Privacy Policy

This privacy policy will provide information on how GameLoungeStore collects and processes personal data through the website www.gameloungestore.com

This website is not intended for children, and we do not knowingly collect data related to children. We recognize that children and young individuals might visit this website or interact with us and our business partners. It is our policy to encourage all minors to consult with their parents or legal guardians before submitting any content or information to us, our business partners, or other third parties.

Section 1 - Data Controller

STARLEASE - S.R.L. is the data controller and responsible for your personal data, referred to as "GamloungeStore," "we," "us," or "our" in this privacy policy.

Section 2 - Data We Collect

We will describe the data we collect, which is considered "personal data" or "personal information." This means it includes only data that can be used to identify you as an individual. Anonymous data will not be included.

Section 3 - Information We Collect and Why

Username

Description: The name you entered when creating your account.

Purpose: The username is used to address you on our platform, such as in dashboard messages, emails, or similar situations.

Email Address

Description: The email address you enter when creating your account.

Purpose: To allow you to access your account and to send notifications about payment information or account-related updates. We will never share this information with third parties.

Password

Description: The password you entered when creating your account will be stored in hashed form (we cannot "reverse" to your actual password, nor can we see your actual password).

Purpose: To allow you to access your account.

IP Address

Description: We store your IP address when you create your account and when you log in again.

Purpose: We store your IP address for security reasons, including our ability to verify ownership or detect unusual activity on an account from another IP address.

Billing Information

Description: If you subscribe to a paid plan, we are required by law to ask for and store billing information to create the invoice. This includes Country, VAT number, Phone number, State, ZIP code, City, Address, Legal First Name, Legal Last Name.

Purpose: We are required by law to store this information for tax purposes.

Analytics: We use a self-hosted Matomo server to store visitor counts on our website, storing information such as operating system, screen resolution, browser, country, and the first part of the IP; no data is provided to third parties. We enable analytics tracking only when cookies are accepted, and when the browser does not send a "Do-not-track" request. We respect "do-not-track" requests.

Purpose: We want to know the number of visits to our website and where our visitors come from. We do not use this information for other purposes, and we do not sell any of this information.

Section 4 - How We Collect My Data?

We use various methods to collect data:

Direct Integration: We use a form or directly ask for information from you. This includes any form you can fill out; Registration, Support Requests, Billing Information, etc.

Automated Technologies: Our servers may record automatic information, such as any page you visit. This information is recorded in a server log that can be used for debugging purposes. We do not sell this data to third parties, and we will not use it to track you; it is only technical logs created by the software we use to serve our platform.

Third-Party Integrations: We use various third-party integrations to monitor the performance of our platform and to assist you in using our platform. You can find more information about them in Section 5.

Section 5 - Third-Party Integrations

We use various third-party services to provide you with our services. This section will describe the services we use and why we use them.

CloudFlare

CloudFlare is a Content Delivery Network (CDN) and DDoS protection provider. A significant portion of the Internet (about 30-40%) has CloudFlare in front of its website, including us. CloudFlare provides us with protection against network attacks. CloudFlare may use your information to determine a security score. For information about their policies, visit their website: https://www.cloudflare.com/

Wozzbot

Wozzbot is the chatbot loaded on every page. The chatbot is loaded from our website and communicates with an external website only when you click on it. You can find more information on their website at https://www.wozzbot.com/

hCaptcha

We use the hCaptcha anti-bot service on our website. This service is provided by Intuition Machines, Inc., a U.S.-based company located in Delaware ("IMI"). hCaptcha is used to verify if the data entered on our website (e.g., on a login page or contact form) has been entered by a human or an automated program. For this purpose, hCaptcha analyzes the behavior of the website or mobile app visitor based on various characteristics. This analysis starts automatically as soon as the website or mobile app visitor enters a part of the website or app with hCaptcha enabled. For the analysis, hCaptcha evaluates various information (e.g., IP address, how long the visitor has been on the website or app, or mouse movements made by the user). The data collected during the analysis will be transmitted to IMI. hCaptcha's analysis in "invisible mode" may occur completely in the background. Website or app visitors are not advised that such analysis is taking place unless a challenge is presented to the user. Data processing is based on Art. 6, paragraph 1, letter f of the GDPR: the operator of the website or mobile app has a legitimate interest in protecting their site from abusive automated crawling and spam. IMI acts as a "data processor," acting on behalf of its clients as defined by the GDPR, and as a "service provider" under the California Consumer Privacy Act (CCPA). For more information on hCaptcha and IMI's privacy policy and terms of use, please refer to the following links: https://www.hcaptcha.com/priva... and https://www.hcaptcha.com/terms.

Section 6 - Sharing Data with Third Parties

We may share your information with various third parties, but only when required. We may share data with:

Providers used by us to provide you with our services. This includes, for example, payment providers we use to process your payments (e.g., Stripe or PayPal). Professional consultants within the EEA who provide us with consulting, banking, legal, insurance, and accounting services. This includes lawyers, bankers, auditors, and insurers. When we are required by law to share information, including but not limited to authorities acting as data controllers based in the Netherlands that require reporting.

Section 7 - Data Security

We have adopted adequate security measures to ensure that your data is not lost, used, or accessed without authorization.

We limit access to your data to employees, agents, contractors, and other third parties who have a business need to know. They will process the data only when instructed by us and are subject to a confidentiality obligation.

To help us protect your data, you can do some things, such as ensuring that your password is unique only to our website and does not include public information, such as your name.

Section 8 - Data Retention

We will retain your personal data only for the time necessary to fulfill the purposes for which we collected them, including legal, accounting, or reporting obligations.

We are obligated by tax law to retain basic information, including contact, identity, financial, and transaction data. We are required to retain this data for a maximum of 10 (ten) years.

Section 9 - Your Legal Rights

We want to ensure that you are fully aware of all your data protection rights. Every user has the right to:

Right to access - You have the right to request copies of your personal data. Right to rectification - You have the right to request correction of any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete. Right to erasure - You have the right to request the deletion of your personal data, under certain conditions. You can request to remove your data from your profile. Right to restrict processing - You have the right to request that we limit the processing of your personal data, under certain conditions. Right to object to processing - You have the right to object to our processing of your personal data, under certain conditions. Right to data portability - You have the right to request that we transfer the data we have collected to another organization or directly to you, under certain conditions. You will not have to pay a fee to access your data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to individuals who are not authorized to receive it. We may also contact you to ask for further information in relation to your request to speed up our response.

If you make a request, we have one month to respond. It may take longer if the request is complex; we will keep you updated if so.

If you wish to request data removal and you are a:

Right to access - You have the right to request copies of your personal data. Right to rectification - You have the right to request correction of any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete. Right to erasure - You have the right to request the deletion of your personal data, under certain conditions. You can request to remove your data from your profile. Right to restrict processing - You have the right to request that we limit the processing of your personal data, under certain conditions. Right to object to processing - You have the right to object to our processing of your personal data, under certain conditions. Right to data portability - You have the right to request that we transfer the data we have collected to another organization or directly to you, under certain conditions. You will not have to pay any fee to access your data (or to exercise other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in such circumstances.

We may need to request specific information from you to confirm your identity and ensure your right to access your personal data (or exercise other rights). This is a security measure to ensure that personal data is not disclosed to individuals who are not authorized to receive it. We may also contact you to request additional information regarding your request to expedite our response.

If you make a request, we have one month to respond. It may take longer if the request is complex; we will keep you updated if so.

If you want to request data removal, you can send us an email at support@gameloungestore.com specifying your Minecraft username and setting the subject as "DATA REMOVAL."