Privacy Policy

Privacy Policy for CaveDuck.net

We are staunchly committed to protecting and meticulously safeguarding your privacy and personal data through advanced protection protocols and comprehensive security measures across our entire platform.

This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data. In this role, we are responsible for maintaining comprehensive oversight of how your personal information is collected, used, and protected throughout our systems.

We may process usage data (“usage data”), which comprehensively includes IP addresses, geographical location, browser type and version, operating system, referral source, length of visit, page views, website navigation paths, and timing information. This information is collected through automated tracking technologies, server logs, and user interaction monitoring and may include browsing patterns, feature preferences, and interaction frequency. The source of this data is our analytics tracking system and server monitoring tools. We process this information for several important purposes, including improving website performance, enhancing user experience, analyzing trends, and detecting security threats, which enables us to optimize our services, provide personalized content, and maintain platform security. The legal basis for this processing is our legitimate interests in monitoring and improving our website and services.

We may process account data (“account data”), which comprehensively includes your name, email address, username, password hash, account settings, notification preferences, and registration date. This information is collected through registration forms, account updates, and direct user input and may include communication preferences, security settings, and account status. The source of this data is direct user submission during account creation and management. We process this information for several important purposes, including account authentication, service provision, communication management, and security maintenance, which enables us to provide secure access, personalized services, and account support. The legal basis for this processing is the performance of a contract between you and us and our legitimate interests in proper administration.

We may process profile data (“profile data”), which comprehensively includes your profile picture, bio information, interests, gaming preferences, activity history, and social connections. This information is collected through profile creation forms, user submissions, and activity tracking and may include achievement records, gaming statistics, and community interactions. The source of this data is user-provided content and automated activity tracking. We process this information for several important purposes, including community building, content personalization, feature optimization, and user experience enhancement, which enables us to create engaging experiences, facilitate user interactions, and improve platform features. The legal basis for this processing is our legitimate interests in maintaining and developing our gaming community.

Your Rights:

Right to Access: You have the right to obtain confirmation about whether we process your personal data and request copies of this data. This includes the ability to access your personal information, verify processing activities, and confirm data accuracy. To exercise this right, you can submit a formal request through our dedicated privacy portal or contact our data protection team directly. We will respond within 30 days and may require government-issued identification, proof of address, and account verification to verify your identity.

Right to Rectification: You have the right to request correction of inaccurate personal data and completion of incomplete data we hold about you. This includes the ability to update personal information, correct errors, and modify incomplete data. To exercise this right, you can use our account settings interface or submit a formal correction request. We will process your request within 15 days and may require account credentials, specific data corrections needed, and supporting documentation to verify your identity.

Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances, particularly when the data is no longer necessary for its original purpose. This includes the ability to remove account information, delete activity history, and withdraw processing consent. To exercise this right, you can submit an erasure request through our dedicated form or contact our privacy team. We will respond within 30 days and may require account password verification, written confirmation, and specific deletion scope to verify your identity.

Right to Restrict Processing: You have the right to limit how we use your personal data in specific circumstances, such as when you contest its accuracy or object to processing. This includes the ability to pause data processing, limit data usage, and temporarily block access. To exercise this right, you can submit a restriction request through our privacy center or contact our data protection officer. We will respond within 15 days and may require account verification, restriction scope details, and reason documentation to verify your identity.

Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller. This includes the ability to download personal information, transfer account data, and move profile content. To exercise this right, you can use our data export tool or submit a portability request. We will respond within 30 days and may require two-factor authentication, account ownership proof, and destination details to verify your identity.Data Collection and Processing

We process Service Data which includes user profiles, game progress, achievements, in-game interactions, and saved preferences. This processing involves automated data collection, user input analysis, and progress tracking, enabling us to provide personalized gaming experiences and track achievements. For example, in the context of gaming, this includes saving game states, tracking completion rates, and managing multiplayer interactions. The legal basis for this processing is performance of our service contract with users, specifically to maintain game progress and provide core gaming functionalities.

We process Technical Data which includes device information, IP addresses, browser type, session duration, and system specifications. This processing involves automated logging, performance monitoring, and system optimization, enabling us to ensure optimal service delivery and compatibility. For example, in the context of gaming, this includes graphics settings optimization, connection quality monitoring, and device compatibility checks. The legal basis for this processing is legitimate interests, specifically to maintain service quality and technical functionality.

We process Communication Data which includes chat messages, forum posts, support tickets, and direct communications. This processing involves message routing, content moderation, and response management, enabling us to facilitate user interactions and provide support. For example, in the context of gaming, this includes multiplayer chat monitoring, community forum management, and technical support communications. The legal basis for this processing is consent and legitimate interests, specifically to maintain community safety and provide user assistance.

We process Transaction Data which includes purchase history, payment information, and subscription details. This processing involves payment processing, subscription management, and transaction verification, enabling us to process purchases and maintain service access. For example, in the context of gaming, this includes in-game purchases, premium subscriptions, and refund processing. The legal basis for this processing is contract performance and legal obligations, specifically to fulfill purchases and comply with financial regulations.

We process Preference Data which includes game settings, notification preferences, and customization choices. This processing involves preference storage, settings synchronization, and personalization management, enabling us to provide customized experiences. For example, in the context of gaming, this includes control configurations, audio settings, and interface customization. The legal basis for this processing is legitimate interests and consent, specifically to enhance user experience and maintain user preferences.

