This Policy explains what personal data Teos Games LLC ("Teos Games", "we", "us" or "our") collects when you use the TEOS ONLINE game, the game client, the launcher, the game servers and this website (together, the "Service"), why we collect it, who we share it with and what you can ask us to do with it. It is part of the Terms of Service, and what the client integrity and anti-cheat section of the Terms refers to is described in section 2.5 below.
1. Who we are
Teos Games LLC, a limited liability company organised in the State of Delaware, United States, operates the Service and is the controller of the personal data described here. You can reach us about anything in this Policy at the address in section 13.
2. What we collect
2.1. Account data
When you register we store your username and nickname, your email address, your password (only as a hash - we never store it in a readable form), the status of the account, the in-game currencies and prestige credited to it, the date it was created and the IP address it was created from, the dates you last entered and left the game and the IP address of your last login, and any record of a restriction placed on the account, with its reason, its length and the staff member who placed it. If you link a Discord account, we store its Discord id, user name, display name, avatar reference and the date you linked it; you can unlink it at any time.
We also log each login attempt - the username used, the IP address and the time - so that we can rate-limit attempts and investigate attempts to break into accounts.
2.2. Connection, session and device data
Each time the client or the launcher connects we record the session: an internal session and connection identifier, the session token, the IP address, the MAC address of the network adapter, and when the session started and ended and how long it lasted. We use the IP and MAC addresses to tell accounts and devices apart - for recovering an account, for finding shared or stolen accounts, and for the enforcement described in section 2.5. Where we block a device after a serious breach of the Terms, we keep the identifier of that device, the reason and the date.
We do not determine your precise location, and we do not use GPS or any other location sensor.
2.3. Purchases
Payments are taken by third-party payment providers. They send us a record of the transaction: their order and transaction identifiers, the merchant, the amount charged, the currency, the tax and exchange rate, what was bought and what was credited to the account. Your full card number and the other payment credentials are handled by the provider and never reach our servers. We keep our record of the purchase for accounting and to deal with refunds, disputes and chargebacks.
2.4. Game data
Playing the game produces data on our servers: your characters and their progress, items, bank and warehouse contents, trades, market sales, kills and deaths, boss events, item drops, gift codes used, votes recorded for the server, and the credits spent in the in-game mall. We keep logs of these events so that we can restore what a fault or a theft destroyed, investigate fraud and balance the game.
2.5. Client integrity and anti-cheat
This is what the Terms of Service refer to. The client and the launcher check their own files, the game data files and the game as it runs, and report the result of those checks and the versions they are running. We also record any attempt to interfere with the client, the launcher, the data files or the game protocol. The launcher reports its own errors with the message, the path it ran from, the operating system and the IP address.
These checks look at the integrity of our own program and of our own data files. They are not a general scan of your computer: we do not read your personal files, your browser data or the contents of other applications, and we do not record your keystrokes outside the game. We use what they report to find cheats and tampering, to decide on suspensions, bans and device blocks under the Terms of Service, and to defend those decisions if you dispute them.
2.6. Website
The website sets the cookies described in section 5, uses Cloudflare Turnstile to tell people from bots on forms such as registration and login, and records a referral code if you arrive through one. When you write to us at the address in section 13, we keep your message and our answer together with the account it concerns.
3. Why we use it
- to create and run your account and to let you play the game;
- to deliver what you buy and to handle refunds, disputes and chargebacks;
- to keep the Service secure: to detect cheating, bots, tampering with the client or the data files, account theft, payment fraud and attacks on our servers;
- to enforce the Terms of Service and the Game Rules, including suspensions, bans and device blocks, and to answer a dispute about one;
- to restore what a fault or a theft destroyed and to answer what you write to us;
- to produce statistics about the game and to balance it;
- to comply with the law and to respond to lawful requests.
We do not sell personal data, we do not use it to build advertising profiles, and we do not use it to train machine-learning models.
4. Legal bases
If the data protection law of the European Union, the United Kingdom or a similar law applies to you, we rely on these bases:
- performance of our contract with you - running the account, the game and your purchases;
- our legitimate interests - the security of the Service and of our players, anti-cheat, fraud prevention, enforcement of the Terms, statistics and the development of the game;
- your consent - for anything optional, such as linking a Discord account;
- compliance with a legal obligation - accounting records and answers to lawful requests.
5. Cookies and local storage
The website uses only the cookies it needs to work: an authentication cookie that keeps you signed in, a session cookie, and the cookie Cloudflare Turnstile sets to run its bot check. We set no advertising or tracking cookies and we embed no advertising networks. You can delete these cookies in your browser, but you will not be able to sign in without them.
6. Who we share it with
We share personal data only with the parties that help us run the Service, and only with what each of them needs:
- our hosting and infrastructure providers, who keep the servers and backups;
- the payment providers that take your payment, and who may ask us for information to settle a dispute or a chargeback;
- Cloudflare, for the Turnstile bot check and for protecting the website;
- Discord, if you choose to link a Discord account;
- courts, regulators and law enforcement, where the law requires it or where it is needed to establish or defend a legal claim;
- a buyer or a successor, if the Service or our business is transferred, under the same obligations as this Policy.
7. Where it is stored
We are based in the United States and our servers and backups may be in the United States or in another country. If you are in the European Union, the United Kingdom or another region whose law restricts transfers, your data may be transferred to and processed in a country whose data protection law differs from yours; we rely on the safeguards that law provides, such as the standard contractual clauses, and we ask the same of our providers.
8. How long we keep it
- account data: while the account exists;
- purchase records: as long as the accounting and tax law that applies to us requires, usually several years;
- session, login and connection records and game logs: while they are useful for security, moderation and the resolution of disputes, and then deleted or aggregated into statistics that identify nobody;
- anti-cheat records, bans and blocked device identifiers: for as long as the restriction lasts and afterwards, because without them a banned player simply registers again.
When an account is closed we delete or anonymise what we no longer need, and keep what we must: the purchase records, and the records of a ban or of fraud.
9. Security
Passwords are stored only as hashes. Traffic to the website is served over HTTPS, access to the databases and the servers is limited to the people who need it, and the game data files we ship are encrypted. No system is perfectly secure: keep your password to yourself, never give it to anyone claiming to be our staff, and tell us at us at the address in section 13 as soon as you think your account has been used by someone else.
10. Your rights
Depending on where you live, you may ask us to give you a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, or to send it to another controller, and you may withdraw a consent you gave. Write to the address in section 13 from the address registered to the account; we may ask you to prove that the account is yours before we act, and we answer within the time the applicable law allows.
Some requests we may have to refuse in part, and we will say why: we keep what we need for accounting, what is needed to enforce a ban or to prevent a banned player from returning, and what is needed to establish or defend a legal claim. If you are in the European Union or the United Kingdom you also have the right to complain to your data protection authority.
11. Children
The Service is not meant for children. As the Terms of Service say, you may play only if you have reached the age of majority where you live, or if a parent or guardian has accepted the Terms for you and supervises your use of the Service. We do not knowingly collect data from a child without that consent; if you believe we have, write to the address in section 13 and we will delete the account and its data.
12. Changes to this Policy
We may change this Policy. The current version is always on this page with its effective date, and we announce material changes on the website before they take effect. The English version is the authoritative one; translations are provided for convenience. Earlier revisions are kept and can be requested from us at the address in section 13.
13. Contact
Teos Games LLC
A Delaware limited liability company
[email protected]
Write to that address about this Policy, about a request concerning your data, or about a security problem with the Service.