Privacy Policy — full text
valor.su · Privacy Policy
Key points in brief
A summary for convenience. Only the full text of the document below is legally binding.
Only what's neededUsername, email and technical data. We don't ask for your full name, phone number or documents.
Cards never reach usPayment is processed on the payment agent's side; card numbers never reach us.
We don't sell dataWe share it only with those the service can't run without: payment agents, hosting and email.
Your RightsAccess, correct or delete your data, or withdraw consent — via a ticket in your Account Dashboard.General Provisions
#- 1.1.This Personal Data Processing Policy (the “Policy”) explains which personal data of users is processed by the Valor project Administration (the “Operator”), for what purposes, on what legal basis, and how it is protected. The Policy has been developed in accordance with Federal Law No. 152-FZ “On Personal Data” of 27.07.2006 and is published pursuant to Part 2 of Article 18.1 of that Law.
- 1.2.The Operator is a natural person who applies the special tax regime “Professional Income Tax” and organizes the operation of the Valor project.
- 1.3.The Policy applies to data that the Operator receives through the valor.su website and its subdomains, the launcher, the game server, the voice chat and the Account Dashboard (collectively, the “Service”). Other terms are used as defined in Federal Law No. 152-FZ and the Terms of Service (Public Offer).
- 1.4.The Policy does not apply to third-party services — Discord, Telegram, VK, payment agents' websites, and server rating sites used for voting. They process data under their own rules.
Data We Process
#- 2.1.We process only the data necessary for the Service to operate. We do not request your surname, first name, patronymic, phone number, address or identity document details, and we do not process special categories of personal data or biometric data.
Account
- username and email address;
- password — only as a cryptographic hash; we do not store the password itself;
- registration date, Account settings and status;
- referral links — who invited whom.
Login and device
- IP address and the approximate location derived from it (city);
- dates and times of logins, active sessions;
- browser and operating system type;
- launcher version and the technical device data that the launcher transmits to launch and protect the game.
Game
- characters, their progress, inventory, achievements and ratings;
- logs of in-game actions: trading, mail, auction, loot;
- behavioral statistics collected by the anti-cheat module;
- messages in the in-game and web chat, nickname and technical data of the voice chat connection.
Support requests
- text of tickets and replies, attached screenshots and files;
- messages to the administration in the project's communities — to the extent that you sent them yourself.
Payments
- amount, date, order and payment number, status, payment method;
- top-up and purchase history, Bonus balance;
- we do not receive your bank card number, CVC or other payment details — they are processed by the payment agent.
Cookies and storage
- session and form protection cookies;
- interface settings in the browser's local storage;
- Yandex Metrica web analytics data — see section 9 for details.
- 2.2.The only information publicly visible in the Service is information that is by its nature part of the game: character names, guilds, levels, ratings, achievements, and messages in public chats. The Account username and email are not shown publicly.
Purposes and Legal Grounds
#| Purpose | Data | Legal ground | Retention period |
|---|---|---|---|
| Registration, logging in to the website, launcher and game, operation of the Account Dashboard | account, login and device, game data | performance of a contract — clause 5 | for as long as the Account exists |
| Accepting payments, crediting Bonus, delivering digital goods, resolving payment failures, receipts | payments, username, email | performance of a contract — clause 5; legal obligation — clause 2 | for the periods required for tax records and the statute of limitations |
| Support: responding to requests, applications and claims | support requests, username, email, game data | performance of a contract — clause 5 | for as long as the Account exists; claims — 3 years |
| Security: protection against account hacking, fraud, cheats, multi-accounting and artificial boosting; investigating violations of the Rules | login and device, game logs, chat | legitimate interest of the Operator and players — clause 7 | logs — up to 12 months; in the event of an investigation — until it is concluded |
| Service emails: email confirmation, password recovery, information about purchases and changes to documents | email, username | performance of a contract — clause 5 | for as long as the Account exists |
| Web analytics and website improvement | cookie identifiers, IP address, information about visits and actions on the website | consent — clause 1 | until consent is withdrawn |
- 3.1.We do not use data for purposes incompatible with those listed above.
- 3.2.We do not make decisions that produce legal consequences for a user based solely on automated processing (Article 16 of Federal Law No. 152-FZ): anti-cheat module triggers are reviewed by a member of the administration.
- 3.3.Where processing is based on consent, consent is given separately from other documents (for example, by ticking a box during registration or in the cookie notice) and may be withdrawn at any time.
How We Process Data
#- 4.1.Processing is carried out using automated means and includes collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), depersonalization, blocking, deletion and destruction.
- 4.2.Only those project team members who need access for their work (support, moderation, technical maintenance) have access to data, and only to the extent necessary. The team is obliged to keep information about players confidential (Server Rules, clause 4.5).
- 4.3.We do not publish personal data or disclose it to third parties without a legal basis.
Transfer to Third Parties
#- 5.1.We do not sell personal data or share it for advertising purposes.
