Privacy Policy — Naruto Chronicles

Last updated: 25/10/2026

1. Who processes your data

1.1. The personal data processed in Naruto Chronicles (the website https://narutochronicles.com and the game) is processed by the server team, which operates from Spain.

1.2. Contact for any privacy matter: info@narutochronicles.com.

1.3. We apply the European Union General Data Protection Regulation (GDPR). For players in Brazil, we also respect the LGPD where applicable.

2. Data we collect

• Account: account name, password (stored only in protected/encrypted form, never in plain text), main e-mail and an optional backup e-mail (used to link the account and to recover it or change the password safely).
• Record of acceptance: date, version and IP address of the acceptance of the Terms, the Privacy Policy and the Donations Policy, to prove consent.
• Game: character names and game history (action logs, in-game chat, deaths, items, blocks and penalties).
• Access and security: IP address and date/time of access, and records of login and account-recovery attempts.
• Donations: PayPal order id, amount, currency, date and status. We do not receive or store card numbers.
• Feedback: messages sent with the client's FEEDBACK button.
• Metrics: server usage statistics (for example, players online).

3. What we use it for and the legal basis

4. Who we share it with

4.1. PayPal, to process payments.

4.2. Hostinger (server hosting, in a data center in Europe).

4.3. IONOS (domain registration and sending of account e-mails, such as password recovery and confirmations).

4.4. Google (Google Drive), where we keep copies of the database backups already encrypted; Google has no access to the content.

4.5. Authorities, when the law requires it or to protect rights in case of crime or damage.

4.6. We do not sell personal data.

4.7. Because the game's audience is in several countries and PayPal and Google operate globally, your data may be processed outside the European Economic Area, with the safeguards provided by the respective providers (such as standard contractual clauses or adequacy decisions).

5. How long we keep it

5.1. Account and characters: while the account exists. Accounts unused for 3 years may be deleted or anonymized.

5.2. IP addresses and access and security records: up to 12 months. In-game action records (logs, chat, deaths, items): up to 24 months.

5.3. Penalty history: for as long as needed to prevent repeat offenses and protect the community, and at most 5 years after the last penalty.

5.4. Donation orders (PayPal id, amount, date, status): for the period required by the applicable accounting and tax law (in Spain, up to 6 years).

5.5. Record of acceptance of the Terms: while the account exists and, afterwards, during the limitation period for possible claims.

5.6. Database backups: made daily, encrypted and kept for 7 days. Deleted data also ceases to exist in backups when these are replaced.

5.7. If you ask for deletion (clause 6), we delete or anonymize the data that we do not need to keep because of a legal obligation or to defend rights in proceedings, and what is kept will be limited to those purposes.

6. Your rights

You can request, by e-mail: access, rectification, deletion of the account and data, portability, restriction and objection to processing, and withdraw a consent you have given (without affecting what was done before). We reply within 30 days. We may ask you to prove that you own the account before complying.

You may also lodge a complaint with the data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

7. Security

7.1. The website uses HTTPS. The password is stored in protected form, backups are encrypted and personal data is kept on a server with restricted access. The administration panel is restricted and only the team (GM, ADM, God) has access.

7.2. No system is 100% secure. Use a strong, unique password and do not share it.

8. Cookies

8.1. The website uses essential cookies, needed for login and operation: the session cookie and the one that stores your chosen language. We do not use advertising or tracking cookies. If in the future we use other cookies, we will tell you and ask for your consent when the law requires it.

9. Messages and public content

9.1. Character names, level/experience rankings and in-game chat messages can be seen by other players. Do not put your personal data in these spaces.

10. Changes

10.1. We may update this Policy. We will announce it on the website or in the game. The update date is shown at the top.

11. Contact

info@narutochronicles.com