AEZ — Privacy Policy

Effective Date: March 24, 2026

This Privacy Policy explains how AEZ ("we", "us", "our") collects, uses, and protects your information when you use our browser-based multiplayer game at aez.one ("the Service").

1. Information We Collect

Category	Data	When
Account Data	Display name, email address, profile picture (from Google)	When you sign in with Google
Guest Data	Auto-generated session identifier	When you play without signing in
Game Data	Player level, XP, skins, match statistics	During gameplay
Technical Data	IP address, browser type, device info, session cookies	Automatically on each visit

We do not collect payment information directly. Any future purchases will be processed by third-party payment providers.

2. How We Use Your Information

Provide the Service — authenticate you, save your progress, and match you with other players
Improve the Service — analyze gameplay data to fix bugs and balance the game
Communicate — send service-related notifications (we will not send marketing emails without your consent)
Security — detect cheating, abuse, and unauthorized access

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or UK, we process your data based on:

Contract — to provide you with the game service you requested
Legitimate interest — to maintain security, prevent fraud, and improve the Service
Consent — where you explicitly opt in (e.g. signing in with Google)

4. Third-Party Services

We use the following third-party services that may receive your data:

Google Sign-In — for authentication (Google Privacy Policy)
MongoDB — database storage (self-hosted)

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Cookies

We use essential cookies to:

Maintain your login session
Remember your game preferences

We do not currently use analytics or advertising cookies. If this changes, we will update this policy and obtain your consent where required.

6. Data Retention

Account data is retained as long as your account exists.
Guest session data expires after 14 days of inactivity.
Game data (stats, progress) is retained with your account.

You may request deletion of your data at any time (see Section 8).

7. Data Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure server infrastructure, and access controls. However, no system is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access — request a copy of the personal data we hold about you
Rectification — correct inaccurate or incomplete data
Deletion — request that we delete your personal data
Portability — receive your data in a structured, machine-readable format
Object — object to processing based on legitimate interest
Withdraw consent — where processing is based on consent

To exercise any of these rights, contact us at support@aez.one. We will respond within 30 days.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we discover that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal data, please contact us.

10. International Data Transfers

Our servers are located in the EU (Ireland). If you access the Service from outside the EU, your data may be transferred to and processed in the EU. By using the Service, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

12. Contact

For privacy-related questions or requests, contact us at:
support@aez.one