Privacy Policy

1. Introduction

L2ForgeZone ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our extension sales platform, website, customer account portal, Discord integration, and related services (the "Services").

L2ForgeZone is a B2B service provider that sells premium extensions and services to Lineage 2 server owners. We do not operate a game server; we provide extensions and services for server owners to use on their own servers.

By using our Services, you agree to the collection and use of information in accordance with this policy.

2. Third-Party Affiliation Disclaimer

3. Information We Collect

3.1 Account Information

When you create a customer account, we collect:

• Username: Your chosen account username
• Password: Encrypted and hashed (we cannot see your actual password)
• Email Address: For account recovery and important notifications
• IP Address: For security, fraud prevention, and server management

3.2 Discord Integration Data

When you link your Discord account, we collect:

• Discord User ID: A unique identifier from Discord
• Discord Username: For display purposes and customer support
• OAuth2 Access Token: Temporary token for API communication (stored securely)

This data is used solely for customer support, account verification, and providing access to support channels.

3.3 Purchase & Transaction Data

When you make purchases, we collect:

• Transaction Records: Purchase history, transaction IDs, amounts, and dates
• Extension Licenses: Information about purchased extensions and licenses
• Account Credits: Credit balance and transaction history

3.4 Payment Information

For product purchases:

• Payment Processor Data: We use Stripe and PayPal; they handle all payment details
• We DO NOT store: Credit card numbers, CVV codes, or banking information
• We DO store: Transaction IDs, purchase amounts, product delivery status, and purchase history
• Product Sales: All transactions are product purchases (extensions, credits, services)

3.5 Technical & Analytics Data

• Browser type and version
• Device information
• Connection data (timestamps, session duration)
• Error logs and crash reports (for service improvement)
• Website usage patterns (anonymized, for improving user experience)

4. How We Use Your Information

Purpose	Data Used
Account Management	Username, password, email, IP address
Extension Sales & Licensing	Purchase history, transaction records, license information
Discord Integration	Discord ID, username (for customer support access)
Security & Fraud Prevention	IP addresses, login attempts, transaction patterns
Purchase Processing	Transaction IDs, purchase amounts, account names, payment method
Customer Support	Email, account data, purchase history, support tickets
Service Improvement	Analytics, error logs, website usage patterns (anonymized)

5. Data Sharing & Third Parties

We only share data with:

• Payment Processors: Stripe and PayPal (for purchase processing only)
• Discord: For customer support access and account verification (via official Discord API)
• Hosting Providers: Server infrastructure providers (data is encrypted)
• Legal Authorities: Only if required by law or to prevent illegal activities

6. Data Storage & Security

6.1 Security Measures

• Password Encryption: All passwords are hashed using SHA-1 with salts
• SSL/TLS: All web traffic is encrypted via HTTPS
• Access Control: Database access is restricted to essential systems only
• Regular Backups: Daily automated backups with encryption
• Server Monitoring: Continuous intrusion detection and logging

6.2 Data Retention

• Active Accounts: Data retained as long as account is active
• Inactive Accounts: May be archived after 12 months of inactivity
• Discord Links: Stored until you manually unlink your Discord account
• Transaction Records: Kept for 7 years for accounting/legal purposes
• Purchase History: Retained indefinitely for customer records and support
• Support Communications: Retained for 2 years for quality assurance and dispute resolution

7. Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, we are committed to transparency and will take immediate action to address the situation.

7.1 Our Response Process

In the event of a data breach, we will:

• Immediately Investigate: Take immediate steps to contain and investigate the breach
• Assess the Risk: Evaluate the nature and extent of the breach and the risk to affected users
• Notify Authorities: Report the breach to relevant supervisory authorities as required by law (within 72 hours under GDPR, if applicable)
• Notify Affected Users: Inform affected users without undue delay if the breach poses a high risk to their rights and freedoms
• Remediate: Take appropriate measures to prevent future breaches and address any vulnerabilities

7.2 What We Will Tell You

If you are affected by a data breach, we will notify you and provide information about:

• The nature of the breach and what happened
• What personal data was compromised
• The likely consequences of the breach
• The measures we have taken or propose to take to address the breach
• Recommendations for steps you should take to protect yourself (such as changing passwords)
• How to contact us for more information

7.3 How We Will Notify You

We will notify affected users through the most appropriate means available, which may include:

• Email to the email address associated with your account
• Notification through our Discord support channels (if you have linked your Discord account)
• Public announcement on our website (for major breaches affecting many users)

8. Your Privacy Rights

You have the following rights regarding your data:

7.1 Access

You can request a copy of all personal data we hold about you.

7.2 Correction

You can update your email address and password via the account management page.

7.3 Deletion

You can request account deletion. Note: This will permanently delete your account, purchase history, and all associated data. Transaction records may be retained for legal/accounting purposes as required by law.

7.4 Discord Unlinking

You can unlink your Discord account at any time from the account management page.

7.5 Data Portability

You can request an export of your account data, including purchase history and transaction records, in a machine-readable format.

9. Cookies & Tracking

Our website uses minimal cookies:

• Session Cookie: To keep you logged into your account (essential)
• No Tracking: We do NOT use Google Analytics or third-party trackers
• No Advertising: We do NOT use advertising cookies

10. Children's Privacy

Our Services are intended for users aged 16 and older. We do not knowingly collect personal information from anyone under 16 years of age.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our Services after changes constitutes acceptance of the updated policy. Major changes will be announced via Discord, email, and our website.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data:

• Discord: Discord Support
• Email: Email Support