Privacy Policy
This policy explains what data L2BOOST receives through l2boost.com and the game server, why it is used and how users can contact us about data processing.
1. Controller and scope
The L2BOOST administration operates the website and game server. This policy applies to l2boost.com, the account dashboard, game accounts, support requests and related project services.
2. Data we process
- game-account login and an irreversible password hash; plaintext passwords are not stored;
- IP address, browser and device details, login time and security logs;
- the essential authentication cookie, normally valid for 7 days;
- character name, class, level and online status;
- support-request text and processing history;
- order and payment-result data. Full card details are processed by the payment provider and are never received or stored by L2BOOST.
3. Purposes of processing
We use data to register and protect accounts, provide the dashboard and game services, fulfill orders, credit Coin of Luck, answer support requests, prevent fraud, fix errors and comply with legal obligations.
4. Legal bases
We process data to perform the Terms of Service, with user consent, to protect the legitimate interests of the project and its users, and when retention is required by law. Creating an account and selecting the relevant checkbox confirms that the user has read this policy.
5. Data sharing
Data may be shared only with hosting, payment and technical providers to the extent required to operate the service, or with public authorities when legally required. We do not sell personal data or use it for third-party advertising campaigns.
6. Retention and protection
- account and game data are retained while the account exists and the service requires them;
- sessions are deleted after expiration or logout;
- security logs are normally retained for up to 12 months;
- support requests are retained for up to 3 years after closure;
- payment and accounting information is retained for the period required by applicable law.
We use access restrictions, HTTPS, password hashing, administrative audit logs and backups. No security measure eliminates all risk, so users should choose a unique password and never share it.
7. User rights
Users may request access to, correction or deletion of their data, restriction of processing, or withdraw consent when processing is based on consent. Some data cannot be deleted immediately when it is needed to fulfill an order, maintain security or comply with law.
8. Cookies
The website uses only the essential l2boost_session cookie. It is required for the dashboard, is unavailable to JavaScript and is transmitted over a secure connection. Disabling it prevents authentication.
9. Contact and updates
For privacy questions, submit a request through the support ticket system and select “Personal data.” The current policy is always published at this address; its revision date appears at the top of the page.