Security Measures

Our comprehensive encryption protocols ensure end-to-end protection of your data, incorporating industry-standard algorithms and regular security updates to maintain data integrity. This includes regular security assessments and penetration testing by qualified professionals.

We implement multi-layered security infrastructure, including advanced firewalls and intrusion detection systems that continuously monitor for and prevent unauthorized access attempts. This infrastructure undergoes regular updates and enhancements.

Access to personal data is strictly controlled through role-based permissions, multi-factor authentication, and detailed access logs. We maintain comprehensive audit trails of all data access and modifications.

Our continuous monitoring systems provide real-time threat detection and automated response protocols, ensuring immediate action against potential security threats.

We maintain comprehensive backup procedures with encrypted offsite storage and regular recovery testing, ensuring data availability and integrity.

Our incident response plan includes immediate breach detection, containment procedures, and user notification protocols, with regular testing and updates.

International Transfers

We may transfer your personal data to countries outside your jurisdiction. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses, Binding Corporate Rules, and certified compliance frameworks. Each international transfer is conducted under strict protocols that ensure:
– Adequate data protection standards
– Compliant processing procedures
– Enforceable data subject rights
– Effective legal remedies

International transfers are protected by EU Standard Contractual Clauses, Privacy Shield Framework, and ISO 27001 certification, ensuring compliance with GDPR and regional data protection laws. We implement additional measures including:
– Regular compliance audits
– Data protection impact assessments
– Documented transfer mechanisms
– Continuous monitoring procedures

Regarding international transfers, you maintain specific rights including:
– Right to information about transfers
– Right to object to transfers
– Right to withdraw consent
– Right to data protection guarantees

Data Retention

We maintain specific retention periods for different data categories:

RETENTION PERIODS:
– Account Information: Retained for the duration of account activity plus 24 months after account closure for security and reactivation purposes
– Usage Data: Maintained for 12 months to support user experience optimization and trend analysis
– Transaction Records: Kept for 7 years to comply with financial regulations and tax requirements
– Communication History: Stored for 24 months to maintain support continuity and resolve disputes
– Technical Logs: Preserved for 6 months for security monitoring and system optimization

These retention periods are determined by:
– Legal requirements
– Business purposes
– Technical necessities
– User preferences

Special circumstances affecting retention:
– Legal obligations
– Dispute resolution
– Security investigationsCookie Policy for CaveDuck.net

Essential cookies serve fundamental functions for basic website operations. These cookies process authentication tokens, session data, and security parameters to enable core gaming features. For example, in our gaming context, these cookies maintain your login status while exploring different game worlds and save crucial security preferences to protect your gaming account.

Essential cookies are fundamental to website functionality. These cookies manage user authentication, maintain secure browsing sessions, and ensure technical stability. We use them specifically for:
– User authentication during gaming sessions
– Security measures to protect player accounts
– Basic site operations and game state management
– Session management for multiplayer features
– Technical stability across gaming platforms

Functional cookies enhance your gaming experience by remembering your preferences. They process user settings and interface choices to optimize your gameplay. For example, these cookies remember your preferred game difficulty settings and custom control configurations. They enable:
– Language preferences for game interface
– Region-specific content and server selection
– User interface customization
– Feature optimization for different devices
– Personalized gaming settings

Analytics cookies help us understand player behavior. They collect aggregate information about game interactions and player preferences to improve our services. They collect information about:
– Page interactions and game session data
– Navigation patterns through different game modes
– Feature usage in gaming environments
– Session duration and gameplay time
– User preferences for game content

Performance cookies assess and improve website operation by monitoring technical aspects of game delivery. They process performance metrics to ensure smooth gameplay by:
– Monitoring site speed and game responsiveness
– Identifying technical issues during gameplay
– Optimizing content delivery for gaming assets
– Analyzing user experience in different game modes
– Tracking system performance during peak gaming hours

Cookie Management

You can control your cookie preferences through:
– Browser settings configuration
– Cookie consent tools on our platform
– Privacy preferences in your gaming profile
– Account settings customization

GDPR Compliance

For EU residents, we ensure:
– Explicit consent mechanisms before cookie deployment
– Data minimization in gaming-related data collection
– Purpose limitation for collected information
– Storage limitations on gaming data
– Processing transparency in all operations

CCPA Compliance

California residents have additional rights:
– Right to know about personal information collected during gameplay
– Right to delete personal gaming data
– Right to opt-out of data sales
– Right to non-discrimination in gaming services
– Right to access collected information about gaming activities

COPPA Compliance

Regarding users under 13:
– Age verification requirements before account creation
– Parental consent procedures for young players
– Limited data collection from minor users
– Special protection measures for young gamers
– Parental access rights to minor accounts

Updates and Changes

Policy updates involve:
– Regular review procedures of gaming privacy practices
– User notifications of significant changes
– Consent renewal when required by law
– Clear change documentation
– Continuous compliance monitoring

Contact Information

For privacy-related inquiries:
– Primary Contact: [email protected]
– Response Time: Within 48 hours
– Verification Required: For data-related requests
– Available Support: Privacy concerns, data requests, rights exercise

This policy was created specifically for caveduck.net and covers all associated services within the gaming industry.