Privacy & Data Protection Policies ================================== Privacy responsibilities, data handling, and account information. Policy date: 2025-03-08 5. Privacy & Data Protection Policies Santae is committed to protecting user privacy and ensuring secure handling of personal data. These policies outline how data is collected, stored, used, and protected in compliance with global privacy standards, including: General Data Protection Regulation (GDPR) Children’s Online Privacy Protection Act (COPPA) California Consumer Privacy Act (CCPA) For detailed information on privacy rights, data handling, and compliance policies, please review our: Privacy Policy Terms of Service & Policy 5.1 Data Security & Protection Measures To safeguard user accounts, personal information, and transaction data, Santae enforces strict security measures. 5.1.1 GDPR & COPPA Compliance Santae fully complies with GDPR, ensuring transparent data collection and user control over personal data. ~ General Data Protection Regulation (GDPR) Santae complies with COPPA, meaning users under the age of 13 must have parental consent to register and use the platform. ~ Children’s Online Privacy Protection Act (COPPA) Users have the right to request access to their personal data, corrections, or deletion. 5.1.2 How Santae Protects Your Data Santae implements robust security measures to prevent data breaches, unauthorized access, and fraud. Encryption & Secure Storage: All personal data, including passwords and payment details, is encrypted and stored on secure servers. Sensitive information is never stored in plaintext. Limited Data Access: Only authorized Santae staff can access necessary user information (e.g., for support requests). Staff cannot view passwords and will never ask for them. Account Protection & Monitoring: Automated fraud detection monitors for suspicious activity (e.g., unauthorized logins). Users may receive alerts if unusual account activity is detected. Third-Party Data Protection: Santae never sells or shares personal data with third parties for advertising purposes. External services (e.g., payment processors) must comply with strict data protection agreements. 5.2 User Data Collection & Usage Santae only collects data necessary for gameplay, security, and community engagement. 5.2.1 What Data Does Santae Collect? Santae collects the following types of user data: Account Information: Username, email, IP address (for security & moderation purposes). Passwords (encrypted). Gameplay Data: In-game progress, trade history, marketplace transactions. Event participation and item ownership. Communication Data: Support tickets, forum messages, in-game chat logs (for moderation). Purchase Data: Payment transaction details (Santae does not store full payment information—handled by third-party processors). Cookies & Tracking: Santae uses cookies to improve user experience (e.g., saving login sessions). Tracking for personalized in-game recommendations (NOT for external advertising). Santae does NOT collect: Real-world address or phone numbers. Biometric or health-related data. Any personal data beyond what is required for game functionality. 5.3 User Rights & Data Control Users have full control over their personal data and can request data access, correction, or deletion. 5.3.1 Accessing & Updating Personal Data Users can update account information (email, username, password) in settings. If users need assistance updating their data, they can submit a support ticket. 5.3.2 Requesting Account Deletion Users have the right to request full account deletion if they choose to stop using Santae. How to request deletion: 1. Submit a support ticket under “Account Deletion Request.” 2. Confirm identity (email verification required). 3. Santae will process the deletion within 14 business days (as per GDPR regulations). What happens after deletion? All personal data will be erased permanently. Gameplay progress, items, currency, and forum posts will be deleted or anonymized. Deleted accounts cannot be recovered. *Exception: Some transactional data (e.g., past purchases) may be retained for legal purposes (e.g., fraud prevention). 5.4 Security Best Practices for Users To ensure maximum account security, users should follow these guidelines: 5.4.1 Password Security Use a strong password with a mix of uppercase/lowercase letters, numbers, and symbols. Do NOT reuse passwords from other sites. Change your password regularly to prevent unauthorized access. Enable two-factor authentication (2FA) when available. *Santae Staff will NEVER ask for your password! If someone claims to be staff and asks for your password, report them immediately. 5.4.2 Protecting Against Phishing & Scams Only enter login details on Santae’s official website (https://www.santae.net). Do NOT click on suspicious links in emails, Discord, or other platforms. If unsure about an email from Santae, contact support for verification. 5.4.3 What to Do If Your Account is Compromised If you suspect unauthorized access to your account: 1. Immediately change your password. 2. Check for unusual trades or missing items. 3. Submit a support ticket for further investigation. *Santae may temporarily suspend compromised accounts to prevent further damage while investigating. 5.5 Data Sharing & Third-Party Services Santae does not share user data with external advertisers but may use third-party services for essential functions (e.g., payment processing, analytics). Secure Payment Processing: Payments are handled by trusted third-party payment processors (e.g., PayPal, Stripe). Santae never stores full credit card details. Internal Analytics & Anti-Fraud Measures: Santae may collect game analytics (e.g., login times, item transactions) to improve gameplay balance. Fraud detection systems monitor suspicious behavior. *Santae will never sell user data or allow third-party tracking beyond essential services. 5.6 Breach Notification Policy Although Santae employs high-level security measures, data breaches may still occur. In the event of a breach: Santae will notify affected users via email ASAP (as required by GDPR). Steps will be taken to secure compromised accounts (e.g., forced password resets). Affected users will be advised on additional security measures. Santae is committed to protecting user privacy and ensuring a secure, transparent, and fair gaming environment. We will NEVER: Sell your data to third parties. Ask for your password. Store unnecessary personal information. You have full control over your data and can request: Access to account data. Corrections to your information. Permanent deletion of your account.