may include:

• Cookies or Browser Cookies: A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service.
• Web Beacons: Certain sections of our Service and our emails may contain small electronic files known as web beacons that permit the Company, for example, to count users who have visited those pages or verify system and server integrity.

We use both Session and Persistent Cookies for the purposes set out below:

• Necessary / Essential Cookies: (Session Cookies, Administered by Us). These Cookies are essential to provide You with services available through the Website and to authenticate users and prevent fraudulent use of accounts. Without these Cookies, the services that You have asked for cannot be provided.
• Cookies Policy / Notice Acceptance Cookies: (Persistent Cookies, Administered by Us). These Cookies identify if users have accepted the use of cookies on the Website.
• Functionality Cookies: (Persistent Cookies, Administered by Us). These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preferences. The purpose of these Cookies is to provide You with a more personal experience.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation, We process Your Personal Data based on the following legal grounds:

• Performance of a Contract (Article 6(1)(b) GDPR): Processing is necessary for the performance of a contract to which You are a party — specifically, to provide You with a game account, deliver purchased digital goods (subscriptions, coin packs), manage Your account progression, and fulfill our obligations under our Terms and Conditions.
• Legitimate Interests (Article 6(1)(f) GDPR): Processing is necessary for the purposes of our legitimate interests, including:
  • Maintaining game integrity, fair play, and anti-cheat enforcement (IP logging, ban system, device identifiers);
  • Preventing fraud, abuse, and unauthorized access to accounts;
  • Analyzing usage patterns, server performance, and improving the Service;
  • Communicating service-critical updates and security notices.
• Legal Obligation (Article 6(1)(c) GDPR): Processing is necessary to comply with legal obligations to which We are subject, including tax record-keeping for transactions, responding to lawful requests from public authorities, and retaining data as required by German, French, and EU law.
• Consent (Article 6(1)(a) GDPR): Where required (for example, for optional survey participation via BitLabs, or for non-essential cookies), We rely on Your freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service: including monitoring the usage and server performance of our Service, authenticating users via session tokens, and ensuring server availability.
• To manage Your Account: to manage Your registration as a user of the Service, maintain Your game profile, and grant access to features, progression, purchases, leagues, and competitive content.
• For the performance of a contract: the development, compliance, and fulfillment of purchase contracts for digital items, coins, adventure tokens, or subscriptions acquired through the Service.
• To process payments and subscriptions: to manage recurring subscription billing, distribute weekly VIP rewards, grant signup bonus items, and maintain payment and invoice records.
• To enforce fair play and safety: to operate our anti-cheat system, process ban entries, verify accounts against the ban list, and protect the gaming environment from cheaters, exploiters, and abusive players.
• To contact You: by email or Discord notifications regarding game updates, service notices, account security alerts, or responses to support inquiries.
• To manage Your requests: to attend to and resolve customer support inquiries, account issues, partial account transfer requests, and billing requests.
• For business transfers: to evaluate or conduct a merger, restructuring, or asset transfer in which user data is among the assets transferred.
• For system improvements: for data analysis, identifying usage trends, evaluating the effectiveness of our promotions, and improving the overall player experience.
• To manage seasonal and competitive content: to operate league rotations, season passes, adventure seasons, album events, and leaderboard rankings.

6. Sharing and Disclosure of Your Personal Data

We may share Your personal information in the following situations:

A. Third-Party Service Providers (Data Processors)

We share data with the following third-party service providers who act as Data Processors on our behalf to facilitate our services:

• Stripe (payment processor) — processes subscription billing, coin pack purchases, and manages the customer billing portal. Stripe receives Your payment details directly. See: Stripe Privacy Policy.
• Xsolla (payment processor & Merchant of Record) — processes certain coin pack and adventure token purchases. Xsolla acts as an authorized Merchant of Record for these transactions. See: Xsolla Privacy Policy.
• BitLabs (survey & offer wall provider) — provides the in-game survey wall where players can earn rewards. BitLabs processes survey responses and sends reward callbacks to our servers. See: BitLabs Privacy Policy.
• Hosting & Infrastructure Partners — server hosting providers who store and process data on our behalf to operate the game servers, database, and website.
• Discord — We operate an official Discord bot that interacts with the Discord API to provide game-related features. The bot processes Your Discord User ID and server membership. See: Discord Privacy Policy.
• Google — Used as an OAuth2 identity provider for account authentication. See: Google Privacy Policy.

B. With Other Users

When You play games or display your public in-game profile, the following data may be viewed publicly by other players:

• Your in-game username and avatar;
• Your account level and experience;
• Your equipped skin;
• Your leaderboard rank, league tier, and league statistics;
• Your season pass progress (leaderboard).

C. With Law Enforcement

Under certain circumstances, the Company may be required to disclose Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court order or government agency) in Germany, France, or the wider European Union.

D. For Business Transfers

We may share or transfer Your personal information in connection with any merger, sale of Company assets, or acquisition of our business. In such cases, You will be notified before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

E. With Your Consent

We may disclose Your personal information for any other purpose with Your explicit consent.

