Who is responsible
Avomu in Netherlands operates HavocTown and decides why and how the personal data below is used. Our operator details identify the business and its contact address. Contact [email protected] about this policy or your data.
This notice covers our website, accounts, game services and communications. Payment providers and Discord also process data for their own services under their own notices. A username, IP address or hardware identifier can still be personal data even when we do not ask for your real name.
Data & purposes
We receive information from you, your browser or game client, our game servers and payment providers. The website does not ask for a real name or postal address at account registration. Providers or support correspondence may supply additional identifying or billing information.
| Information | Why we use it | GDPR basis |
|---|---|---|
| Email, username/display name, password hash, verification state and account timestamps. | Create and authenticate an account, recover access, link verified game data and deliver essential service messages. Passwords are stored as hashes. | Performance of the account/service contract. |
| Character names, class, level, XP, balances, equipment/inventory, vehicle ownership, progression and game transactions. | Run the game, save progress, calculate rewards and display your own linked characters and balances. | Performance of the game contract. |
| IP addresses, hardware/device identifiers from the game, session identifiers, browser/user-agent details and security/audit events, including login attempts. | Protect accounts and servers; limit abuse, cheating, fraud and evasion of restrictions; investigate incidents and disputes. | Legitimate interests in secure, fair and reliable services, balanced against player rights. Legal obligations where a specific law requires retention or disclosure. |
| Order identifiers, email, package, amount/currency, GP and bonus calculations, purchased features, selected character identifier/name, feature start/expiry, payment/refund status and provider transaction responses. | Process purchases, credit website GP, deliver purchased feature periods, investigate delivery/refund problems, prevent payment fraud and keep required financial records. | Performance of the purchase contract; legal accounting obligations; legitimate interests in fraud prevention and legal claims. |
| Support messages, reports, attachments and Discord username or user ID when you contact us there. | Answer requests, verify account ownership, investigate rule violations and resolve complaints. | Contract where needed for support; legitimate interests in moderation and resolving disputes; legal obligations for rights requests. |
| Email and records of newsletter choices, consent and withdrawal. | Send optional HavocTown news and promotional emails; honour opt-outs and demonstrate permission. | Consent for marketing; legitimate interests/legal obligations for a minimal suppression and consent record. |
| Terms version, age confirmation, acceptance time, account, IP and user agent. | Record the agreement accepted at registration or purchase and resolve contractual disputes. | Performance of the contract and legitimate interests in proving its terms. |
Account email, credentials and connection information are necessary for account access. Required payment information is necessary for purchases. Marketing is optional. If required information is not provided, the related service may be unavailable.
Your character name and gameplay actions can be visible to other players. Information you post in a public community channel is visible to that channel’s audience. Keep account and payment information private.
Public character profiles and rankings
The public website displays eligible characters’ names, classes, levels, total XP, allocated stats, equipped items and rendered in-game appearances. Event boards can show saved Race Points balances. When a current guild roster is published, guild names, masters, memberships and combined member levels are public too. These pages can be viewed without an account and, after public launch indexing is enabled, found through search engines.
Public profiles do not display account email, account identifiers, IP addresses, hardware identifiers, login activity, private inventory, cash or GP balances, or purchase history. Deleted characters and restricted accounts are excluded from the public records. Cached pages and portraits may take time to update. Contact [email protected] about a profile correction or privacy request.
The optional character privacy feature hides one individual profile page for a paid period. Rankings, guild listings and the information and portraits shown there stay public. While active, the profile displays a privacy message and is excluded from our profile sitemap; this does not remove previously saved copies or guarantee immediate removal from search results. It becomes public again after the paid period ends. You do not need to buy this feature to exercise the data protection rights described below.
Draft review item: before public launch, document the lawful basis and retention for these public profiles, the handling of objections and removal requests, and portrait/cache removal procedures. Registration terms and player notices must explain this visibility.