- 5.2.Data is transferred only to the extent necessary for the purposes listed in section 3:
- payment agents — the amount, the order number and, if needed for a fiscal receipt or payment receipt, your email; the agent receives payment details directly from you and processes them as an independent operator;
- hosting providers and data centers whose equipment runs the Service;
- the email delivery service — to deliver service emails;
- Yandex LLC — Yandex Metrica data, if you have consented to analytics cookies;
- government authorities — on the grounds and in the manner established by law.
- 5.3.When you open website pages, your browser may load fonts and images (for example, game icons) from third-party servers. Such resources receive the technical request data — IP address and browser information — directly from your browser. Some of these resources may be located outside Russia.
- 5.4.The project's communities on Discord, Telegram and VK operate on third-party platforms. Whatever you publish there is processed under the rules of those platforms.
- 5.5.If cross-border transfer of personal data becomes necessary for the operation of the Service, the Operator will comply with the requirements of Article 12 of Federal Law No. 152-FZ, including notifying Roskomnadzor.
Retention and Destruction
#- 6.1.Data is stored no longer than the purposes of processing require (the periods are listed in section 3), unless a longer period is established by law.
- 6.2.After an Account is deleted, its data, game data and support requests are destroyed within 30 days, except for information about payments and claims that we are required or entitled to retain by law. Data is removed from backups as those backups are replaced on their regular schedule.
- 6.3.When the purposes of processing have been achieved or consent is withdrawn, data is destroyed or depersonalized within the time limits established by Article 21 of Federal Law No. 152-FZ.
Data Protection
#- 7.1.The Operator takes the legal, organizational and technical measures provided for by Articles 18.1 and 19 of Federal Law No. 152-FZ:
- encryption of the connection to the website (HTTPS);
- storing passwords only as hashes;
- access control for databases and administrative sections;
- a minimal circle of persons with access, bound by a confidentiality obligation;
- backups;
- timely software updates and protection against network attacks.
- 7.2.In the event of an incident — unlawful transfer or leakage of data — the Operator will notify Roskomnadzor within the time limits established by Part 3.1 of Article 21 of Federal Law No. 152-FZ and will inform the affected users of what they should do.
Your Rights
#- 8.1.As a personal data subject, you have the right (Articles 14–17 of Federal Law No. 152-FZ) to:
- obtain information about the processing of your data: what data is processed, for what purpose, on what basis, for how long and to whom it is transferred;
- demand that data be clarified, blocked or destroyed if it is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose;
- withdraw consent if processing is based on consent;
- object to a decision made solely on the basis of automated processing;
- appeal against the Operator's actions to Roskomnadzor (rkn.gov.ru) or in court.
- 8.2.How to exercise your rights: create a ticket in your Account Dashboard in the “Account” category with the subject “Personal data” and describe your request. A request submitted from the Account Dashboard confirms that it was sent by the Account owner. If you do not have access to the Account, write to us through the channels listed on the “Contacts” page — we will offer a way to confirm that the Account is yours.
- 8.3.We respond to a request within 10 working days of receiving it. This period may be extended by no more than 5 working days — in that case we will inform you of the reason.
- 8.4.Inaccurate data is corrected within 7 working days after you provide the correct information. After consent is withdrawn, processing stops and the data is destroyed within 30 days, unless the Operator has another legal basis for processing it.
- 8.5.Some data may need to be retained even after a deletion request if the law requires it (for example, payment information) — we will state this in our response.
- 8.6.Deleting Account data means deleting the Account itself, its characters and the remaining Bonus balance (clause 14.2 of the Terms of Service).
Cookies and Local Storage
#- 9.1.Cookies are small files that a website stores in your browser. Local storage (localStorage) is a similar mechanism for storing settings on your device.
| Type | Purpose | Can it be disabled? |
|---|---|---|
| Strictly necessary | logging in to the Account and keeping the session, protecting forms against request forgery, the “Remember me” feature | No — logging in and the Account Dashboard do not work without them |
| Functional (localStorage) | interface settings: selected tabs and filters, collapsed blocks | Yes — by clearing site data in your browser; your settings will be reset |
| Analytics | Yandex Metrica: visit statistics, click map, session recording (Webvisor) to improve the website | Yes — by declining in the cookie notice, in your browser settings, or by blocking the tracking counter |
Children
#- 10.1.The Service is intended for users over the age of 16.
- 10.2.We do not knowingly collect personal data of children under the age of 14 without the consent of their legal representatives. If you are a parent and have learned that your child registered without your consent, contact support — we will block or delete the Account and the data associated with it.
Changes to the Policy
#- 11.1.The Operator may update the Policy — for example, when the Service's features or the legislation change. The new version is published on this page with its date and takes effect upon publication, unless it states otherwise.
- 11.2.We announce significant changes in the website news. If the changes require new consent, we will request it.
Contacts for Data Matters
#- 12.1.Requests related to personal data are accepted via a ticket in your Account Dashboard (category “Account”, subject “Personal data”). Other ways to contact us are listed on the “Contacts” page.
- 12.2.Operator: the Valor project Administration — a natural person who applies the special tax regime “Professional Income Tax”.
Version of September 25, 2026. For questions about personal data, contact support or use the contacts.