Privacy Policy — COLOSSUMYY

Version 1.0 · Last updated: July 4, 2026

This policy explains what personal information is collected on the COLOSSUMYY site (the "Site"), what it is used for, to whom it is disclosed, and what your rights are — in accordance with the Israeli Protection of Privacy Law, 5741-1981, including Amendment No. 13 (in force from August 14, 2025), and the Protection of Privacy Regulations (Data Security), 5777-2017. Data controller: the site Operator. Contact: colossumyy@gmail.com.

1. What data we collect and why

Information	Source	Purpose
Email address, username	Provided at registration	Identification, account management, access recovery, prevention of duplicates and fraud
Password — encrypted (bcrypt) only; we cannot see it	Provided at registration	Account security
Game data (damage, diamonds, characters, ranking, achievements, friendships, groups)	Generated through use	Running the game, leaderboards, awarding prizes
Chat messages (private and group)	Provided through use	Providing the chat service, enforcing the code of conduct, handling complaints
Purchase data (transaction id, amount, pack type)	PayPal	Crediting the account, preventing double charges, accounting
Basic technical data (IP address, logs)	Automatic	Security, prevention of misuse, service integrity

Important: Your payment method details (card / PayPal account) are provided directly to PayPal and are never stored by us.

2. Providing information is voluntary

You are under no legal obligation to provide information; providing it depends on your will and consent. However, without the registration details you cannot open an account and take part in the Game.

3. Legal basis for processing

The information is collected and processed with your consent, given at registration (checking the consent box), and for the purpose of performing the engagement between you and the Operator (providing the game services). Processing for security and fraud-prevention purposes is done for the legitimate interest of protecting the service and its users.

4. To whom information is disclosed

PayPal — payment processing (subject to PayPal's privacy policy; the information may be processed outside Israel).
Oracle Cloud — the hosting infrastructure on which the server runs.
The information is not sold and is not transferred to third parties for marketing purposes. Disclosure will only be made if required by law, judicial order, or to protect the rights of the Operator and users.
Please note: your username, ranking, achievements and accumulated damage are displayed publicly in the Game by its very nature (leaderboard, public profile). Your email address is never shown to other users.

5. Cookies and local storage

The Site does not use advertising or tracking cookies. It uses the browser's localStorage to store a login token (JWT) only, so that you do not have to log in again on every visit. Clearing the Site's data in your browser will sign you out of your account.

6. Data security

We apply accepted security measures: traffic encryption (HTTPS/TLS), one-way password hashing (bcrypt), rate-limiting of login attempts, restricted access permissions and a secured server. That said, no system is entirely immune, and we cannot guarantee absolute protection against breaches.

7. Retention period

The information is kept for as long as your account is active. After an account is deleted, identifying details will be deleted or anonymized within a reasonable time, except for data that must be retained by law (e.g. transaction records for tax purposes) and operational logs kept for a limited period for security purposes.

8. Your rights

Access — you have the right to review the personal information stored about you (Section 13 of the Law).
Correction and deletion — you have the right to request correction of incorrect information or its deletion (Section 14 of the Law), including full deletion of your account.
To exercise your rights, contact colossumyy@gmail.com from the email address registered to your account. We will handle the request within a reasonable time and no later than required by law.
You also have the right to lodge a complaint with the Israeli Privacy Protection Authority.

9. Minors

The service is intended for those aged 18 and over only, and we do not knowingly collect information about minors. If you become aware that a minor has registered on the Site, please notify us and we will delete the account and the information.

10. Changes to this policy

This policy may be updated from time to time. The binding version is the one published on this page, with the update date noted. A material change will be accompanied by a notice on the Site.