Privacy Policy

1. Introduction

Archstone Solutions ("Company," "we," "us," or "our") operates the online multiplayer game Chariots of Ra (the "Game").

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. We only collect personal data that is reasonably necessary to operate and improve the Game.

By creating an account or using the Game, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of applicable data protection laws, Archstone Solutions is the data controller of your personal data.

This Privacy Policy is governed by the laws of Ontario, Canada, without regard to conflict of law principles.

2. Information We Collect

A. Account Information

When you register for Chariots of Ra, we may collect:

• Email address
• Password (securely managed through Firebase Authentication)
• Callsign / username

If you register using a third-party login provider (such as Google, Meta, or X), we may receive:

• Your email address
• Basic profile information associated with that account

We do not receive or store your third-party account passwords.

B. Gameplay Data

We store gameplay-related information including:

• Rank
• Games played
• Match statistics
• Performance data
• Vehicle customization selections
• Profile progression data

This data is stored using Google Firebase and Firestore services.

C. Technical and Usage Data

To maintain performance and security, we may collect:

• IP address
• Device and browser information
• Connection logs
• Error reports
• Session activity data

This information is used for troubleshooting, fraud prevention, and improving gameplay experience.

D. Payment Information (If Applicable in the Future)

If we introduce subscriptions, digital purchases, or premium services:

• Payments will be processed by a third-party payment provider.
• Archstone Solutions does not store credit card or full payment details on its own servers.
• Payment processors operate under their own privacy policies and security standards.

E. Marketing Communications

If you opt in to receive communications, we may use your email address to:

• Send updates about the Game
• Announce new features
• Promote special events or offers
• Encourage return play

You may unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us directly.

F. Advertising Data (If Advertising Is Enabled)

If the Game displays advertisements, third-party advertising providers may collect certain information to deliver ads and measure their effectiveness. This may include:

• Device identifiers or advertising IDs
• IP address
• Device and browser information
• Interaction with advertisements (such as views or clicks)

This information may be collected through SDKs, cookies, or similar tracking technologies provided by advertising partners.

3. How We Collect Your Data

• Directly from you when you register, update your profile, or contact us.
• Automatically through Firebase when you use the game (authentication events, gameplay logs).
• Automatically through Google Analytics when you use the game. Google Analytics may use cookies or similar technologies to collect information about your use of the Game, including device information and usage patterns. We use this information in aggregated form to improve performance and user experience.
• From third-party identity providers (Google, Meta, X) when you choose to sign in using those services. Please review their privacy policies as we do not control how they collect your data.
• Advertising providers and analytics services may use cookies, SDKs, or similar technologies to collect information about your interactions with the Game.

4. How We Use Your Data

We use your data for the following purposes, and only where we have a lawful basis to do so:

• Monitoring gameplay activity and technical data to detect cheating, abuse, or other violations of our Terms of Service, and enforcing account restrictions where necessary.
• Providing and operating the game, including account creation, authentication, and gameplay functionality.
• Maintaining security and preventing fraud, cheating, or unauthorized access.
• Improving game balance, performance, and the overall player experience using aggregated and anonymised analytics.
• Communicating with you about your account, including password resets and important service notices.
• Sending you optional marketing emails about game updates, promotions, and special events — only where you have given your consent or where permitted by applicable law. You can opt out at any time (see Section 9).
• Processing payments and managing subscriptions (when applicable).
• Complying with legal obligations.
• Delivering and measuring in-game advertisements and promotions.
• Preventing fraud or abuse in advertising systems.

5. Legal Basis for Processing (Where Applicable)

Depending on your jurisdiction, we process personal information based on:

• Your consent (account registration and marketing communications)
• Performance of a contract (providing gameplay services)
• Legitimate interests (security, fraud prevention, service improvement)
• Legal obligations

6. Third-Party Services & Data Sharing

We use the following third-party services that may process your data on our behalf:

• Google Firebase: Authentication, database storage (Firestore), and hosting. Governed by Google's Privacy Policy.
• Google Sign-In / Meta Login / Sign in with X: OAuth authentication providers. We receive limited profile information as permitted by your settings on those platforms.
• Google Analytics: Site usage statistics.
• Payment Processor (Future): If a subscription service is introduced, a third-party provider such as Stripe will handle payment processing under their own privacy and security standards (PCI-DSS compliant).
• Email Service Provider (Future): If we send marketing or transactional emails, we may use a third-party email platform. We will only share the minimum data necessary (e.g., your email address).

In the event of a merger, acquisition, restructuring, sale of assets, or similar business transaction, your personal data may be transferred to the acquiring or successor entity. We will ensure that any such transfer is subject to appropriate confidentiality and security protections.

We do not sell your personal data to third parties. We do not share your data with third parties for their own marketing purposes.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or security reasons (e.g., fraud prevention records).

Gameplay statistics may be retained in anonymised or aggregated form indefinitely for balancing and analytics purposes. Public leaderboard entries may be anonymised rather than fully deleted to preserve competitive integrity.

We do not knowingly allow targeted advertising based on personal data for users identified as children where prohibited by law.

8. Data Security

We take reasonable technical and organisational measures to protect your data, including:

• Passwords are hashed using industry-standard algorithms and never stored in plain text.
• All data in transit is encrypted using TLS.
• Firebase security rules restrict access to your data.
• We do not store credit card or payment details on our systems.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security and encourage you to use a strong, unique password.

9. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request that we delete your account and personal data ("right to be forgotten").
• Portability: Request your data in a machine-readable format.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you can withdraw consent at any time by clicking the unsubscribe link in any email or contacting us directly.

To exercise any of these rights, please contact us at privacy@archstone.me. We will respond within 30 days.

10. Marketing & Promotional Emails

We will only send marketing emails where you have provided express consent or where permitted under applicable anti-spam laws.

You can opt out of marketing emails at any time by clicking the "unsubscribe" link in any email we send you, or by contacting us at privacy@archstone.me. Note that even if you opt out of marketing emails, we may still send you transactional or service-related messages (e.g., password resets, account notices).

11. Children's Privacy

Chariots of Ra is not directed at children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

12. International Data Transfers

Your data may be processed and stored in servers located outside your country of residence, including in the United States where Google Firebase infrastructure operates. We ensure appropriate safeguards are in place (such as Google's standard contractual clauses) to protect your data during such transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you in-game or by email, and update the "Last updated" date at the top of this document. Your continued use of Chariots of Ra after changes are posted constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: privacy@archstone.me
• Website: www.chariots-of-ra.com/privacy

If you are located in the EU/EEA and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local data protection authority.