Hardware identifiers
Avomu uses in-game hardware identifiers for security, including detecting abuse and attempts to evade restrictions. They are not a substitute for fair investigation: shared devices can affect more than one player.
Draft disclosure: the exact identifier, whether it is transformed or hashed, the matching process, retention and review safeguards still require confirmation. This notice does not claim that identifiers are anonymous or that the game collects no other device information.
Email & newsletters
Creating an account or accepting the terms does not subscribe you to advertising. Where a newsletter is offered, choosing it must be separate and optional. We use your email to send HavocTown news and offers only when we have the required permission.
You can withdraw marketing consent at any time using the unsubscribe option in a marketing email or by contacting [email protected]. Stopping marketing does not close your account. Essential security, purchase and service notices are separate from promotional emails.
We retain a minimal suppression record to avoid sending further marketing, and evidence of consent where needed to demonstrate lawful sending. These records are not permission to keep sending advertising.
International transfers
Hosting locations, remote-access locations and any transfers outside the European Economic Area are awaiting confirmation. The final notice must identify the relevant countries and explain the actual transfer safeguards, such as an applicable adequacy decision or standard contractual clauses. No specific safeguard is claimed in this draft.
You may ask [email protected] for information about applicable safeguards and how to obtain a copy, with confidential information protected where necessary.
How long we keep data
We use the following purposes to determine retention: operating an active account and saving progress; handling closure and recovery; investigating security incidents; meeting financial record obligations; and resolving legal claims. Retention must be limited to what is necessary for each purpose.
Exact retention periods for account and game data after closure, IP/HWID security records, support reports, marketing records, payment records and backups are not yet confirmed. This is an outstanding publication requirement. The current website does not automatically delete all these records on a fixed schedule.
Deleting a character is not the same as deleting your website account or all related records. A required accounting record or a narrowly limited incident record may need to remain after account closure. We will explain any lawful reason for retaining data when answering a deletion request. Backup retention and restoration procedures must respect completed deletion requests.
Your privacy rights
Under applicable data protection law, you may request access and a copy, correction, erasure, restriction, and portability of eligible data. You may object to processing based on legitimate interests, and object to direct marketing at any time. You may withdraw consent without affecting processing that was lawful before withdrawal. These rights have conditions and exceptions; we will explain any refusal.
Email [email protected]. We may need proportionate information to verify your identity, but do not ask you to post identity documents publicly. Requests are normally free. Under the GDPR we respond without undue delay and within one month; if a permitted extension is necessary, we explain it within that month.
You can complain to the Dutch Autoriteit Persoonsgegevens, or the competent supervisory authority where you live, work or believe an infringement occurred. You do not have to contact us first to exercise that right.
Young players
HavocTown accounts are available to people aged 16 or older. This is an account-access policy, not an official content rating. Purchases on this website are restricted to adults aged 18 or older. Where a minor needs a parent or guardian’s agreement to enter the game contract, that agreement is also required.
If you believe a child has supplied information contrary to our age policy, contact us. We will investigate, restrict access as appropriate, and delete or otherwise handle the information in line with applicable law. Any service offered to younger children needs appropriate parental-authorisation and child-safety arrangements before it opens.
Security & decisions
The website uses password hashing, account access controls, session protections and checks on state-changing requests. Payment processing is delegated to the selected provider. No online service can promise perfect security.
Some protections are automatic, including limits on repeated login or registration attempts. GP bonuses are calculated from purchase history and, where eligible and verified, game progress. This affects the bonus shown for a purchase. You may ask for an explanation or correction if the information is wrong.
Security restrictions can be challenged through support. Contact us if you believe a restriction is incorrect and request human review.
Draft review item: the operator must confirm any game-side automated HWID bans or other significant automated decisions, including their logic, consequences and review safeguards, before publication. The security purpose does not authorise unlimited device surveillance.
Policy changes
We will update this notice when the service or its data use changes, show the effective date, and give appropriate notice of material changes. A new policy alone does not create consent for a new marketing or tracking purpose.