This is the Privacy Policy of Lionmoon UG (limited liability), (hereinafter referred to as "Lionmoon", "we" or "us"). We offer various games and the related services (collectively referred to as 'games', also 'services', 'offerings') through our websites and mobile applications ('mobile apps'). In this Privacy Policy statement we will inform you about the kind of personal data we collect in the course of your using our services, and how we process and use this data. Furthermore, we will inform you about how we protect your data, when it is deleted, and about your rights according to the data protection law.
1. Responsible entity for this offer
Lionmoon UG (limited liability)
Mittelstr. 42
68169 Mannheim
Deutschland
E-mail: legal@lionmoon.com
Website: www.lionmoon.com
2. Data processing: General information
The subject of data protection is personal data. According to Art. 4 No. 1 of the GDPR, this includes all information relating to an identified or identifiable natural person; this includes, for example, names or identification numbers.
Generally, we only process personal data that you provide when using our services. If you register as a user for our games, depending on the platform, you may need to provide an email address, a username, and/or a password. When using additional services, such as optional paid services within the games, it may be necessary to provide additional information, such as your full name and payment details.
Legal base for data processing
When you use our services, we will process personal data only with your consent according to Art. 6 (1) lit. a of the European General Data Protection Regulation ("GDPR"); for the fulfillment of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract (Art. 6 (1) lit. b GDPR); for compliance with a legal obligation (Art. 6 (1) lit. c GDPR); or if the processing is necessary for the purposes of our legitimate interests or of a third party, and if the interests, fundamental rights, and freedoms of the data subject do not prevail over the interests mentioned first (Art. 6 (1) lit. f GDPR).
3. Collection and use of data for the provision of our services
3.1. Games
Our games can be played via the website and/or mobile applications.
Collection of log files when visiting a website
Each time our website is accessed, our system automatically collects the following log files from the computer system of the accessing computer:
URL of the visited website, date and time of visits, IP address that you use to contact us, browser type and operating system.
We use the log files only for anonymous statistical evaluations. By doing so, no use of data related to personal identification takes place. Furthermore, we may use this data to ensure the operation, security and optimization of the services, as well as to be able to correctly display the contents of the website.
Furthermore, we reserve the right to review the log files if there is a founded suspicion of an abusive use based on concrete evidence (such as cyber attacks, manipulation attempts, use of accounts for fraudulent purposes) to ensure compliance with the Game Rules and the Terms of Use.
For these purposes, our legitimate and predominant interest in data processing is derived from Art. 6 (1) lit. f GDPR.
Downloading mobile apps
If you download our games as mobile apps or purchase items via an app store, you transmit certain information to this store (e.g. name, device ID, e-mail address and payment information). We have no influence on this data collection and are not responsible for it.
Account registration data
To be able to use all the functions of our games, you must register as a user. When registering and logging in as a user for our games, you may need to provide an e-mail address, a user name and password, if applicable.
This data is required to create and manage a user account for you and so that you can use all the features of our games. Last but not least, we also need this and, if necessary, other data in order to be able to respond to any queries you may have.
The data provided for user account registration is being transmitted via an encrypted connection. Also, the password is stored in encrypted form, which means that the actual password you provide, is not known to us. Furthermore, we collect the IP address of your device to identify the country you are based in. This data is stored to display you the correct range of payment methods. After creating a user account, your data will be stored until you decide to delete individual data or the entire user account. A delete function is integrated in your game account and can be used at any time under Settings / Account.
The legal basis for data processing is the service provision/fulfillment of the contract with you according to Art. 6 (1) lit. b GDPR.
Insofar as we process your data for the purpose of providing the functions of our games as described above, you are contractually obliged to provide us with this data. Without this data, we will not be able to provide you with these functions.
3.2. Inquiries to customer support
You can contact our customer support by e-mail (support at lionmoon.com). By sending an e-mail to us, we will receive the sender's e-mail address and the content of the message. In this case, the user's personal data transmitted by e-mail will be temporarily stored. The processing of personal data is solely used to process your inquiry.
The legal basis for the data processing is Art. 6 (1) lit. f GDPR. In case that the e-mail contact aims at concluding a contract or is used for the execution of an agreement, then additional legal basis for the processing is Art. 6 (1) lit. b GDPR.
3.3. Community functions
We offer various community functions in our games (e.g. chat, personal messages) which you can use to communicate with other users.
