Privacy Policy
This policy explains how Gamer Sarl ("we", "us") collects, uses and protects your personal data when you play Endless Curse (the "Game").
01Data we collect
- Guests: if you play as a guest, your progress and settings are stored only in your browser (local storage). Nothing is sent to our servers.
- Account data: your player name and your password. We never store your password in plain text, only a salted hash of it.
- Recovery email (optional): if you add one, we use it only to send you a link when you forget your password. It is never shown to anyone and you can remove it at any time in Settings > Account.
- Game data: your save (collection, coins, gems, equipment, upgrades and statistics) and a record of your runs (time, kills, coins earned, level, skills chosen and similar game figures), used to check results and to balance the Game.
- Leaderboard (public): if you play solo with an account for at least a minute, your best survival time for each stage and difficulty appears on the public leaderboard together with your player name, hero, class, kills and level. Weekly boards are kept for 8 weeks and the all-time board until you delete your account. You can ask us to hide your entries by writing to contact@endlesscurse.com.
- Payment data: payments are handled by PayPal and we never receive or store your card number or your PayPal login. We keep only the order number, the PayPal order and transaction numbers, the pack, the amount, the currency, the payment status, the date and when you agreed to immediate delivery, so we can deliver gems and keep our accounts.
- Technical data: like any website, our hosting provider processes your IP address, browser type and access and error logs, for security and troubleshooting.
02Why we use it
- To provide the Game and keep your progress (performance of a contract).
- To process purchases, deliver gems and handle refunds and chargebacks (contract and legal obligations).
- To prevent cheating, abuse and fraud (legitimate interests).
- To keep records we are legally required to keep, such as transaction records for tax purposes.
We do not sell your data, we do not share it for advertising, and the Game has no ads or tracking.
03Cookies and local storage
The Game does not use advertising or analytics cookies. It uses your browser's local storage for your login session, settings, language and, for guests, the whole save. When you pay, PayPal's checkout may use its own cookies, as described in its privacy policy.
04Service providers
- Cloudflare: website hosting, database and sending password reset emails.
- PayPal: payment processing. It processes your name, email address, billing details and card or PayPal account under its own privacy policy.
05Retention and deletion
- We keep account and game data for as long as your account exists.
- You can delete your account at any time in Settings > Account. This deletes your account, your save, your run records, your recovery email and your remaining gems. It also removes you from the leaderboard.
- Transaction records (orders and payment notices) are kept after the account is deleted for as long as tax and accounting law requires.
- Password reset links expire after a short time.
06International transfers
The cloud services we use (such as Cloudflare) may store data outside the country where you live. We rely on providers that offer an adequate level of data protection.
07Your rights
Under applicable law (such as the GDPR or Taiwan's Personal Data Protection Act) you may ask to access, correct or delete your personal data, or to restrict or object to certain processing. Write to contact@endlesscurse.com and we will reply within a reasonable time.
08Children
The Game is not directed at children under 13. If we learn that we have collected a child's personal data without the consent of a parent or guardian, we will delete it promptly.
09Changes and contact
We will announce changes to this policy on the website or in the Game. For any privacy question, contact contact@endlesscurse.com.