Privacy policy | TibiaIN

Privacy Policy of the Tibia.in Online Store

Important notice: The legally binding and authoritative version of this document is the Polish version. This English version is provided for convenience only. We apologize for any possible translation inaccuracies.

Effective date: May 16, 2026.

This Privacy Policy explains how we process and protect personal data of users of tibia.in.

1. Data Controller

The data controller is: TibiaIN KAMILA CHYLINSKA, Poland, NIP: 7282826854, REGON: 369409269 (the “Controller”).

Contact details:

• e-mail: [email protected]
• Discord: user Chylu

2. Scope of processed data

Depending on how you use the service, we may process:

• e-mail address,
• Tibia character nickname,
• transaction and billing data,
• technical identifiers (e.g., IP address, session identifiers),
• data related to customer support communication.

3. Purposes and legal bases

We process data under Article 6(1) GDPR:

• (b) performance of a contract (order fulfillment and Digital Content delivery),
• (c) legal obligations (tax, accounting, settlement obligations),
• (f) legitimate interests (security, customer support, claims handling, service quality).

4. Data retention period

Data retention period is 5 years.

As a general rule, personal data are stored for 5 years counted from the end of the calendar year in which:

• the contract was fulfilled,
• support communication or complaint handling ended,
• or another event justifying processing occurred.

After that period, data are deleted or anonymized unless further processing is required by mandatory law.

5. Data recipients

Data may be shared, only to the extent necessary, with entities supporting Store operations, including:

• payment providers (including Millennium Pay),
• hosting and infrastructure providers (including OVH Cloud),
• analytics and communication providers (e.g., Google, Discord),
• technical, accounting, or legal service providers,
• competent public authorities where required by law.

6. Transfers outside the EEA

When using global providers, data may be transferred outside the European Economic Area. Such transfers are performed with legally required safeguards (e.g., Standard Contractual Clauses or adequacy mechanisms).

7. Your rights

You have the right to:

• access your data,
• rectify your data,
• erase your data,
• restrict processing,
• data portability,
• object to processing,
• lodge a complaint with the Polish supervisory authority (UODO President).

Requests related to your rights may be sent to: [email protected].

8. Cookies

The service uses cookies and similar technologies for:

• technical purposes (proper website operation),
• security,
• analytics and statistics.

You can manage cookies in your browser settings. Restricting cookies may affect some service functionalities.

9. Changes to this Privacy Policy

The Controller may update this Privacy Policy, especially due to legal changes or technical changes in the service. The current version is always published in the Store.