Please note that these areas may be publicly accessible depending on your settings and that any personal information you post in them may be viewed by others. We cannot control how other users of our games use this information. In particular, we cannot completely prevent that unsolicited messages in the game may be sent to you. However, if you do not wish to receive messages from a particular user, you can block them in the settings in your game account at any time.
We collect the data in the context of the community functions in order to be able to provide you with the community functions as intended, Art. 6 (1) lit. b GDPR.
3.4. Use of the game forums
You can use our game forum without providing personal information. However, in order to create a post, it is required to register a forum account where you need to provide a user name and an e-mail address. An account registration is required to prevent possible violations of our community guidelines. The legal basis for the storage of this data is Art. 6 (1) lit. b DSGVO.
Furthermore, when registering a forum account, your IP address will be collected and stored. We collect it for security and user support purposes, as well as for preventing fraudulent use and sanctioning serious violations. Legal basis for this is our legitimate interest according to Art. 6 (1) lit. f DSGVO. In cases in which we are legally obliged to pass on data, the legal basis for processing is Art. 6 (1) lit. c GDPR.
3.5. Newsletter
When registering a game account and thus concluding a user agreement, you may need to provide your e-mail address. At this address, we may not only send contractual communications, but also occasionally information about new games in our portfolio or adjustments to existing offers, such as game updates. In order to be able to send you a newsletter that suits you, we also use information such as the game you are using and the account name you have chosen. The e-mail service Mailgun/Sinch is used to send the newsletter.
For security reasons, we use the "double opt-in" procedure to ensure that the e-mail address provided in the course of the account registration actually belongs to you.
As a matter of course, you can unsubscribe from our newsletter at any time, an unsubscribe link is included in every newsletter. Alternatively, you can contact our customer support via email at support at lionmoon.com. After you have unsubscribed from the newsletter, your e-mail address will no longer be used to send you our newsletter.
The use of your e-mail address for the purpose of sending the newsletter is based on Art. 6 (1) lit. f GDPR and § 7 para. 3 UWG (German Law against Unfair Competition).
3.6. Cookies
In order to feature our offering of services in the most user-friendly, efficient and secure way, we use so-called cookies. Cookies are small text files which are stored on your computer and saved by your browser. We employ both so-called "session-cookies" and permanent cookies. We use "session cookies" to facilitate you a user-friendly navigation through our websites and/or games, or to facilitate your correct authentication. After your visit to our websites, the "session cookies" are automatically deleted from your hard drive. Permanent cookies are stored over a longer period of time on your hard drive. We can use them e.g. to enable an auto-login so that you can save your time when filling out forms and/or access our websites and/or games next time.
On our website we use the following three types of cookies:
-
Required cookies (we need them, for example, to display the website correctly and to save certain settings)
-
Functional cookies (these help us, for example, to evaluate the technical data of your visit and thus avoid error messages)
-
Advertising and analytic cookies (these allow the analysis of the user behavior and serve for advertising purposes).
The legal basis for the processing of personal data using cookies is Article 6 (1) lit. f GDPR
You can reject the acceptance of cookies or delete permanent cookies. For this, please follow the instructions of the manufacturer of your browser. Please note that in this case you may no longer be able to use our websites and/or games or only in a limited manner for technical reasons.
3.7. Push notifications
If you have activated the corresponding settings on your device, we can send push notifications to your mobile device to provide you with updates for our games and other relevant news. Such notifications will be displayed on your mobile device. You can manage push notifications on the "Settings" page in the mobile app or in the settings of your device.
The legal basis for the processing of the data is the fulfillment of the contract pursuant to Art. 6 (1) lit. b GDPR.
4. Use of third party services
4.1. Registration via third party services
We offer you an option to sign up for our services with login data of third party services (Facebook, Google, Apple, Steam). By doing so, an additional registration will not be required.
In such case, a registration for our services is carried out by one of these service providers. Hereby your profile with the respective service provider will be linked with our service. The service provider sends us the respective information relating to you, which exclusively serves quality assurance purposes, and is not shared with third parties at any time.
4.2. External payment services for billing processing
When initiating a payment in order to acquire premium currency, it is required to provide further data. The kind of data to be provided depends on the type of payment method you select. Payment processing is handled by external service providers, so-called payment providers. Payment providers collect and process personal data of the customer in their own responsibility for the purposes of payment processing. We use the payment services of the following providers: Apple; Steam; Google; Allopass/Mobiyo; Paypal; Adyen; Paysafe; Suraway.
