Template notice. Written as a realistic starting point, not legal advice. A lawyer should check it against what your service really stores before you publish.
The short version
We keep the least we can: an email address, a player name, and the technical data needed to route your traffic. We don't sell anything to anyone, we don't run ad networks, and we don't read what you send inside a room.
1. Who is responsible
LanOrbit SRL, Str. Exemplu 12, Sector 1, Bucharest, Romania, is the data controller. Our data protection contact is privacy@lanorbit.com.
2. What we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Account | Email, player name, password hash, region | You, when signing up |
| Connection | IP address, chosen node, latency and packet loss measurements, session start and end | Automatically, while the app runs |
| Usage | Which games you launch through the app, rooms joined, crash reports | The application |
| Communication | Chat messages and voice channel membership inside communities | You |
| Billing | Plan, invoices, last four digits of the card, billing country | Our payment provider |
| Website | Page views, approximate country, referrer | Cookies — see the cookie policy |
3. Why, and on what basis
- To run the service — account, connection and usage data. Basis: performance of our contract with you.
- To keep it working and safe — latency measurements, abuse reports, crash logs. Basis: our legitimate interest in a network that isn't abused.
- To take payments and issue invoices — billing data. Basis: contract and legal obligation.
- To measure how the website is used — analytics cookies. Basis: your consent, which you can withdraw at any time.
4. Game traffic
Traffic between players inside a room is encrypted end to end and relayed by our nodes. We can see that a session exists, how big it is and how long it lasts, because that is what routing requires. We do not store the contents of that traffic, and we cannot read it.
Voice is relayed, not recorded. Text chat inside communities is stored so you can read it later, and is deleted with the community or on request.
5. Who else sees it
Only processors who help us run the service, under contract, and only what they need:
- hosting and network providers in the EU;
- a payment provider for card processing and invoices;
- an email provider for password resets and service notices;
- an error reporting tool for crash logs.
We do not sell personal data and we do not share it with advertisers. We disclose data to authorities only when a valid legal request requires it, and we tell you unless we're legally barred from doing so.
6. How long we keep it
| Data | Kept for |
|---|---|
| Account details | Until you delete the account, then up to 30 days in backups |
| Connection logs with IP | 14 days |
| Aggregated latency statistics without IP | Indefinitely |
| Chat history | Until deleted by you or by the community owner |
| Invoices | 10 years, as Romanian accounting law requires |
7. Your rights
Under the GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to processing, and receive it in a portable format. Most of this is self-service in Account → Privacy; anything else, write to privacy@lanorbit.com and we answer within 30 days.
If you think we've handled your data badly, you can complain to the Romanian supervisory authority (ANSPDCP) or to the authority in your own country.
8. Security
Passwords are stored hashed with a modern algorithm. Traffic to the website and between the app and our nodes is encrypted in transit. Access to production systems is limited to the engineers who need it and is logged. If a breach happens that puts you at risk, we notify you and the authority within 72 hours.
9. Children
The service is not intended for children under 16. If we learn that an account belongs to a younger child without parental consent, we delete it.
10. Contact
privacy@lanorbit.com, or by post to the address above. Ask for "Data protection" and it reaches the right person.