Draft, not in force. This text is a working draft for review by legal counsel. It is not final legal text and does not create rights or obligations yet. Items marked like this still have to be filled in or decided.

Privacy Policy

Draft version of 10 November 2026

1. Who is responsible

The controller for your personal data is Networkguys (networkguys.nl), legal form, Smitspol 7-a7, 3861 RS Nijkerk, the Netherlands, Chamber of Commerce number 92277144. Contact for privacy questions: privacy@bordersatwar.com.

2. What we collect and why

• Guest play. When you start as a guest we create an anonymous account with a random identifier. We do not ask for your name or email address.
• Account. If you link an email address, we store that address and a hash of your password so you can sign in, confirm your address and reset your password.
• Game data. Your player name, the worlds you play in, your actions and messages in the game, your Bonds balance and season progress. We need this to run the game.
• Purchases. When you buy Bonds or a Season Pass we store what you bought, the amount, the time and the payment reference from Stripe. Stripe processes your payment details. We do not receive or store your card or bank account number.
• Technical data. Your IP address and basic request data are processed to deliver the game, to limit abuse and to keep the servers secure.

For the owner and counsel: this list is based on how the game works today. Check it against the live setup (server logs, retention of IP addresses, any analytics or error tracking added later) before publishing.

3. Legal grounds

• Performing our agreement with you: running your account, the game and your purchases.
• Legitimate interest: security, preventing cheating and abuse, and improving the game.
• Legal obligation: keeping purchase records for tax and bookkeeping.
• Your consent: Google Analytics on this website.

For counsel: confirm the legal ground for each purpose under the GDPR. Google Analytics runs on consent.

4. Cookies and local storage

The game stores a sign-in token and your settings in your browser so you stay signed in. These are needed for the game to work. This website loads Google Analytics, which shows us how visitors use the site, only after you accept it in the cookie notice. keep only if Google Ads is used: When we advertise the game we also use Google Ads to measure whether our ads work, again only after you accept. Until then, and if you decline, nothing from Google is loaded and no tracking cookies are set. Your choice is remembered in your browser for six months, and you can change it at any time with "Cookie settings" at the bottom of every page.

For the owner: keep this section in line with reality. The cookie notice only appears once GOOGLE_TAG_ID is set in the server's .env. The game itself at play.bordersatwar.com is a separate site: if Google Analytics is added there, it needs its own notice.

5. Who we share data with

• Stripe (Stripe Payments Europe, Limited, Ireland), for payments.
• Google (Google Ireland Limited), only if you accept Google Analytics in the cookie notice.

We run the game servers and send our emails ourselves, from our own servers in datacenter location, expected: the Netherlands. No hosting or email company processes your data for us.

We do not sell your personal data. We share it with authorities only when the law requires it.

Other players can see your player name, your country in a world and the messages you send them.

6. Transfers outside the EEA

Your account and game data stay on our own servers. Stripe, and Google if you accept Google Analytics, may process data in the United States. safeguards to confirm: EU-US Data Privacy Framework and standard contractual clauses.

7. How long we keep data

• Guest accounts that are never linked to an email address are deleted after 60 days. If you bought something as a guest, only the purchase record stays (a random account number, the product, the amount and the payment reference), for the 7 years Dutch tax law requires.
• Account and game data: until you delete your account, or after proposal: 24 months without signing in.
• Purchase records: 7 years, the period Dutch tax law requires for business records.
• Server logs with IP addresses: proposal: 30 days.
• Your cookie choice: 6 months in your browser.

For the owner and counsel: the GDPR sets no fixed periods for accounts and logs. You choose them and must be able to explain why they are needed. The 24 months and 30 days above are proposals, and the 60 days for guests should match what the server really does.

8. Your rights

You can ask us for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to processing based on legitimate interest. Send your request to privacy@bordersatwar.com. We answer within one month.

You can also file a complaint with your data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens.

9. Children

The game is not meant for children younger than 16. If you believe a child has given us personal data, contact us and we will delete it.

10. Security

Connections to the game are encrypted with HTTPS, passwords are stored only as a hash and access to the servers is limited to the people who run the game.

11. Changes

If we change this policy we publish the new version here and, for important changes, tell you in the game or by email.