The legal basis for data processing is Art. 6 (1) lit. b GDPR.
These providers are required to treat your data in compliance with the applicable laws, and in confidential and secure manner. Furthermore, they may use your data only to the extent that is necessary to carry out their task. In this respect, we refer you to the privacy policy of the respective provider.
In addition, we collect your IP address in order to identify the country you are located in. The legal basis of this data collection is Art. 6 (1) lit. c GDPR, as this data processing is required to fulfill a legal obligation. The legal obligation arises from the Directive 2006/112 / EC (MOSS Directive / Value Added Tax).
Furthermore, we may obtain information from payment providers to prevent payment fraud. The legal basis of this data collection is Art. 6 (1) lit. f GDPR, as such processing serves the legitimate interests of our company.
4.3. Facebook Pixel
Our websites uses Facebook pixel of Facebook Inc. (1601 S. California Ave., Palo Alto, CA 94304, USA) ("Facebook"). The Facebook pixel is a code snippet placed on our website. Via the Facebook pixel, you will be connected to the Facebook servers when you visit our website. If you are a Facebook member, Facebook may - if you have not objected to this in the privacy settings of your Facebook profile - associate this information with your Facebook profile, and use it for the targeted display of Facebook ads.
The use of the data is for the purpose of analyzing the user behavior on our pages and improving our service. For these purposes, our legitimate interest in the processing of data is based on Art. 6 (1) lit. f GDPR.
Detailed information on the collection and use of your data by Facebook, and your rights and options in this regard you can find in the privacy policy of Facebook: https://www.facebook.com/about/privacy/update.
You may object to the capture by the Facebook pixel and use of your data to display Facebook Ads at the following address: https://www.facebook.com/settings?tab=ads.
Facebook is certified under the Privacy Shield Agreement and therefore offers a guarantee of compliance with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
4.4. Google Analytics
Our websites use Google Analytics, a web analytics service provided by Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies", which are text files placed on the user's computer, to help to analyze how users use these websites. The information generated by the cookie about the use of these websites by the user (including the user's IP address) will generally be transmitted to and stored by Google on a server in the United States. Through activating the IP anonymizer on these websites, however, your IP address will be shortened beforehand by Google within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the whole IP address be transferred to a Google server in the USA and shortened there.
Google will use this information for the purpose of evaluating your use of the websites, to assemble reports on website activity for website operators and provide other services relating to website activity and Internet usage.
Google will not associate your IP address as transmitted by Google Analytics with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of these websites. You can, at any time with effect for the future, object to the collection and storing of data for the purpose of web analysis by installing the browser add-on to deactivate Google Analytics. (http://tools.google.com/dlpage/gaoptout?hl=en).
Google is certified under the Privacy Shield Agreement and therefore offers a guarantee of compliance with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
The legal basis for the use of this service is Art. 6 (1) lit. f GDPR. The use of the data is for the purpose of analyzing the user behavior on our pages and improving our service.
4.5. Google Web Font
In order to ensure font consistency, we use web fonts provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA on our website. When you open a web page, your browser loads the required web fonts into your browser cache in order to properly display text and fonts. For this, your browser needs to connect to Google's servers. This allows Google to know that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a consistent and appealing presentation of our services. This constitutes a legitimate interest according to Art. 6 (1), lit. f GDPR. If your browser does not support web fonts, your computer will use a default font. For further information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and the Google data protection policy at https://www.google.com/policies/privacy/.
4.6. Use of Social Plugins
Our websites may use social plugins of social networks such as, for example, Facebook or X (formerly Twitter).
If you visit a website of our online offer that contains such a plugin, the respective plugin will be activated and a connection to the servers of the corresponding social network will be established. It will herewith be transmitted to the server of the respective social network which of our websites you have visited. Provided that you click one of the aforementioned links while visiting our website, and are logged into your personal account at the respective social network, the respective social network can associate your visit to the website with your social network account. When interacting with the plugins (e.g. by clicking the button "Like" on Facebook or entering a comment), the corresponding information can be associated with your user account with the respective social network , which you can prevent by logging out of your account before you start using the plugins.
For further questions pertaining to the collection and use of data by social networks, as well as regarding your rights and possibilities to protect your privacy, you will find in the privacy declarations of the respective social networks.
The purpose of the data transfer is the integration of the plugins so that the users can share content with each other, the legal basis for this is Art. 6 (1) lit. f GDPR.
