PRIVACY POLICY

This website and the game sales process are operated by Xsolla (USA), Inc., which acts as the Merchant of Record. As a result your personal data is processed by two independent controllers:

• 1. Xsolla is the independent controller for payment processing, taxes, fraud prevention, and order fulfillment. For information on how Xsolla processes your transaction data, please refer to Xsolla's Privacy Policy.
• 2. AR Digital is the independent controller for marketing of our services and products (subject to your cookie consent) and for internal sales statistics (based on limited data provided by Xsolla, such as Order ID and country).

1. DATA CONTROLLER

The data controller of the following data subjects:

• (1) visitors and users of the www.store.taintedgrail.com website (further referred to as "Website");
• (2) visitors and users of the www.shardsoforder.awakenrealms.com website (further referred to as "Website");
• (3) persons who purchased our game via Xsolla platform (https://xsolla.com);

is AR Digital spółką z ograniczoną odpowiedzialnością (limited liability company) having its registered office at ul. Legnicka, 53-673 Wrocław, entered in the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the National Court Register, under the KRS number 0000771777, NIP (Tax ID No.): 8971863860, REGON (National Business Registry No.): 38257059500000, share capital: 201.000,00 PLN, further referred to as "AR Digital", "we", "us", "our", etc.

You can contact AR Digital with all questions related to your privacy at privacy@awakenrealms.com.

2. PURPOSES AND LEGAL BASIS FOR DATA PROCESSING

We process your personal data for the following purposes:

• (1) visitors and users of the Websites: - conducting marketing activities based on your cookies/pixels associated with visiting Websites (art. 6(1) (a) of the GDPR).

  Providing your personal data is not mandatory.

• (2) persons who purchased our game via Xsolla platform (https://xsolla.com): - keeping statistics on the countries from which our games were purchased (art. 6(1) (f) of the GDPR).

  Providing your personal data is not mandatory.

3. CATEGORIES OF DATA WE PROCESS

In case of:

• (1) visitors and users of the Websites: we process: metadata stored by cookies (provided you have consented to such storage);
• (2) persons who purchased our game via Xsolla platform (https://xsolla.com): we process: ID and country.

4. DATA RETENTION PERIOD

We store your personal data for the following period of time:

• (1) visitors and users of the Websites: we store information contained in cookie files for the period specified in section 8. COOKIES of this Privacy Policy;
• (2) persons who purchased our game via Xsolla platform (https://xsolla.com): we store the data necessary to keep our statistics for as long as is necessary, however not longer than 5 years.

5. DISCLOSURE OF YOUR PERSONAL DATA

We may disclose your personal data to:

• (1) visitors of the Websites:
  • IT services and systems providers, that we use to marketing purposes;
  • legal advisors and consultants to the extent such disclosure is necessary for our use of their services;
• (2) persons who purchased our game via Xsolla platform (https://xsolla.com):
  • IT services and systems providers;
  • legal advisors and consultants to the extent such disclosure is necessary for our use of their services;

6. YOUR RIGHTS

In relation to our processing of your personal data, you have the right to:

Access your data: You have the right to access the information that we have on you. If you choose to exercise this right, upon your request, we will also make sure to provide you with a copy of the data we process about you and information about how we process them.

Rectification of data, erasure and restriction of processing: If you believe that the information we have about you is incorrect, you are welcome to contact us, so we can update it and keep your data accurate. We will automatically delete information about you if it is no longer needed for the purposes it was collected for. Nonetheless, if at any point you wish for us to delete information about you, you have the right to do so.

Data portability: In case the processing of your personal data is based on your consent, you have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format.

Withdraw your consent and object to processing: If the processing of your data is based on a consent, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on this consent before its withdrawal.

Lodge a complaint to the data protection authority: If you think that your rights were not respected, you can always lodge a complaint to the President of the Polish Personal Data Protection Office.

7. AUTOMATED DECISION MAKING

We do not use any information you provide for automated decision-making purposes.

8. COOKIES

The tables below list all types of cookies that we use on our Websites:

Analytical Cookies (Google Analytics 4)

Advertising and Marketing Cookies (Google Ads)

Advertising Cookies (Meta Ads)

9. PERSONAL DATA TRANSFER OUTSIDE THE EEA

In connection with our use of various suppliers, your personal data may be transferred outside the European Economic Area on the basis of standard contractual clauses (Article 46(2)(c) GDPR)[cite: 259]. You can get more information by contacting us at: privacy@awakenrealms.com.

10. CHANGES TO THE POLICY

The provisions of the Privacy Policy are subject to improvements and changes, and the latest version will be published on the Website each time[cite: 262].