Privacy Policy

Last updated: August 1, 2026

This Privacy Policy explains how Morface ("we", "us", or "our"), operating as Morface Team, collects, processes, stores, and protects your personal data when you use our portal, launcher, and connected game services.

1. Data controller

The data controller is Morface Team. For any questions regarding your personal data, contact us at: morfaceapp@gmail.com.

2. What data we collect

We process the following categories of data:

Account data: Username, hashed password, Discord account ID (if linked).
Session data: Login timestamps, IP addresses, session tokens.
Usage data: Game activity, leaderboard scores, purchase history.
Cookie data: Authentication and preference cookies (see Cookie Policy).
Payment data: Stripe/PayPal session IDs and transaction references — we never store full card data.

3. Legal bases for processing (Art. 6 GDPR)

Contract performance (Art. 6(1)(b)) — account creation, game services, purchase fulfillment.
Legitimate interest (Art. 6(1)(f)) — service security, fraud/cheat prevention, statistical analysis.
Consent (Art. 6(1)(a)) — optional cookies and marketing communications.
Legal obligation (Art. 6(1)(c)) — financial record retention.

4. How we use your data

Your data is used to:

Operate and maintain the Service,
Authenticate users and manage accounts,
Process virtual currency purchases (Stripe/PayPal),
Display leaderboards and community features,
Ensure service stability and security,
Comply with legal obligations.

5. Data recipients (sub-processors)

We do not sell your personal data. Data may be shared with:

Stripe Payments Europe, Ltd. — payment processing (per Stripe's Privacy Policy),
PayPal (Europe) — PayPal payment processing,
Discord Inc. — when you link your Discord account or sign in via Discord,
Cloudflare, Inc. — infrastructure protection (CDN, WAF),
MaxMind, Inc. — IP geolocation to block selected regions,
Legal authorities — if required by law.

6. Data retention

Account data is retained for as long as your account is active. Usage and leaderboard data may be retained for statistical purposes after account deletion. Payment records are retained as required by financial regulations (typically 5 years). After these periods, data is deleted or anonymized.

7. Your rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

Right to access — obtain a copy of your personal data,
Right to rectification — correct inaccurate data,
Right to erasure — request deletion of your data (subject to legal retention),
Right to restrict processing,
Right to data portability — receive your data in a machine-readable format,
Right to object — to processing based on legitimate interest,
Right to withdraw consent at any time,
Right to lodge a complaint with a supervisory authority.

To exercise your rights, email morfaceapp@gmail.com. We respond within 30 days.

8. Data security

We apply technical and organizational safeguards: password hashing (bcrypt), TLS encryption, restricted data access, security monitoring, and infrastructure protection (Cloudflare).

9. International transfers

Some sub-processors (e.g., Discord, Cloudflare) may process data outside the EEA. Transfers are based on appropriate safeguards (EU Standard Contractual Clauses or adequacy decisions).

10. Cookies

We use essential cookies for authentication and session management. Optional analytics and preference cookies are only set with your consent. See our Cookie Policy for details.

More info: Terms · Server Rules