5. Deletion of data and duration of storage
We delete your personal data as soon as it is no longer required for the purposes for which we collected or used it in accordance with the above paragraphs. As a rule, we store your personal data for the duration of the contract for the use of our games, plus a period of 7 days, during which we store backup copies after deletion, unless this data is required for longer for legal reasons or for criminal prosecution or to secure, assert or enforce legal claims. If data must be retained for legal reasons, it will no longer be available for further use.
6. Data transfer to third parties
As a rule, your personal data may only be shared without your express prior consent in the cases listed below:
-
If it is necessary to investigate unlawful use of our services or for legal prosecution, personal data will be forwarded to law enforcement authorities and, if applicable, to affected third parties. However, this will only occur if there are specific indications of illegal or abusive behavior. Data may also be shared if it serves to enforce terms of use or other agreements. Additionally, we are legally obligated to provide information to certain public authorities upon request. These include law enforcement agencies, authorities responsible for prosecuting regulatory offenses subject to fines, and tax authorities.
The transfer of this data is based on our legitimate interest in combating abuse, prosecuting criminal offenses, and securing, asserting, and enforcing claims, provided that your rights and interests in the protection of your personal data do not outweigh these interests, in accordance with Art. 6(1) lit. f GDPR. Alternatively, it may be based on a legal obligation under Art. 6(1) lit. c GDPR.
-
We rely on contractually affiliated third-party companies and external service providers ("processors") to provide our services. In such cases, personal data is shared with these processors to enable further processing by them. These processors primarily include service providers handling payment transactions. Additionally, we collaborate with selected service providers that provide data centers or platforms for sending our newsletters. We carefully select and regularly review these processors to ensure that your rights are protected. The processors are only permitted to use the data for the purposes specified by us and are contractually obligated to handle your data exclusively in accordance with this privacy policy and German data protection laws.
The transfer of data to external service providers is based on Art. 28(1) GDPR or, alternatively, on our legitimate interest in the economic and technical benefits associated with using specialized processors, provided that your rights and interests in the protection of your personal data do not outweigh these interests, in accordance with Art. 6(1) lit. f GDPR.
7. Data security
We protect your data against unauthorized access and loss by means of various technical and contractual measures. For this, we have applied the necessary technical and organizational measures. This includes, for example, that we do not collect any clear names and address data, and that respective game accounts are operated using pseudonyms. In addition, we limit the collection and storage of personal data to the minimum required, and encrypt data as far as possible. This applies accordingly for the input and transmission of personal data in the context of the registration of a game account and its use. For payment transactions, your data is encrypted using the SSL method.
8. Links to third party sites
Our offer may contain links to external pages of third parties. By clicking on those links you abandon our websites and will be redirected to websites of third parties, for whose contents, observance of data protection and for whose privacy policy we are not responsible. This Privacy Policy only applies to our website, but not to websites of third parties. We therefore recommend you to carefully read privacy policies of the linked websites.
9. Your rights
As the person concerned within the meaning of the GDPR, you are entitled to exercise your rights against us. In particular, you have the following rights:
a) Right to information according to Art. 15 GDPR: you can request that we provide you with a confirmation of whether and in what scope personal data concerning you are being processed by us.
b) Right to rectification according to Art. 16 GDPR: you have the right to request that we rectify and/or complete your data, provided that the processed personal data concerning you is incorrect or incomplete.
c) Deletion: you have the right to request the deletion of your personal data in accordance with Art. 17 GDPR.
d) Restriction of processing: to the degree stipulated in Art. 18 GDPR, you may claim the restriction of the processing of the personal data concerning you.
e) Data portability according to Art. 20 GDPR: you have the right to receive the personal data concerning you which you have provided to us, in a structured, accessible, and machine readable format.
f) Right to object according to Art. 21 GDPR: you have the right to object to your personal data processing on grounds relating to your particular situation, at any time, according to Art. 6 (1) lit. (f) GDPR, whereas the data was collected on the basis of our legitimate interest. If you have such a right of objection and exercise it against us, we will no longer process your data.
g) Right to lodge a complaint by a regulatory authority according to Art. 77 Abs. 1 GDPR: you have the right to lodge a complaint to a competent regulatory authority if you believe that the processing of your data by us violates the data protection laws.
10. Final provisions
We reserve the right to adjust this Privacy Policy at any time should this become necessary to correct errors, supplement information, or for legal reasons.
This Privacy Policy is valid as of 19 February 2025