7. International Data Transfers

Your Personal Data is primarily processed on servers located within the European Union (Germany and France). However, some of our third-party Service Providers (such as Stripe, Xsolla, BitLabs, Google, and Discord) may process Your data in countries outside the EU/EEA.

Where Your data is transferred outside the EU/EEA, We ensure that appropriate safeguards are in place in accordance with GDPR requirements, including:

• Transfers to countries with an adequacy decision by the European Commission;
• Use of Standard Contractual Clauses (SCCs) approved by the European Commission;
• Reliance on the service provider's compliance with recognized frameworks (such as the EU-U.S. Data Privacy Framework).

8. Retention and Deletion of Your Data

Retention Periods

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. Specifically:

• Account Data & Game Progression: Retained for as long as Your account remains active. If Your account is inactive for a prolonged period, We may contact You before taking action on Your data.
• Transaction & Payment Records: Retained for a minimum period as required by German and French tax law and accounting regulations (typically up to 10 years for financial records under German law, §257 HGB, and 10 years under French law, Article L123-22 du Code de commerce).
• Anti-Cheat & Ban Records: Ban-related data (IP addresses, identifiers, user agents) is retained for the duration of the ban and may be kept for a reasonable period afterward to prevent ban evasion and protect the gaming community.
• Survey Wall Records (BitLabs): Transaction records from survey completions are retained for accounting and dispute resolution purposes.
• Server Logs & Usage Data: Technical logs and usage data are retained for a limited period necessary for diagnostics, security, and performance monitoring (typically no longer than 12 months).

Right to Erasure (Delete Your Data)

You have the right to request the deletion of the Personal Data that We have collected about You, subject to applicable legal retention requirements. You may request account and data deletion at any time by contacting our support team via email at contact.imsolo.pro@gmail.com or via our Discord ticket system.

Upon a valid deletion request, We will permanently delete or anonymize Your Personal Data within 30 days, except for data that We are legally required to retain (such as financial transaction records required by tax law). We will inform You if any data must be retained and the reason for such retention.

9. Your Rights Under GDPR

As a resident of the European Union, You have the following rights regarding Your Personal Data under the General Data Protection Regulation:

• Right of Access (Article 15): You have the right to request a copy of the Personal Data We hold about You. We will provide this information free of charge within 30 days of Your request.
• Right to Rectification (Article 16): You have the right to request correction of any inaccurate Personal Data We hold about You. Your username and avatar are synchronized with Your OAuth provider; to update these, update Your Discord or Google profile.
• Right to Erasure (Article 17): You have the right to request the deletion of Your Personal Data, as described in Section 8 above, subject to legal retention obligations.
• Right to Restriction of Processing (Article 18): You have the right to request that We restrict the processing of Your Personal Data under certain circumstances (for example, while We verify the accuracy of contested data).
• Right to Data Portability (Article 20): You have the right to receive Your Personal Data in a structured, commonly used, and machine-readable format (such as JSON or CSV), and to transmit that data to another controller.
• Right to Object (Article 21): You have the right to object to the processing of Your Personal Data based on legitimate interests. We will cease processing unless We demonstrate compelling legitimate grounds that override Your interests.
• Right to Withdraw Consent (Article 7(3)): Where processing is based on Your consent, You have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority. For users in Germany, the relevant authority is the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) or Your regional Data Protection Authority (Landesdatenschutzbeauftragter). For users in France, the relevant authority is the Commission Nationale de l'Informatique et des Libertés (CNIL) — www.cnil.fr.

To exercise any of these rights, please contact us at contact.imsolo.pro@gmail.com. We will respond to Your request within 30 days, as required by GDPR. We may request verification of Your identity before processing any request.

10. Security of Your Personal Data

The security of Your Personal Data is important to Us. We implement appropriate technical and organizational measures to protect Your data against unauthorized access, alteration, disclosure, or destruction, including:

• Encrypted communication (HTTPS/TLS) for all data transmitted between Your device and our servers;
• Secure session management using randomly generated UUID tokens;
• Webhook signature verification for all payment provider communications (Stripe and Xsolla);
• Administrative access controls requiring authentication for management operations;
• Regular monitoring and logging for security incident detection.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

11. Children's Privacy

Our Service does not specifically target children under the age of 13, and We do not knowingly collect personally identifiable information from anyone under the age of 13.

If You are a minor (under the legal age of majority in Your jurisdiction), You must have the explicit permission and consent of Your parent or legal guardian to create a game account and use ImSolo.pro. We strongly recommend that parents and legal guardians supervise their children's use of the Service at all times.

If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data without Your consent, please contact Us immediately at contact.imsolo.pro@gmail.com. If We become aware that We have collected Personal Data from a child under 13 without verification of parental consent, We take prompt steps to remove that information from Our servers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features of our Service. We will notify You of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.

We encourage You to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. For significant changes that materially affect Your rights, We may provide additional notice via email or in-game notification.

13. Contact Us & Support

If you have any questions, requests, or concerns regarding this Privacy Policy, how your data is handled, or if you wish to exercise any of your GDPR rights, please contact us through our official channels: